##

policy for cgdcbxd

######################################## ##

## Execute cgdcbxd in the cgdcbxd domin. ##

## ##

## Domain allowed to transition. ##

## # interface(`cgdcbxd_domtrans',` gen_require(` type cgdcbxd_t, cgdcbxd_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, cgdcbxd_exec_t, cgdcbxd_t) ') ######################################## ##

## Read cgdcbxd PID files. ##

## ##

## Domain allowed access. ##

## # interface(`cgdcbxd_read_pid_files',` gen_require(` type cgdcbxd_var_run_t; ') files_search_pids($1) read_files_pattern($1, cgdcbxd_var_run_t, cgdcbxd_var_run_t) ') ######################################## ##

## All of the rules required to administrate ## an cgdcbxd environment ##

## ##

## Domain allowed access. ##

## # interface(`cgdcbxd_admin',` gen_require(` type cgdcbxd_t; type cgdcbxd_var_run_t; ') allow $1 cgdcbxd_t:process { signal_perms }; ps_process_pattern($1, cgdcbxd_t) tunable_policy(`deny_ptrace',`',` allow $1 cgdcbxd_t:process ptrace; ') files_search_pids($1) admin_pattern($1, cgdcbxd_var_run_t) ')