Adding dontaudit interfaces in sysnet

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2012-03-22 21:10:13 +01:00 committed by Chris PeBenito
parent cb29c82a28
commit 2260ef56f8
1 changed files with 19 additions and 0 deletions

View File

@ -64,6 +64,25 @@ interface(`sysnet_dontaudit_use_dhcpc_fds',`
dontaudit $1 dhcpc_t:fd use; dontaudit $1 dhcpc_t:fd use;
') ')
########################################
## <summary>
## Do not audit attempts to read/write to the
## dhcp unix stream socket descriptors.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`sysnet_dontaudit_rw_dhcpc_unix_stream_sockets',`
gen_require(`
type dhcpc_t;
')
dontaudit $1 dhcpc_t:unix_stream_socket { read write };
')
######################################## ########################################
## <summary> ## <summary>
## Send a SIGCHLD signal to the dhcp client. ## Send a SIGCHLD signal to the dhcp client.