## Smart disk monitoring daemon.
#######################################
##
## Read smartmon temporary files.
##
##
##
## Domain allowed access.
##
##
#
interface(`smartmon_read_tmp_files',`
gen_require(`
type fsdaemon_tmp_t;
')
files_search_tmp($1)
allow $1 fsdaemon_tmp_t:file read_file_perms;
')
########################################
##
## All of the rules required to
## administrate an smartmon environment.
##
##
##
## Domain allowed access.
##
##
##
##
## Role allowed access.
##
##
##
#
interface(`smartmon_admin',`
gen_require(`
type fsdaemon_t, fsdaemon_tmp_t, fsdaemon_runtime_t;
type fsdaemon_var_lib_t, fsdaemon_initrc_exec_t;
')
allow $1 fsdaemon_t:process { ptrace signal_perms };
ps_process_pattern($1, fsdaemon_t)
init_startstop_service($1, $2, fsdaemon_t, fsdaemon_initrc_exec_t)
files_list_tmp($1)
admin_pattern($1, fsdaemon_tmp_t)
files_list_runtime($1)
admin_pattern($1, fsdaemon_runtime_t)
files_list_var_lib($1)
admin_pattern($1, fsdaemon_var_lib_t)
')