##

policy for ipmievd

######################################## ##

## Transition to ipmievd. ##

## ##

## Domain allowed to transition. ##

## # interface(`ipmievd_domtrans',` gen_require(` type ipmievd_t, ipmievd_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, ipmievd_exec_t, ipmievd_t) ') ######################################## ##

## Execute ipmievd server in the ipmievd domain. ##

## ##

## Domain allowed access. ##

## # interface(`ipmievd_initrc_domtrans',` gen_require(` type ipmievd_initrc_exec_t; ') init_labeled_script_domtrans($1, ipmievd_initrc_exec_t) ') ######################################## ##

## Read ipmievd PID files. ##

## ##

## Domain allowed access. ##

## # interface(`ipmievd_read_pid_files',` gen_require(` type ipmievd_var_run_t; ') files_search_pids($1) allow $1 ipmievd_var_run_t:file read_file_perms; ') ######################################## ##

## All of the rules required to administrate ## an ipmievd environment ##

## ##

## Domain allowed access. ##

## ## ##

## Role allowed access. ##

## ## # interface(`ipmievd_admin',` gen_require(` type ipmievd_t; type ipmievd_initrc_exec_t; type ipmievd_var_run_t; ') allow $1 ipmievd_t:process { ptrace signal_perms }; ps_process_pattern($1, ipmievd_t) ipmievd_initrc_domtrans($1) domain_system_change_exemption($1) role_transition $2 ipmievd_initrc_exec_t system_r; allow $2 system_r; files_search_pids($1) admin_pattern($1, ipmievd_var_run_t) ')