add in a few parts of ftp

refpolicy/policy/modules/services/cron.te

@@ -326,6 +326,10 @@ tunable_policy(`cron_can_relabel',`
 	seutil_read_file_contexts(system_crond_t)
 ')
 
+optional_policy(`ftp.te',`
+	ftp_read_log(system_crond_t)
+')
+
 optional_policy(`mysql.te',`
 	mysql_read_config(system_crond_t)
 ')

refpolicy/policy/modules/services/tcpd.if

@@ -1 +1,22 @@
 ## <summary>Policy for TCP daemon.</summary>
+
+########################################
+## <summary>
+##	Execute tcpd in the tcpd domain.
+## </summary>
+## <param name="domain">
+##	The type of the process performing this action.
+## </param>
+#
+interface(`tcpd_domtrans',`
+	gen_require(`
+		type tcpd_t, tcpd_exec_t;
+	')
+
+	domain_auto_trans($1,tcpd_exec_t,tcpd_t)
+
+	allow $1 tcpd_t:fd use;
+	allow tcpd_t $1:fd use;
+	allow tcpd_t $1:fifo_file rw_file_perms;
+	allow tcpd_t $1:process sigchld;
+')

refpolicy/policy/modules/system/init.te

@@ -429,6 +429,10 @@ optional_policy(`cpucontrol.te',`
 	dev_getattr_cpu(initrc_t)
 ')
 
+optional_policy(`ftp.te',`
+	ftp_read_config(initrc_t)
+')
+
 optional_policy(`gpm.te',`
 	gpm_setattr_gpmctl(initrc_t)
 ')

refpolicy/policy/modules/system/miscfiles.fc

@@ -9,6 +9,10 @@
 #
 /opt/(.*)?/man(/.*)?		context_template(system_u:object_r:man_t,s0)
 
+#
+# /srv
+#
+/srv/([^/]*/)?ftp(/.*)?		context_template(system_u:object_r:ftpd_anon_t,s0)
 /srv/([^/]*/)?rsync(/.*)?	context_template(system_u:object_r:ftpd_anon_t,s0)
 
 #
@@ -40,6 +44,8 @@
 #
 # /var
 #
+/var/ftp(/.*)?			context_template(system_u:object_r:ftpd_anon_t,s0)
+
 ifdef(`distro_debian', `
 /var/lib/msttcorefonts(/.*)?	context_template(system_u:object_r:fonts_t,s0)
 ')