]>
Commit | Line | Data |
---|---|---|
8242f5a6 CP |
1 | ## <summary>Bitlbee service</summary> |
2 | ||
3 | ######################################## | |
4 | ## <summary> | |
ff8f0a63 | 5 | ## Read bitlbee configuration files |
8242f5a6 CP |
6 | ## </summary> |
7 | ## <param name="domain"> | |
ff8f0a63 | 8 | ## <summary> |
05ca5f7b | 9 | ## Domain allowed accesss. |
ff8f0a63 | 10 | ## </summary> |
8242f5a6 CP |
11 | ## </param> |
12 | # | |
13 | interface(`bitlbee_read_config',` | |
14 | gen_require(` | |
15 | type bitlbee_conf_t; | |
16 | ') | |
17 | ||
18 | files_search_etc($1) | |
82d2775c CP |
19 | allow $1 bitlbee_conf_t:dir list_dir_perms; |
20 | allow $1 bitlbee_conf_t:file read_file_perms; | |
8242f5a6 CP |
21 | ') |
22 | ||
e87221ce CP |
23 | ######################################## |
24 | ## <summary> | |
05ca5f7b | 25 | ## All of the rules required to administrate |
e87221ce CP |
26 | ## an bitlbee environment |
27 | ## </summary> | |
28 | ## <param name="domain"> | |
29 | ## <summary> | |
30 | ## Domain allowed access. | |
31 | ## </summary> | |
32 | ## </param> | |
33 | ## <param name="role"> | |
34 | ## <summary> | |
35 | ## The role to be allowed to manage the bitlbee domain. | |
36 | ## </summary> | |
37 | ## </param> | |
38 | ## <rolecap/> | |
39 | # | |
40 | interface(`bitlbee_admin',` | |
41 | gen_require(` | |
42 | type bitlbee_t, bitlbee_conf_t, bitlbee_var_t; | |
43 | type bitlbee_initrc_exec_t; | |
44 | ') | |
45 | ||
995bdbb1 | 46 | allow $1 bitlbee_t:process signal_perms; |
e87221ce CP |
47 | ps_process_pattern($1, bitlbee_t) |
48 | ||
995bdbb1 | 49 | tunable_policy(`deny_ptrace',`',` |
50 | allow $1 bitlbee_t:process ptrace; | |
51 | ') | |
52 | ||
e87221ce CP |
53 | init_labeled_script_domtrans($1, bitlbee_initrc_exec_t) |
54 | domain_system_change_exemption($1) | |
55 | role_transition $2 bitlbee_initrc_exec_t system_r; | |
56 | allow $2 system_r; | |
57 | ||
58 | files_list_etc($1) | |
59 | admin_pattern($1, bitlbee_conf_t) | |
60 | ||
61 | files_list_var($1) | |
62 | admin_pattern($1, bitlbee_var_t) | |
63 | ') |