RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

samba: Move service interface definitions. 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2021-01-28 11:27:54 -05:00
parent ac5b8737fd
commit 5d29c35b89
1 changed files with 76 additions and 76 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

152
policy/modules/services/samba.if
View File

@ -328,6 +328,82 @@ interface(`samba_read_share_files',`
read_files_pattern($1, samba_share_t, samba_share_t)
')
########################################
## <summary>
## start samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_start',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service start;
')
########################################
## <summary>
## stop samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_stop',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service stop;
')
########################################
## <summary>
## get status of samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_status',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service status;
')
########################################
## <summary>
## reload samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_reload',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service reload;
')
########################################
## <summary>
## Search samba var directories.
@ -729,79 +805,3 @@ interface(`samba_admin',`
files_list_tmp($1)
admin_pattern($1, { swat_tmp_t smbd_tmp_t winbind_tmp_t })
')
########################################
## <summary>
## start samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_start',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service start;
')
########################################
## <summary>
## stop samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_stop',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service stop;
')
########################################
## <summary>
## get status of samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_status',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service status;
')
########################################
## <summary>
## reload samba daemon
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`samba_reload',`
gen_require(`
type samba_unit_t;
')
allow $1 samba_unit_t:file getattr;
allow $1 samba_unit_t:service reload;
')