##

Quantum is a virtual network service for Openstack

######################################## ##

## Transition to neutron. ##

## ##

## Domain allowed to transition. ##

## # interface(`neutron_domtrans',` gen_require(` type neutron_t, neutron_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, neutron_exec_t, neutron_t) ') ######################################## ##

## Read neutron's log files. ##

## ##

## Domain allowed access. ##

## ## # interface(`neutron_read_log',` gen_require(` type neutron_log_t; ') logging_search_logs($1) read_files_pattern($1, neutron_log_t, neutron_log_t) ') ######################################## ##

## Append to neutron log files. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_append_log',` gen_require(` type neutron_log_t; ') logging_search_logs($1) append_files_pattern($1, neutron_log_t, neutron_log_t) ') ######################################## ##

## Manage neutron log files ##

## ##

## Domain allowed access. ##

## # interface(`neutron_manage_log',` gen_require(` type neutron_log_t; ') logging_search_logs($1) manage_dirs_pattern($1, neutron_log_t, neutron_log_t) manage_files_pattern($1, neutron_log_t, neutron_log_t) manage_lnk_files_pattern($1, neutron_log_t, neutron_log_t) ') ######################################## ##

## Search neutron lib directories. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_search_lib',` gen_require(` type neutron_var_lib_t; ') allow $1 neutron_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ##

## Read neutron lib files. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_read_lib_files',` gen_require(` type neutron_var_lib_t; ') files_search_var_lib($1) read_files_pattern($1, neutron_var_lib_t, neutron_var_lib_t) ') ######################################## ##

## Manage neutron lib files. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_manage_lib_files',` gen_require(` type neutron_var_lib_t; ') files_search_var_lib($1) manage_files_pattern($1, neutron_var_lib_t, neutron_var_lib_t) ') ######################################## ##

## Manage neutron lib directories. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_manage_lib_dirs',` gen_require(` type neutron_var_lib_t; ') files_search_var_lib($1) manage_dirs_pattern($1, neutron_var_lib_t, neutron_var_lib_t) ') ######################################## ##

## Read and write neutron fifo files. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_rw_fifo_file',` gen_require(` type neutron_t; ') allow $1 neutron_t:fifo_file rw_inherited_fifo_file_perms; ') ######################################## ##

## Allow domain to send sigchld to neutron process. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_sigchld',` gen_require(` type neutron_t; ') allow $1 neutron_t:process sigchld; ') ##################################### ##

## Connect to neutron over a unix domain ## stream socket. ##

## ##

## Domain allowed access. ##

## # interface(`neutron_stream_connect',` gen_require(` type neutron_t; type neutron_var_lib_t; ') files_search_pids($1) stream_connect_pattern($1, neutron_var_lib_t, neutron_var_lib_t, neutron_t) ') ######################################## ##

## All of the rules required to administrate ## an neutron environment ##

## ##

## Domain allowed access. ##

## # interface(`neutron_admin',` gen_require(` type neutron_t; type neutron_log_t; type neutron_var_lib_t; ') allow $1 neutron_t:process { ptrace signal_perms }; ps_process_pattern($1, neutron_t) logging_search_logs($1) admin_pattern($1, neutron_log_t) files_search_var_lib($1) admin_pattern($1, neutron_var_lib_t) ')