%PDF- %PDF-
Direktori : /proc/self/root/usr/share/selinux/devel/include/services/ |
Current File : //proc/self/root/usr/share/selinux/devel/include/services/cgdcbxd.if |
## <summary>policy for cgdcbxd</summary> ######################################## ## <summary> ## Execute cgdcbxd in the cgdcbxd domin. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`cgdcbxd_domtrans',` gen_require(` type cgdcbxd_t, cgdcbxd_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, cgdcbxd_exec_t, cgdcbxd_t) ') ######################################## ## <summary> ## Read cgdcbxd PID files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`cgdcbxd_read_pid_files',` gen_require(` type cgdcbxd_var_run_t; ') files_search_pids($1) read_files_pattern($1, cgdcbxd_var_run_t, cgdcbxd_var_run_t) ') ######################################## ## <summary> ## All of the rules required to administrate ## an cgdcbxd environment ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`cgdcbxd_admin',` gen_require(` type cgdcbxd_t; type cgdcbxd_var_run_t; ') allow $1 cgdcbxd_t:process { signal_perms }; ps_process_pattern($1, cgdcbxd_t) tunable_policy(`deny_ptrace',`',` allow $1 cgdcbxd_t:process ptrace; ') files_search_pids($1) admin_pattern($1, cgdcbxd_var_run_t) ')