#DESC Transproxy - Transparent proxy for web access
#
# Author:  Russell Coker <russell@coker.com.au>
# X-Debian-Packages: transproxy
#

#################################
#
# Rules for the transproxy_t domain.
#
# transproxy_exec_t is the type of the transproxy executable.
#
daemon_domain(transproxy)

type transproxy_port_t, port_type;

# Use the network.
can_network_server_tcp(transproxy_t)
allow transproxy_t transproxy_port_t:tcp_socket name_bind;

#allow transproxy_t self:fifo_file { read write };
allow transproxy_t self:unix_stream_socket create_socket_perms;
allow transproxy_t self:unix_dgram_socket create_socket_perms;

# Use capabilities
allow transproxy_t self:capability { setgid setuid };
#allow transproxy_t self:process setsched;

#allow transproxy_t proc_t:file r_file_perms;

# read config files
allow transproxy_t etc_t:lnk_file read;
allow transproxy_t etc_t:file { read getattr };

#allow transproxy_t etc_t:dir r_dir_perms;

#read_sysctl(transproxy_t)