Add noatsecure to programs using LD_PRELOAD (CoD4, TS3, TF2)
[selinux.git] / ts3 / ts3.te
1 policy_module(ts3, 0.1.22)
2
3 # File context for the executable process
4 type ts3_t;
5 type ts3_exec_t;
6
7 type ts3_rw_t;
8 files_type(ts3_rw_t)
9
10 type ts3_ro_t;
11 files_type(ts3_ro_t)
12
13 init_daemon_domain(ts3_t, ts3_exec_t)
14
15 corenet_udp_sendrecv_generic_port(ts3_t)
16 corenet_udp_bind_generic_port(ts3_t)
17 corenet_udp_bind_generic_node(ts3_t)
18 corenet_tcp_sendrecv_generic_port(ts3_t)
19 corenet_tcp_bind_generic_port(ts3_t)
20 corenet_tcp_bind_generic_node(ts3_t)
21
22 allow ts3_t self:tcp_socket { create_stream_socket_perms connected_stream_socket_perms };
23
24 read_files_pattern(ts3_t, ts3_ro_t, ts3_ro_t)
25
26 manage_files_pattern(ts3_t, ts3_rw_t, ts3_rw_t)
27 manage_dirs_pattern(ts3_t, ts3_rw_t, ts3_rw_t)
28 setattr_files_pattern(ts3_t, ts3_rw_t, ts3_rw_t)
29
30 sysnet_dns_name_resolve(ts3_t)
31
32 # Needed to load shared libraries
33 allow ts3_t ts3_exec_t:file execmod;
34
35 dev_read_urand(ts3_t)
36
37 fs_getattr_tmpfs(ts3_t)
38 fs_manage_tmpfs_files(ts3_t)
39
40 allow init_t ts3_t:process { noatsecure };