2 policy_module(vpn,1.4.1)
4 ########################################
13 domain_entry_file(vpnc_t,vpnc_exec_t)
14 role system_r types vpnc_t;
17 files_tmp_file(vpnc_tmp_t)
20 files_pid_file(vpnc_var_run_t)
22 ########################################
27 allow vpnc_t self:capability { net_admin ipc_lock net_raw };
28 allow vpnc_t self:process getsched;
29 allow vpnc_t self:fifo_file { getattr ioctl read write };
30 allow vpnc_t self:netlink_route_socket rw_netlink_socket_perms;
31 allow vpnc_t self:tcp_socket create_stream_socket_perms;
32 allow vpnc_t self:udp_socket create_socket_perms;
33 allow vpnc_t self:rawip_socket create_socket_perms;
34 allow vpnc_t self:unix_dgram_socket create_socket_perms;
35 allow vpnc_t self:unix_stream_socket create_socket_perms;
36 # cjp: this needs to be fixed
37 allow vpnc_t self:socket create_socket_perms;
39 manage_dirs_pattern(vpnc_t,vpnc_tmp_t,vpnc_tmp_t)
40 manage_files_pattern(vpnc_t,vpnc_tmp_t,vpnc_tmp_t)
41 files_tmp_filetrans(vpnc_t, vpnc_tmp_t, { file dir })
43 manage_files_pattern(vpnc_t,vpnc_var_run_t,vpnc_var_run_t)
44 files_pid_filetrans(vpnc_t,vpnc_var_run_t,file)
46 kernel_read_system_state(vpnc_t)
47 kernel_read_network_state(vpnc_t)
48 kernel_read_kernel_sysctls(vpnc_t)
49 kernel_rw_net_sysctls(vpnc_t)
51 corenet_all_recvfrom_unlabeled(vpnc_t)
52 corenet_all_recvfrom_netlabel(vpnc_t)
53 corenet_tcp_sendrecv_all_if(vpnc_t)
54 corenet_udp_sendrecv_all_if(vpnc_t)
55 corenet_raw_sendrecv_all_if(vpnc_t)
56 corenet_tcp_sendrecv_all_nodes(vpnc_t)
57 corenet_udp_sendrecv_all_nodes(vpnc_t)
58 corenet_raw_sendrecv_all_nodes(vpnc_t)
59 corenet_tcp_sendrecv_all_ports(vpnc_t)
60 corenet_udp_sendrecv_all_ports(vpnc_t)
61 corenet_udp_bind_all_nodes(vpnc_t)
62 corenet_udp_bind_generic_port(vpnc_t)
63 corenet_udp_bind_isakmp_port(vpnc_t)
64 corenet_tcp_connect_all_ports(vpnc_t)
65 corenet_sendrecv_all_client_packets(vpnc_t)
66 corenet_sendrecv_isakmp_server_packets(vpnc_t)
67 corenet_sendrecv_generic_server_packets(vpnc_t)
68 corenet_rw_tun_tap_dev(vpnc_t)
71 dev_read_urand(vpnc_t)
72 dev_read_sysfs(vpnc_t)
74 fs_getattr_xattr_fs(vpnc_t)
75 fs_getattr_tmpfs(vpnc_t)
77 term_use_all_user_ptys(vpnc_t)
78 term_use_all_user_ttys(vpnc_t)
80 corecmd_exec_all_executables(vpnc_t)
82 files_exec_etc_files(vpnc_t)
83 files_read_etc_runtime_files(vpnc_t)
84 files_read_etc_files(vpnc_t)
85 files_dontaudit_search_home(vpnc_t)
87 libs_exec_ld_so(vpnc_t)
88 libs_exec_lib_files(vpnc_t)
89 libs_use_ld_so(vpnc_t)
90 libs_use_shared_libs(vpnc_t)
92 locallogin_use_fds(vpnc_t)
94 logging_send_syslog_msg(vpnc_t)
96 miscfiles_read_localization(vpnc_t)
98 seutil_dontaudit_search_config(vpnc_t)
99 seutil_use_newrole_fds(vpnc_t)
101 sysnet_exec_ifconfig(vpnc_t)
102 sysnet_etc_filetrans_config(vpnc_t)
103 sysnet_manage_config(vpnc_t)
105 userdom_use_all_users_fds(vpnc_t)
106 userdom_dontaudit_search_all_users_home_content(vpnc_t)
109 dbus_system_bus_client_template(vpnc,vpnc_t)
110 dbus_send_system_bus(vpnc_t)
112 networkmanager_dbus_chat(vpnc_t)
117 nis_use_ypbind(vpnc_t)
121 nscd_socket_use(vpnc_t)