30 lines
825 B
Plaintext
30 lines
825 B
Plaintext
|
#DESC jabberd - Jabber daemon
|
||
|
|
#
|
||
|
|
# Author: Colin Walters <walters@verbum.org>
|
||
|
|
# X-Debian-Packages: jabber
|
||
|
|
|
||
|
|
daemon_domain(jabberd)
|
||
|
|
logdir_domain(jabberd)
|
||
|
|
var_lib_domain(jabberd)
|
||
|
|
|
||
|
|
allow jabberd_t jabber_client_port_t:tcp_socket name_bind;
|
||
|
|
allow jabberd_t jabber_interserver_port_t:tcp_socket name_bind;
|
||
|
|
|
||
|
|
allow jabberd_t etc_t:lnk_file read;
|
||
|
|
allow jabberd_t { etc_t etc_runtime_t }:file { read getattr };
|
||
|
|
|
||
|
|
# For SSL
|
||
|
|
allow jabberd_t random_device_t:file r_file_perms;
|
||
|
|
|
||
|
|
can_network_server(jabberd_t)
|
||
|
|
can_ypbind(jabberd_t)
|
||
|
|
|
||
|
|
allow jabberd_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
allow jabberd_t self:unix_stream_socket create_socket_perms;
|
||
|
|
allow jabberd_t self:fifo_file { read write getattr };
|
||
|
|
|
||
|
|
allow jabberd_t self:capability dac_override;
|
||
|
|
|
||
|
|
# allow any user domain to connect to jabber
|
||
|
|
can_tcp_connect(userdomain, jabberd_t)
|