Attachment 867958 Details for Bug 1212963

interfaces

kanidm_unixd.if (text/plain), 1.72 KB, created by William Brown on 2023-07-04 02:06:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: William Brown

Created: 2023-07-04 02:06:30 UTC

Size: 1.72 KB

patch

obsolete

>
>## <summary>policy for kanidm_unixd</summary>
>
>########################################
>## <summary>
>##	Execute kanidm_unixd_exec_t in the kanidm_unixd domain.
>## </summary>
>## <param name="domain">
>## <summary>
>##	Domain allowed to transition.
>## </summary>
>## </param>
>#
>interface(`kanidm_unixd_domtrans',`
>	gen_require(`
>		type kanidm_unixd_t, kanidm_unixd_exec_t;
>	')
>
>	corecmd_search_bin($1)
>	domtrans_pattern($1, kanidm_unixd_exec_t, kanidm_unixd_t)
>')
>
>######################################
>## <summary>
>##	Execute kanidm_unixd in the caller domain.
>## </summary>
>## <param name="domain">
>##	<summary>
>##	Domain allowed access.
>##	</summary>
>## </param>
>#
>interface(`kanidm_unixd_exec',`
>	gen_require(`
>		type kanidm_unixd_exec_t;
>	')
>
>	corecmd_search_bin($1)
>	can_exec($1, kanidm_unixd_exec_t)
>')
>
>
>########################################
>## <summary>
>##      Read kanidm public config files.
>## </summary>
>## <param name="domain">
>##      <summary>
>##      Domain allowed access.
>##      </summary>
>## </param>
>#
>interface(`kanidm_read_public_files',`
>        gen_require(`
>                type kanidm_conf_t;
>        ')
>
>        list_dirs_pattern($1, kanidm_conf_t, kanidm_conf_t)
>        read_files_pattern($1, kanidm_conf_t, kanidm_conf_t)
>    	allow $1 kanidm_conf_t:file map;
>')
>
>########################################
>## <summary>
>##      Connect to kanidm over a unix stream socket.
>## </summary>
>## <param name="domain">
>##      <summary>
>##      Domain allowed access.
>##      </summary>
>## </param>
>#
>interface(`kanidm_stream_connect',`
>        gen_require(`
>                type kanidm_t, kanidm_var_run_t;
>        ')
>
>        files_search_pids($1)
>        stream_connect_pattern($1, kanidm_var_run_t, kanidm_var_run_t, kanidm_t)
>')
>

Actions: View

Attachments on bug 1212963: 867957 | 867958 | 867959