## IPv6 router advertisement daemon. ###################################### ## ## Read radvd PID files. ## ## ## ## Domain allowed access. ## ## # interface(`radvd_read_pid_files',` gen_require(` type radvd_var_run_t; ') files_search_pids($1) read_files_pattern($1, radvd_var_run_t, radvd_var_run_t) ') ######################################## ## ## All of the rules required to ## administrate an radvd environment. ## ## ## ## Domain allowed access. ## ## ## ## ## Role allowed access. ## ## ## # interface(`radvd_admin',` gen_require(` type radvd_t, radvd_etc_t, radvd_initrc_exec_t; type radvd_var_run_t; ') allow $1 radvd_t:process signal_perms; ps_process_pattern($1, radvd_t) tunable_policy(`deny_ptrace',`',` allow $1 radvd_t:process ptrace; ') init_labeled_script_domtrans($1, radvd_initrc_exec_t) domain_system_change_exemption($1) role_transition $2 radvd_initrc_exec_t system_r; allow $2 system_r; files_list_etc($1) admin_pattern($1, radvd_etc_t) files_list_pids($1) admin_pattern($1, radvd_var_run_t) ')