rpcraig | d49f7e6 | 2012-08-20 06:13:28 -0400 | [diff] [blame] | 1 | # Point to Point Protocol daemon |
| 2 | type ppp, domain; |
Stephen Smalley | cc65fe8 | 2013-10-29 14:42:38 -0400 | [diff] [blame] | 3 | permissive_or_unconfined(ppp) |
rpcraig | d49f7e6 | 2012-08-20 06:13:28 -0400 | [diff] [blame] | 4 | type ppp_device, dev_type; |
| 5 | type ppp_exec, exec_type, file_type; |
rpcraig | d49f7e6 | 2012-08-20 06:13:28 -0400 | [diff] [blame] | 6 | domain_auto_trans(mtp, ppp_exec, ppp) |
Stephen Smalley | cc65fe8 | 2013-10-29 14:42:38 -0400 | [diff] [blame] | 7 | |
Stephen Smalley | 1601132 | 2014-02-24 15:06:11 -0500 | [diff] [blame^] | 8 | net_domain(ppp) |
| 9 | |
Stephen Smalley | cc65fe8 | 2013-10-29 14:42:38 -0400 | [diff] [blame] | 10 | allow ppp mtp:socket rw_socket_perms; |
| 11 | allow ppp ppp_device:chr_file rw_file_perms; |
| 12 | allow ppp self:capability net_admin; |
Stephen Smalley | cc65fe8 | 2013-10-29 14:42:38 -0400 | [diff] [blame] | 13 | allow ppp system_file:file rx_file_perms; |
| 14 | allow ppp vpn_data_file:dir w_dir_perms; |
| 15 | allow ppp vpn_data_file:file create_file_perms; |
| 16 | allow ppp mtp:fd use; |