path: root/common/sepolicy/pppoe_wrapper.te (plain)
blob: 892d556de8eb988e14e876aa425befd3ddf42647

1	type pppoe_wrapper, domain;
2	type pppoe_wrapper_exec, exec_type, file_type;
3
4	init_daemon_domain(pppoe_wrapper)
5
6	allow pppoe_wrapper ppp_exec:file { execute_no_trans execute getattr read open };
7	allow pppoe_wrapper pppoe_wrapper_exec:file { entrypoint read execute };
8	allow pppoe_wrapper system_file:file execute_no_trans;
9	allow pppoe_wrapper pppoe_wrapper:process setfscreate;
10	allow pppoe_wrapper pppoe_wrapper:capability { net_raw dac_override net_admin setgid setuid kill };
11	allow pppoe_wrapper pppoe_wrapper:netlink_route_socket { bind create read write };
12	allow pppoe_wrapper property_socket:sock_file write;
13	allow pppoe_wrapper system_app:unix_dgram_socket sendto;
14	allow pppoe_wrapper ppp_data_file:sock_file { create write setattr unlink };
15	allow pppoe_wrapper ppp_data_file:dir { write search setattr create add_name mounton remove_name };
16	allow pppoe_wrapper ppp_data_file:file { create write open lock getattr read unlink };
17	allow pppoe_wrapper ppp_system_file:dir search;
18	allow pppoe_wrapper socket_device:dir { add_name write };
19	allow pppoe_wrapper socket_device:sock_file { create setattr };
20	allow pppoe_wrapper pppoe_wrapper_socket:sock_file { create setattr write };
21	allow pppoe_wrapper shell_exec:file { execute_no_trans execute read open };
22	allow pppoe_wrapper net_radio_prop:property_service set;
23	allow pppoe_wrapper dhcp_prop:property_service set;
24	allow pppoe_wrapper init:unix_stream_socket connectto;
25	allow pppoe_wrapper socket_device:sock_file { setattr write };
26	allow pppoe_wrapper rootfs:file { read open getattr };
27	allow pppoe_wrapper shell_exec:file getattr;
28	allow pppoe_wrapper proc_net:file { read open getattr };