2 policy_module(radvd, 1.9.0)
4 ########################################
10 init_daemon_domain(radvd_t, radvd_exec_t)
12 type radvd_initrc_exec_t;
13 init_script_file(radvd_initrc_exec_t)
16 files_pid_file(radvd_var_run_t)
19 files_config_file(radvd_etc_t)
21 ########################################
25 allow radvd_t self:capability { setgid setuid net_raw };
26 dontaudit radvd_t self:capability sys_tty_config;
27 allow radvd_t self:process signal_perms;
28 allow radvd_t self:unix_dgram_socket create_socket_perms;
29 allow radvd_t self:unix_stream_socket create_socket_perms;
30 allow radvd_t self:rawip_socket create_socket_perms;
31 allow radvd_t self:tcp_socket create_stream_socket_perms;
32 allow radvd_t self:udp_socket create_socket_perms;
33 allow radvd_t self:fifo_file rw_file_perms;
35 allow radvd_t radvd_etc_t:file read_file_perms;
37 manage_files_pattern(radvd_t, radvd_var_run_t, radvd_var_run_t)
38 files_pid_filetrans(radvd_t, radvd_var_run_t, file)
40 kernel_read_kernel_sysctls(radvd_t)
41 kernel_rw_net_sysctls(radvd_t)
42 kernel_read_network_state(radvd_t)
43 kernel_read_system_state(radvd_t)
45 corenet_all_recvfrom_unlabeled(radvd_t)
46 corenet_all_recvfrom_netlabel(radvd_t)
47 corenet_tcp_sendrecv_all_if(radvd_t)
48 corenet_udp_sendrecv_all_if(radvd_t)
49 corenet_raw_sendrecv_all_if(radvd_t)
50 corenet_tcp_sendrecv_all_nodes(radvd_t)
51 corenet_udp_sendrecv_all_nodes(radvd_t)
52 corenet_raw_sendrecv_all_nodes(radvd_t)
53 corenet_tcp_sendrecv_all_ports(radvd_t)
54 corenet_udp_sendrecv_all_ports(radvd_t)
56 dev_read_sysfs(radvd_t)
58 fs_getattr_all_fs(radvd_t)
59 fs_search_auto_mountpoints(radvd_t)
61 domain_use_interactive_fds(radvd_t)
63 files_read_etc_files(radvd_t)
64 files_list_usr(radvd_t)
66 libs_use_ld_so(radvd_t)
67 libs_use_shared_libs(radvd_t)
69 logging_send_syslog_msg(radvd_t)
71 miscfiles_read_localization(radvd_t)
73 sysnet_read_config(radvd_t)
75 userdom_dontaudit_use_unpriv_user_fds(radvd_t)
77 sysadm_dontaudit_search_home_dirs(radvd_t)
80 nis_use_ypbind(radvd_t)
84 seutil_sigchld_newrole(radvd_t)