## Smokeping network latency measurement. ######################################## ## ## Execute a domain transition to run smokeping. ## ## ## ## Domain allowed to transition. ## ## # interface(`smokeping_domtrans',` gen_require(` type smokeping_t, smokeping_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, smokeping_exec_t, smokeping_t) ') ######################################## ## ## Execute smokeping init scripts in ## the initrc domain. ## ## ## ## Domain allowed to transition. ## ## # interface(`smokeping_initrc_domtrans',` gen_require(` type smokeping_initrc_exec_t; ') init_labeled_script_domtrans($1, smokeping_initrc_exec_t) ') ######################################## ## ## Read smokeping pid files. (Deprecated) ## ## ## ## Domain allowed access. ## ## # interface(`smokeping_read_pid_files',` refpolicywarn(`$0($*) has been deprecated.') ') ######################################## ## ## Create, read, write, and delete ## smokeping pid files. (Deprecated) ## ## ## ## Domain allowed access. ## ## # interface(`smokeping_manage_pid_files',` refpolicywarn(`$0($*) has been deprecated.') ') ######################################## ## ## Get attributes of smokeping lib files. ## ## ## ## Domain allowed access. ## ## # interface(`smokeping_getattr_lib_files',` gen_require(` type smokeping_var_lib_t; ') files_search_var_lib($1) getattr_files_pattern($1, smokeping_var_lib_t, smokeping_var_lib_t) ') ######################################## ## ## Read smokeping lib files. ## ## ## ## Domain allowed access. ## ## # interface(`smokeping_read_lib_files',` gen_require(` type smokeping_var_lib_t; ') files_search_var_lib($1) read_files_pattern($1, smokeping_var_lib_t, smokeping_var_lib_t) ') ######################################## ## ## Create, read, write, and delete ## smokeping lib files. ## ## ## ## Domain allowed access. ## ## # interface(`smokeping_manage_lib_files',` gen_require(` type smokeping_var_lib_t; ') files_search_var_lib($1) manage_files_pattern($1, smokeping_var_lib_t, smokeping_var_lib_t) ') ######################################## ## ## All of the rules required to ## administrate a smokeping environment. ## ## ## ## Domain allowed access. ## ## ## ## ## Role allowed access. ## ## ## # interface(`smokeping_admin',` gen_require(` type smokeping_t, smokeping_initrc_exec_t, smokeping_var_lib_t; type smokeping_runtime_t; ') allow $1 smokeping_t:process { ptrace signal_perms }; ps_process_pattern($1, smokeping_t) init_startstop_service($1, $2, smokeping_t, smokeping_initrc_exec_t) files_search_var_lib($1) admin_pattern($1, smokeping_var_lib_t) files_search_runtime($1) admin_pattern($1, smokeping_runtime_t) ')