gentoo policy for dante

[petre rodan <kaiowas@gentoo.org>]

[-- Attachment #1.1: Type: text/plain, Size: 178 bytes --]

Hi,

this must be gentoo-day :)

policy for dante [1], attached

[1] http://www.inet.no/dante/

bye,
peter

-- 
petre rodan
<kaiowas@gentoo.org>
Developer,
Hardened Gentoo Linux

[-- Attachment #1.2: dante.fc --]
[-- Type: text/plain, Size: 164 bytes --]

# dante
/usr/sbin/sockd		--	system_u:object_r:dante_exec_t
/etc/socks(/.*)?		system_u:object_r:dante_conf_t
/var/run/sockd.pid	--	system_u:object_r:dante_var_run_t

[-- Attachment #1.3: dante.te --]
[-- Type: text/plain, Size: 615 bytes --]

#DESC dante - socks daemon
#
# Author: petre rodan <kaiowas@gentoo.org>
#

type dante_conf_t, file_type, sysadmfile;
type socks_port_t, port_type;

daemon_domain(dante)
can_network(dante_t)

allow dante_t self:fifo_file { read write };
allow dante_t self:capability { setuid };
allow dante_t self:unix_dgram_socket { connect create write };
allow dante_t self:unix_stream_socket { connect create read setopt write };

allow dante_t socks_port_t:tcp_socket name_bind;

allow dante_t { etc_t etc_runtime_t }:file r_file_perms;
r_dir_file(dante_t, dante_conf_t)

allow dante_t initrc_var_run_t:file { getattr write };

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]