nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add interfaces to control ntpd_unit_t systemd services

Browse Source 
Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
David Sugar 2018-11-17 04:23:43 +00:00 committed by Chris PeBenito
parent cd4be3dcd0
commit 5deea1b940
1 changed files with 63 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

63
policy/modules/services/ntp.if
View File

@ -177,6 +177,69 @@ interface(`ntp_rw_shm',`
fs_search_tmpfs($1)
')
########################################
## <summary>
## Allow specified domain to enable/disable ntpd unit
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`ntp_enabledisable',`
ifdef(`init_systemd',`
gen_require(`
type ntpd_unit_t;
class service { enable disable };
')
allow $1 ntpd_unit_t:service { enable disable };
')
')
########################################
## <summary>
## Allow specified domain to start/stop ntpd unit
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`ntp_startstop',`
ifdef(`init_systemd',`
gen_require(`
type ntpd_unit_t;
class service { start stop };
')
allow $1 ntpd_unit_t:service { start stop };
')
')
########################################
## <summary>
## Allow specified domain to get status of ntpd unit
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`ntp_status',`
ifdef(`init_systemd',`
gen_require(`
type ntpd_unit_t;
class service status;
')
allow $1 ntpd_unit_t:service status;
')
')
########################################
## <summary>
## All of the rules required to