From 4a4436a7787e3412291c6038179b65d0499ee7f1 Mon Sep 17 00:00:00 2001
From: Chris PeBenito
+## Example client being able to connect to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:tcp_socket create_stream_socket_perms; +## corenet_tcp_sendrecv_generic_if(myclient_t) +## corenet_tcp_sendrecv_generic_node(myclient_t) +## corenet_tcp_sendrecv_all_ports(myclient_t) +## corenet_tcp_connect_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Example client being able to send to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:udp_socket create_socket_perms; +## corenet_udp_sendrecv_generic_if(myclient_t) +## corenet_udp_sendrecv_generic_node(myclient_t) +## corenet_udp_sendrecv_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Example client being able to connect to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:tcp_socket create_stream_socket_perms; +## corenet_tcp_sendrecv_generic_if(myclient_t) +## corenet_tcp_sendrecv_generic_node(myclient_t) +## corenet_tcp_sendrecv_all_ports(myclient_t) +## corenet_tcp_connect_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Example client being able to send to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:udp_socket create_socket_perms; +## corenet_udp_sendrecv_generic_if(myclient_t) +## corenet_udp_sendrecv_generic_node(myclient_t) +## corenet_udp_sendrecv_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Example client being able to connect to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:tcp_socket create_stream_socket_perms; +## corenet_tcp_sendrecv_generic_if(myclient_t) +## corenet_tcp_sendrecv_generic_node(myclient_t) +## corenet_tcp_sendrecv_all_ports(myclient_t) +## corenet_tcp_connect_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Example client being able to send to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:udp_socket create_socket_perms; +## corenet_udp_sendrecv_generic_if(myclient_t) +## corenet_udp_sendrecv_generic_node(myclient_t) +## corenet_udp_sendrecv_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
## ## ##+## Connect TCP sockets to all ports +##
+##+## Related interfaces: +##
+##+## Example client being able to connect to all ports over +## generic nodes, without labeled networking: +##
+##+## allow myclient_t self:tcp_socket create_stream_socket_perms; +## corenet_tcp_sendrecv_generic_if(myclient_t) +## corenet_tcp_sendrecv_generic_node(myclient_t) +## corenet_tcp_sendrecv_all_ports(myclient_t) +## corenet_tcp_connect_all_ports(myclient_t) +## corenet_all_recvfrom_unlabeled(myclient_t) +##
+##