diff options
author | Remi Collet <fedora@famillecollet.com> | 2010-06-13 15:01:36 +0200 |
---|---|---|
committer | Remi Collet <fedora@famillecollet.com> | 2010-06-13 15:01:36 +0200 |
commit | 00288b2e6b4da3ff6d87f5e1db088b97016fea1d (patch) | |
tree | 018226d4bdbce0f7bf9980af58cd1bd9c703ebae /memcached.te | |
parent | 76aae763f716bd206e365ed2b48bfa013539785e (diff) |
sync with rawhide
Diffstat (limited to 'memcached.te')
-rw-r--r-- | memcached.te | 61 |
1 files changed, 0 insertions, 61 deletions
diff --git a/memcached.te b/memcached.te deleted file mode 100644 index 5748859..0000000 --- a/memcached.te +++ /dev/null @@ -1,61 +0,0 @@ -policy_module(memcached, 1.0.1) - -require { - attribute port_type; -}; - -##################################### -# -# Declarations -# -type memcached_t; -type memcached_exec_t; - -type memcached_var_run_t; -type memcached_port_t, port_type; - - -######################################## -# -# Local policy -# -init_daemon_domain(memcached_t, memcached_exec_t) -domain_use_interactive_fds(memcached_t) -init_use_fds(memcached_t) - -files_pid_file(memcached_var_run_t) - -allow memcached_t self:capability { setgid setuid }; -dontaudit memcached_t self:capability sys_tty_config; -allow memcached_t self:process signal_perms; -allow memcached_t self:fifo_file rw_file_perms; -allow memcached_t self:unix_stream_socket create_stream_socket_perms; - -allow memcached_t memcached_port_t:tcp_socket name_bind; -allow memcached_t memcached_port_t:udp_socket name_bind; -allow memcached_t self:tcp_socket create_stream_socket_perms; -allow memcached_t self:udp_socket create_stream_socket_perms; - -corenet_non_ipsec_sendrecv(memcached_t) -corenet_tcp_sendrecv_all_if(memcached_t) -corenet_udp_sendrecv_all_if(memcached_t) -corenet_tcp_sendrecv_all_nodes(memcached_t) -corenet_udp_sendrecv_all_nodes(memcached_t) -corenet_tcp_bind_all_nodes(memcached_t) -corenet_udp_bind_all_nodes(memcached_t) - -allow memcached_t memcached_var_run_t:file create_file_perms; -allow memcached_t memcached_var_run_t:dir rw_dir_perms; -files_pid_filetrans(memcached_t, memcached_var_run_t, file) - -kernel_read_kernel_sysctls(memcached_t) -kernel_read_system_state(memcached_t) - -libs_use_ld_so(memcached_t) -libs_use_shared_libs(memcached_t) - -files_read_etc_files(memcached_t) - -term_dontaudit_use_all_user_ptys(memcached_t) -term_dontaudit_use_all_user_ttys(memcached_t) -term_dontaudit_use_console(memcached_t) |