## Smart disk monitoring daemon. ####################################### ## ## Read smartmon temporary files. ## ## ## ## Domain allowed access. ## ## # interface(`smartmon_read_tmp_files',` gen_require(` type fsdaemon_tmp_t; ') files_search_tmp($1) allow $1 fsdaemon_tmp_t:file read_file_perms; ') ######################################## ## ## All of the rules required to ## administrate an smartmon environment. ## ## ## ## Domain allowed access. ## ## ## ## ## Role allowed access. ## ## ## # interface(`smartmon_admin',` gen_require(` type fsdaemon_t, fsdaemon_tmp_t, fsdaemon_runtime_t; type fsdaemon_var_lib_t, fsdaemon_initrc_exec_t; ') allow $1 fsdaemon_t:process { ptrace signal_perms }; ps_process_pattern($1, fsdaemon_t) init_startstop_service($1, $2, fsdaemon_t, fsdaemon_initrc_exec_t) files_list_tmp($1) admin_pattern($1, fsdaemon_tmp_t) files_list_pids($1) admin_pattern($1, fsdaemon_runtime_t) files_list_var_lib($1) admin_pattern($1, fsdaemon_var_lib_t) ')