RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

openvpn patch from dan: Openvpn connects to cache ports and stores files in nfs and cifs directories.

This commit is contained in:
Chris PeBenito 2009-09-02 09:24:10 -04:00
parent 93be4ba581
commit f2f296ba60
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
policy/modules/services/openvpn.te
View File

@ -1,5 +1,5 @@
policy_module(openvpn, 1.8.1) policy_module(openvpn, 1.8.2)
######################################## ########################################
# #
@ -87,6 +87,7 @@ corenet_tcp_bind_openvpn_port(openvpn_t)
corenet_udp_bind_openvpn_port(openvpn_t) corenet_udp_bind_openvpn_port(openvpn_t)
corenet_tcp_connect_openvpn_port(openvpn_t) corenet_tcp_connect_openvpn_port(openvpn_t)
corenet_tcp_connect_http_port(openvpn_t) corenet_tcp_connect_http_port(openvpn_t)
corenet_tcp_connect_http_cache_port(openvpn_t)
corenet_rw_tun_tap_dev(openvpn_t) corenet_rw_tun_tap_dev(openvpn_t)
corenet_sendrecv_openvpn_server_packets(openvpn_t) corenet_sendrecv_openvpn_server_packets(openvpn_t)
corenet_sendrecv_openvpn_client_packets(openvpn_t) corenet_sendrecv_openvpn_client_packets(openvpn_t)
@ -115,6 +116,16 @@ tunable_policy(`openvpn_enable_homedirs',`
userdom_read_user_home_content_files(openvpn_t) userdom_read_user_home_content_files(openvpn_t)
') ')
tunable_policy(`openvpn_enable_homedirs && use_nfs_home_dirs',`
fs_read_nfs_files(openvpn_t)
fs_read_nfs_symlinks(openvpn_t)
')
tunable_policy(`openvpn_enable_homedirs && use_samba_home_dirs',`
fs_read_cifs_files(openvpn_t)
fs_read_cifs_symlinks(openvpn_t)
')
optional_policy(` optional_policy(`
daemontools_service_domain(openvpn_t, openvpn_exec_t) daemontools_service_domain(openvpn_t, openvpn_exec_t)
') ')