selinux-refpolicy/policy/support/ipc_patterns.spt

#
# unix domain socket patterns
#
# Parameters:
# 1. source domain type
# 2. container (directory) type
# 3. socket type
# 4. target domain type
#
define(`stream_connect_pattern',`
	allow $1 $2:dir search_dir_perms;
	allow $1 $3:sock_file write_sock_file_perms;
	allow $1 $4:unix_stream_socket connectto;
')

define(`dgram_send_pattern',`
	allow $1 $2:dir search_dir_perms;
	allow $1 $3:sock_file write_sock_file_perms;
	allow $1 $4:unix_dgram_socket sendto;
')
merge policy patterns to trunk 2006-12-12 20:08:08 +00:00			`#`
			`# unix domain socket patterns`
			`#`
update policy/support macros - add systemd service macro sets - add some documentation - add some recursion to some macro sets (ipv perm, object class sets) - deprecate domain_trans and domain_auto_trans - remove unpriv_socket_class_set 2016-12-01 17:12:34 +00:00			`# Parameters:`
			`# 1. source domain type`
			`# 2. container (directory) type`
			`# 3. socket type`
			`# 4. target domain type`
			`#`
merge policy patterns to trunk 2006-12-12 20:08:08 +00:00			define(`stream_connect_pattern',`
			`allow $1 $2:dir search_dir_perms;`
trunk: add open perm to sock_file. 2009-03-11 14:58:03 +00:00			`allow $1 $3:sock_file write_sock_file_perms;`
merge policy patterns to trunk 2006-12-12 20:08:08 +00:00			`allow $1 $4:unix_stream_socket connectto;`
			`')`

			define(`dgram_send_pattern',`
			`allow $1 $2:dir search_dir_perms;`
trunk: add open perm to sock_file. 2009-03-11 14:58:03 +00:00			`allow $1 $3:sock_file write_sock_file_perms;`
merge policy patterns to trunk 2006-12-12 20:08:08 +00:00			`allow $1 $4:unix_dgram_socket sendto;`
			`')`