9127219358
There is more than 5000 parameter documentations. Only about 300 are differently done. Change them to be consistently indented. param with one space and content inside with one tab This was done with: sed -ri ' /^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{ s/^##[[:space:]]*/##\t/; s/^##[[:space:]]*(<[/]?summary)/##\t\1/; s/^##[[:space:]]*(<[/]?param)/## \1/; }' policy/modules/*/*.if Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
59 lines
1.2 KiB
Plaintext
59 lines
1.2 KiB
Plaintext
## <summary>Snort network intrusion detection system.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run snort.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`snort_domtrans',`
|
|
gen_require(`
|
|
type snort_t, snort_exec_t;
|
|
')
|
|
|
|
corecmd_search_bin($1)
|
|
domtrans_pattern($1, snort_exec_t, snort_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to
|
|
## administrate an snort environment.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`snort_admin',`
|
|
gen_require(`
|
|
type snort_t, snort_runtime_t, snort_log_t;
|
|
type snort_etc_t, snort_initrc_exec_t;
|
|
')
|
|
|
|
allow $1 snort_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, snort_t)
|
|
|
|
init_startstop_service($1, $2, snort_t, snort_initrc_exec_t)
|
|
|
|
admin_pattern($1, snort_etc_t)
|
|
files_search_etc($1)
|
|
|
|
admin_pattern($1, snort_log_t)
|
|
logging_search_logs($1)
|
|
|
|
admin_pattern($1, snort_runtime_t)
|
|
files_search_runtime($1)
|
|
')
|