policy/modules/services/memcached.if

   1 ## <summary>high-performance memory object caching system</summary>
   2
   3 ########################################
   4 ## <summary>
   5 ##      Execute a domain transition to run memcached.
   6 ## </summary>
   7 ## <param name="domain">
   8 ## <summary>
   9 ##      Domain allowed to transition.
  10 ## </summary>
  11 ## </param>
  12 #
  13 interface(`memcached_domtrans',`
  14         gen_require(`
  15                 type memcached_t;
  16                 type memcached_exec_t;
  17         ')
  18
  19         domtrans_pattern($1, memcached_exec_t, memcached_t)
  20 ')
  21
  22 ########################################
  23 ## <summary>
  24 ##      Read memcached PID files.
  25 ## </summary>
  26 ## <param name="domain">
  27 ##      <summary>
  28 ##      Domain allowed access.
  29 ##      </summary>
  30 ## </param>
  31 #
  32 interface(`memcached_read_pid_files',`
  33         gen_require(`
  34                 type memcached_var_run_t;
  35         ')
  36
  37         files_search_pids($1)
  38         allow $1 memcached_var_run_t:file read_file_perms;
  39 ')
  40
  41 ########################################
  42 ## <summary>
  43 ##      All of the rules required to administrate
  44 ##      an memcached environment
  45 ## </summary>
  46 ## <param name="domain">
  47 ##      <summary>
  48 ##      Domain allowed access.
  49 ##      </summary>
  50 ## </param>
  51 ## <param name="role">
  52 ##      <summary>
  53 ##      The role to be allowed to manage the memcached domain.
  54 ##      </summary>
  55 ## </param>
  56 ## <rolecap/>
  57 #
  58 interface(`memcached_admin',`
  59         gen_require(`
  60                 type memcached_t;
  61                 type memcached_initrc_exec_t;
  62         ')
  63
  64         allow $1 memcached_t:process { ptrace signal_perms };
  65         ps_process_pattern($1, memcached_t)
  66
  67         init_labeled_script_domtrans($1, memcached_initrc_exec_t)
  68         domain_system_change_exemption($1)
  69         role_transition $2 memcached_initrc_exec_t system_r;
  70         allow $2 system_r;
  71
  72         admin_pattern($1, memcached_var_run_t)
  73 ')