Home | History | Annotate | Download | only in audit2allow 
      1 ; This is a dummy policy which main aim is to be compatible with test.log
      2 
      3 ; Define one category and one sensitivity in order to make things work
      4 (mls true)
      5 (category c0)
      6 (categoryorder (c0))
      7 (sensitivity s0)
      8 (sensitivityorder (s0))
      9 (sensitivitycategory s0 (c0))
     10 
     11 ; Define some users and roles
     12 (user system_u)
     13 (user root)
     14 (user unconfined_u)
     15 (role system_r)
     16 (role unconfined_r)
     17 (userrole root system_r)
     18 (userrole system_u system_r)
     19 (userrole unconfined_u unconfined_r)
     20 (userlevel system_u (s0))
     21 (userlevel root (s0))
     22 (userlevel unconfined_u (s0))
     23 (userrange system_u ((s0)(s0 (c0))))
     24 (userrange root ((s0)(s0 (c0))))
     25 (userrange unconfined_u ((s0)(s0 (c0))))
     26 
     27 ; Define domain types
     28 (type automount_t)
     29 (type ftpd_t)
     30 (type httpd_t)
     31 (type kernel_t)
     32 (type nsplugin_t)
     33 (type postfix_local_t)
     34 (type qemu_t)
     35 (type smbd_t)
     36 
     37 (roletype system_r automount_t)
     38 (roletype system_r ftpd_t)
     39 (roletype system_r httpd_t)
     40 (roletype system_r kernel_t)
     41 (roletype system_r postfix_local_t)
     42 (roletype system_r qemu_t)
     43 (roletype system_r smbd_t)
     44 (roletype unconfined_r nsplugin_t)
     45 
     46 ; Define file types
     47 (type automount_lock_t)
     48 (type default_t)
     49 (type fixed_disk_device_t)
     50 (type home_root_t)
     51 (type httpd_sys_content_t)
     52 (type httpd_sys_script_exec_t)
     53 (type mail_spool_t)
     54 (type ssh_home_t)
     55 (type usr_t)
     56 (type var_t)
     57 
     58 ; Define port types
     59 (type mysqld_port_t)
     60 (type reserved_port_t)
     61 
     62 ; Define initial SID
     63 (sid kernel)
     64 (sidorder (kernel))
     65 (sidcontext kernel (system_u system_r kernel_t ((s0) (s0))))
     66 
     67 ; Define classes
     68 (class blk_file (getattr open read write))
     69 (class dir (append open search))
     70 (class file (execute execute_no_trans getattr open read write))
     71 (class tcp_socket (ioctl name_bind name_connect))
     72 (classorder (blk_file file dir tcp_socket))
     73 
     74 ; The policy compiler requires at least one rule
     75 (allow kernel_t default_t (file (open read write)))
     76