nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Create interface for NFS/RPC TCP access

Browse Source 
Create the rpc_tcp_rw_nfs_sockets() interface, allowing for the calling
domain to access the tcp_sockets managed by nfsd_t.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-07-20 23:12:18 +02:00 committed by Chris PeBenito
parent b594647caf
commit 555cbbc5f5
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/services/rpc.if
View File

@ -327,6 +327,24 @@ interface(`rpc_manage_nfs_ro_content',`
manage_lnk_files_pattern($1, nfsd_ro_t, nfsd_ro_t)
')
########################################
## <summary>
## Allow domain to read and write to an NFS TCP socket.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`rpc_tcp_rw_nfs_sockets',`
gen_require(`
type nfsd_t;
')
allow $1 nfsd_t:tcp_socket rw_socket_perms;
')
########################################
## <summary>
## Allow domain to read and write to an NFS UDP socket.