bf1942/bf1942.te

   1 policy_module(bf1942, 0.1.6)
   2
   3 # File context for the executable process
   4 type bf1942_t;
   5 type bf1942_exec_t;
   6
   7 type bf1942_rw_t;
   8 files_type(bf1942_rw_t)
   9
  10 type bf1942_ro_t;
  11 files_type(bf1942_ro_t)
  12
  13 init_daemon_domain(bf1942_t, bf1942_exec_t)
  14 init_nnp_daemon_domain(bf1942_t, bf1942_exec_t)
  15
  16 corenet_udp_sendrecv_generic_port(bf1942_t)
  17 corenet_udp_bind_generic_port(bf1942_t)
  18 corenet_udp_bind_generic_node(bf1942_t)
  19
  20 read_files_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  21 read_lnk_files_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  22 list_dirs_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  23
  24 manage_files_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  25 manage_dirs_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  26 setattr_files_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  27
  28 sysnet_dns_name_resolve(bf1942_t)
  29
  30 kernel_read_system_state(bf1942_t)
  31 allow bf1942_t self:process execmem;
  32
  33 # The BF1942 binary executes itself
  34 allow bf1942_t bf1942_exec_t:file execute_no_trans;