RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-02-10 00:27:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add interface to get status of iptables service

Browse Source 
Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
Sugar, David 2019-01-07 19:50:23 +00:00 committed by Chris PeBenito
parent e8ba31557d
commit 43a77c30fa
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/system/iptables.if
View File

@ -183,6 +183,25 @@ interface(`iptables_dontaudit_read_pids',`
dontaudit $1 iptables_runtime_t:file read;
')
########################################
## <summary>
## Allow specified domain to get status of iptables service
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`iptables_status',`
gen_require(`
type iptables_unit_t;
class service status;
')
allow $1 iptables_unit_t:service status;
')
########################################
## <summary>
## All of the rules required to