Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
Date: Mon, 01 Feb 2021 02:10:28
Message-Id: 1612142502.b39af892a3459615c9941f545574d9561db23ab2.perfinion@gentoo
1 commit: b39af892a3459615c9941f545574d9561db23ab2
2 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
3 AuthorDate: Thu Jan 28 16:27:54 2021 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Mon Feb 1 01:21:42 2021 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b39af892
7
8 samba: Move service interface definitions.
9
10 Signed-off-by: Chris PeBenito <pebenito <AT> ieee.org>
11 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
12
13 policy/modules/services/samba.if | 152 +++++++++++++++++++--------------------
14 1 file changed, 76 insertions(+), 76 deletions(-)
15
16 diff --git a/policy/modules/services/samba.if b/policy/modules/services/samba.if
17 index 5e01db23..6af30d0c 100644
18 --- a/policy/modules/services/samba.if
19 +++ b/policy/modules/services/samba.if
20 @@ -328,6 +328,82 @@ interface(`samba_read_share_files',`
21 read_files_pattern($1, samba_share_t, samba_share_t)
22 ')
23
24 +########################################
25 +## <summary>
26 +## start samba daemon
27 +## </summary>
28 +## <param name="domain">
29 +## <summary>
30 +## Domain allowed access.
31 +## </summary>
32 +## </param>
33 +#
34 +interface(`samba_start',`
35 + gen_require(`
36 + type samba_unit_t;
37 + ')
38 +
39 + allow $1 samba_unit_t:file getattr;
40 + allow $1 samba_unit_t:service start;
41 +')
42 +
43 +########################################
44 +## <summary>
45 +## stop samba daemon
46 +## </summary>
47 +## <param name="domain">
48 +## <summary>
49 +## Domain allowed access.
50 +## </summary>
51 +## </param>
52 +#
53 +interface(`samba_stop',`
54 + gen_require(`
55 + type samba_unit_t;
56 + ')
57 +
58 + allow $1 samba_unit_t:file getattr;
59 + allow $1 samba_unit_t:service stop;
60 +')
61 +
62 +########################################
63 +## <summary>
64 +## get status of samba daemon
65 +## </summary>
66 +## <param name="domain">
67 +## <summary>
68 +## Domain allowed access.
69 +## </summary>
70 +## </param>
71 +#
72 +interface(`samba_status',`
73 + gen_require(`
74 + type samba_unit_t;
75 + ')
76 +
77 + allow $1 samba_unit_t:file getattr;
78 + allow $1 samba_unit_t:service status;
79 +')
80 +
81 +########################################
82 +## <summary>
83 +## reload samba daemon
84 +## </summary>
85 +## <param name="domain">
86 +## <summary>
87 +## Domain allowed access.
88 +## </summary>
89 +## </param>
90 +#
91 +interface(`samba_reload',`
92 + gen_require(`
93 + type samba_unit_t;
94 + ')
95 +
96 + allow $1 samba_unit_t:file getattr;
97 + allow $1 samba_unit_t:service reload;
98 +')
99 +
100 ########################################
101 ## <summary>
102 ## Search samba var directories.
103 @@ -729,79 +805,3 @@ interface(`samba_admin',`
104 files_list_tmp($1)
105 admin_pattern($1, { swat_tmp_t smbd_tmp_t winbind_tmp_t })
106 ')
107 -
108 -########################################
109 -## <summary>
110 -## start samba daemon
111 -## </summary>
112 -## <param name="domain">
113 -## <summary>
114 -## Domain allowed access.
115 -## </summary>
116 -## </param>
117 -#
118 -interface(`samba_start',`
119 - gen_require(`
120 - type samba_unit_t;
121 - ')
122 -
123 - allow $1 samba_unit_t:file getattr;
124 - allow $1 samba_unit_t:service start;
125 -')
126 -
127 -########################################
128 -## <summary>
129 -## stop samba daemon
130 -## </summary>
131 -## <param name="domain">
132 -## <summary>
133 -## Domain allowed access.
134 -## </summary>
135 -## </param>
136 -#
137 -interface(`samba_stop',`
138 - gen_require(`
139 - type samba_unit_t;
140 - ')
141 -
142 - allow $1 samba_unit_t:file getattr;
143 - allow $1 samba_unit_t:service stop;
144 -')
145 -
146 -########################################
147 -## <summary>
148 -## get status of samba daemon
149 -## </summary>
150 -## <param name="domain">
151 -## <summary>
152 -## Domain allowed access.
153 -## </summary>
154 -## </param>
155 -#
156 -interface(`samba_status',`
157 - gen_require(`
158 - type samba_unit_t;
159 - ')
160 -
161 - allow $1 samba_unit_t:file getattr;
162 - allow $1 samba_unit_t:service status;
163 -')
164 -
165 -########################################
166 -## <summary>
167 -## reload samba daemon
168 -## </summary>
169 -## <param name="domain">
170 -## <summary>
171 -## Domain allowed access.
172 -## </summary>
173 -## </param>
174 -#
175 -interface(`samba_reload',`
176 - gen_require(`
177 - type samba_unit_t;
178 - ')
179 -
180 - allow $1 samba_unit_t:file getattr;
181 - allow $1 samba_unit_t:service reload;
182 -')