nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/mon.if

38 lines
686 B
Plaintext
Raw Normal View History

Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
## <summary>mon network monitoring daemon.</summary>
######################################
## <summary>
## dontaudit using an inherited fd from mon_t
## </summary>
## <param name="domain">
policy: interfaces: doc: indent param blocks consistently There is more than 5000 parameter documentations. Only about 300 are differently done. Change them to be consistently indented. param with one space and content inside with one tab This was done with: sed -ri ' /^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{ s/^##[[:space:]]*/##\t/; s/^##[[:space:]]*(<[/]?summary)/##\t\1/; s/^##[[:space:]]*(<[/]?param)/## \1/; }' policy/modules/*/*.if Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
2021-06-30 08:03:44 +00:00
## <summary>
## Domain to not audit
## </summary>
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
## </param>
#
interface(`mon_dontaudit_use_fds',`
gen_require(`
type mon_t;
')
dontaudit $1 mon_t:fd use;
')
######################################
## <summary>
## dontaudit searching /var/lib/mon
## </summary>
## <param name="domain">
policy: interfaces: doc: indent param blocks consistently There is more than 5000 parameter documentations. Only about 300 are differently done. Change them to be consistently indented. param with one space and content inside with one tab This was done with: sed -ri ' /^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{ s/^##[[:space:]]*/##\t/; s/^##[[:space:]]*(<[/]?summary)/##\t\1/; s/^##[[:space:]]*(<[/]?param)/## \1/; }' policy/modules/*/*.if Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
2021-06-30 08:03:44 +00:00
## <summary>
## Domain to not audit
## </summary>
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
## </param>
#
interface(`mon_dontaudit_search_var_lib',`
gen_require(`
type mon_var_lib_t;
')
dontaudit $1 mon_var_lib_t:dir search;
')