##

policy for rhnsd

######################################## ##

## Transition to rhnsd. ##

## ##

## Domain allowed to transition. ##

## # interface(`rhnsd_domtrans',` gen_require(` type rhnsd_t, rhnsd_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, rhnsd_exec_t, rhnsd_t) ') ######################################## ##

## Execute rhnsd server in the rhnsd domain. ##

## ##

## Domain allowed access. ##

## # interface(`rhnsd_initrc_domtrans',` gen_require(` type rhnsd_initrc_exec_t; ') init_labeled_script_domtrans($1, rhnsd_initrc_exec_t) ') ###################################### ##

## Allow the specified domain to manage ## rhnsd configuration files. ##

## ##

## Domain allowed access. ##

## # interface(`rhnsd_manage_config',` gen_require(` type rhnsd_conf_t; ') files_search_etc($1) manage_files_pattern( $1, rhnsd_conf_t, rhnsd_conf_t) ') ######################################## ##

## All of the rules required to administrate ## an rhnsd environment ##

## ##

## Domain allowed access. ##

## ## ##

## Role allowed access. ##

## ## # interface(`rhnsd_admin',` gen_require(` type rhnsd_t; type rhnsd_initrc_exec_t; ') allow $1 rhnsd_t:process { ptrace signal_perms }; ps_process_pattern($1, rhnsd_t) rhnsd_initrc_domtrans($1) domain_system_change_exemption($1) role_transition $2 rhnsd_initrc_exec_t system_r; allow $2 system_r; ')