selinux-refpolicy/strict/domains/program/unused/imazesrv.te

31 lines
791 B
Plaintext

#DESC Imazesrv - Imaze Server
#
# Author: Torsten Knodt <tk-selinux@datas-world.de>
# based on games.te by Russell Coker <russell@coker.com.au>
#
# type for shared data from imazesrv
type imazesrv_data_t, file_type, sysadmfile;
type imazesrv_data_labs_t, file_type, sysadmfile;
# domain imazesrv_t is for system operation of imazesrv
# also defines imazesrv_exec_t
daemon_domain(imazesrv)
log_domain(imazesrv);
r_dir_file(imazesrv_t, imazesrv_data_t)
type imaze_port_t, port_type;
allow imazesrv_t imaze_port_t:tcp_socket name_bind;
allow imazesrv_t imaze_port_t:udp_socket name_bind;
create_append_log_file(imazesrv_t,imazesrv_log_t)
can_network_server(imazesrv_t)
allow imazesrv_t self:capability net_bind_service;
r_dir_file(imazesrv_t, etc_t)
general_domain_access(imazesrv_t)