This repository was archived by the owner on Aug 31, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathhos-corecmd.if
95 lines (95 loc) · 2.74 KB
/
hos-corecmd.if
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
####################################################
# CORECMD
####################################################
#---------------------------------------------------
interface(`hos_corecmd_bin_domtrans',`
gen_require(`
type bin_t, usr_t;
')
hos_corecmd_bin_spec_domtrans($1, $2)
type_transition $1 bin_t:process $2;
type_transition $1 usr_t:process $2;
')
#---------------------------------------------------
interface(`hos_corecmd_bin_spec_domtrans',`
gen_require(`
type bin_t, usr_t;
')
read_lnk_files_pattern($1, bin_t, bin_t)
read_lnk_files_pattern($1, usr_t, usr_t)
hos_domain_transition_pattern($1, bin_t, $2)
hos_domain_transition_pattern($1, usr_t, $2)
')
#---------------------------------------------------
interface(`hos_corecmd_exec_bin',`
gen_require(`
type bin_t;
')
corecmd_search_bin($1)
hos_can_exec($1, bin_t)
')
#---------------------------------------------------
interface(`hos_corecmd_exec_shell',`
gen_require(`
type bin_t, shell_exec_t;
')
allow $1 bin_t:dir { read };
corecmd_search_bin($1)
hos_can_exec($1, shell_exec_t)
')
#---------------------------------------------------
interface(`hos_corecmd_list_bin',`
gen_require(`
type bin_t;
')
corecmd_read_bin_symlinks($1)
hos_list_dirs_pattern($1, bin_t, bin_t)
')
#---------------------------------------------------
interface(`hos_corecmd_mmap_bin_files',`
gen_require(`
type bin_t;
')
corecmd_read_bin_symlinks($1)
hos_mmap_exec_files_pattern($1, bin_t, bin_t)
')
#---------------------------------------------------
interface(`hos_corecmd_read_bin_files',`
gen_require(`
type bin_t;
')
corecmd_read_bin_symlinks($1)
hos_read_files_pattern($1, bin_t, bin_t)
')
#---------------------------------------------------
interface(`hos_corecmd_read_bin_pipes',`
gen_require(`
type bin_t;
')
corecmd_read_bin_symlinks(bin_t)
hos_read_fifo_files_pattern($1, bin_t, bin_t)
')
#---------------------------------------------------
interface(`hos_corecmd_shell_entry_type',`
gen_require(`
type shell_exec_t;
')
hos_domain_entry_file($1, shell_exec_t)
')
#---------------------------------------------------
interface(`hos_corecmd_shell_domtrans',`
gen_require(`
type shell_exec_t;
')
hos_corecmd_shell_spec_domtrans($1, $2)
type_transition $1 shell_exec_t:process $2;
')
#---------------------------------------------------
interface(`hos_corecmd_shell_spec_domtrans',`
gen_require(`
type bin_t, shell_exec_t;
')
hos_domain_transition_pattern($1, shell_exec_t, $2)
hos_list_dirs_pattern($1, bin_t, bin_t)
read_lnk_files_pattern($1, bin_t, bin_t)
')