Skip to content

Commit

Permalink
Removed unnecessary lines. Moved admin_interface to be last interface.
Browse files Browse the repository at this point in the history
Signed-off-by: lquidfire <[email protected]>
  • Loading branch information
lquidfire authored Jan 9, 2025
1 parent 6c38bc6 commit 10ba292
Showing 1 changed file with 20 additions and 24 deletions.
44 changes: 20 additions & 24 deletions policy/modules/services/arc.if
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,26 @@ interface(`openarc_stream_connect',`
stream_connect_pattern($1, openarc_milter_data_t, openarc_milter_data_t, openarc_milter_t)
')

########################################
## <summary>
## Reload the openarc service (systemd).
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`openarc_reload',`
gen_require(`
type openarc_unit_t;
class service { reload status };
')

allow $1 openarc_unit_t:service { reload status };
')


########################################
## <summary>
## All of the rules required to
Expand Down Expand Up @@ -46,33 +66,9 @@ interface(`openarc_admin',`

init_startstop_service($1, $2, openarc_milter_t, openarc_milter_initrc_exec_t)

# init_labeled_script_domtrans($1, openarc_milter_initrc_exec_t)
# domain_system_change_exemption($1)
# role_transition $2 openarc_milter_initrc_exec_t system_r;
# allow $2 system_r;

files_search_etc($1)
admin_pattern($1, openarc_milter_private_key_t)

files_search_runtime($1)
admin_pattern($1, openarc_milter_data_t)
')

########################################
## <summary>
## Reload the openarc service (systemd).
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`openarc_reload',`
gen_require(`
type openarc_unit_t;
class service { reload status };
')

allow $1 openarc_unit_t:service { reload status };
')

0 comments on commit 10ba292

Please sign in to comment.