forked from OwlCyberDefense/refpolicy-contrib
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathmon.if
38 lines (33 loc) · 717 Bytes
/
mon.if
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
## <summary>mon network monitoring daemon.</summary>
######################################
## <summary>
## dontaudit using an inherited fd from mon_t
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit
## </summary>
## </param>
#
interface(`mon_dontaudit_use_fds',`
gen_require(`
type mon_t;
')
dontaudit $1 mon_t:fd use;
')
######################################
## <summary>
## dontaudit searching /var/lib/mon
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit
## </summary>
## </param>
#
interface(`mon_dontaudit_search_var_lib',`
gen_require(`
type mon_var_lib_t;
')
dontaudit $1 mon_var_lib_t:dir search;
')