unconfined_additional.te 1.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. policy_module(unconfined_additional, 0.0.8)
  2. require {
  3. type unconfined_t;
  4. type portage_sandbox_t;
  5. type atop_t;
  6. type atop_initrc_exec_t;
  7. type atop_unit_t;
  8. type spamd_t;
  9. type spamd_initrc_exec_t;
  10. type spamassassin_unit_t;
  11. type phpfpm_t;
  12. type phpfpm_initrc_exec_t;
  13. type phpfpm_unit_t;
  14. type amavis_t;
  15. type amavis_initrc_exec_t;
  16. type amavis_unit_t;
  17. type jabberd_t;
  18. type jabberd_initrc_exec_t;
  19. type jabber_unit_t;
  20. type turnserver_t;
  21. type turnserver_initrc_exec_t;
  22. type turnserver_unit_t;
  23. role unconfined_r;
  24. }
  25. allow unconfined_t portage_sandbox_t:process transition;
  26. allow unconfined_t self:process execmem;
  27. init_startstop_service(unconfined_t, unconfined_r, atop_t, atop_initrc_exec_t, atop_unit_t)
  28. init_startstop_service(unconfined_t, unconfined_r, spamd_t, spamd_initrc_exec_t, spamd_unit_t)
  29. init_startstop_service(unconfined_t, unconfined_r, phpfpm_t, phpfpm_initrc_exec_t, phpfpm_unit_t)
  30. init_startstop_service(unconfined_t, unconfined_r, amavis_t, amavis_initrc_exec_t, amavis_unit_t)
  31. init_startstop_service(unconfined_t, unconfined_r, jabberd_t, jabberd_initrc_exec_t, jabber_unit_t)
  32. init_startstop_service(unconfined_t, unconfined_r, turnserver_t, turnserver_initrc_exec_t, turnserver_unit_t)
  33. logging_admin_audit(unconfined_t, unconfined_r)
  34. dovecot_admin(unconfined_t, unconfined_r)
  35. openvpn_admin(unconfined_t, unconfined_r)
  36. logging_admin_syslog(unconfined_t, unconfined_r)
  37. mysql_admin(unconfined_t, unconfined_r)
  38. postfix_admin(unconfined_t, unconfined_r)
  39. ntp_admin(unconfined_t, unconfined_r)
  40. bind_admin(unconfined_t, unconfined_r)
  41. clamav_admin(unconfined_t, unconfined_r)
  42. apache_admin(unconfined_t, unconfined_r)