summaryrefslogtreecommitdiff
path: root/policy/modules/services/perdition.if
diff options
context:
space:
mode:
authorChris PeBenito <cpebenito@tresys.com>2006-07-12 20:32:27 +0000
committerChris PeBenito <cpebenito@tresys.com>2006-07-12 20:32:27 +0000
commit17de1b790b30095d8dc26ef720d3cc6d0fbdceb5 (patch)
tree89e24b9b7407840b4b6b56d58c908f1df022f712 /policy/modules/services/perdition.if
parentb6a9bc355553f05e84f937005f53d39cdad70e27 (diff)
remove extra level of directory
Diffstat (limited to 'policy/modules/services/perdition.if')
-rw-r--r--policy/modules/services/perdition.if21
1 files changed, 21 insertions, 0 deletions
diff --git a/policy/modules/services/perdition.if b/policy/modules/services/perdition.if
new file mode 100644
index 00000000..949cc11f
--- /dev/null
+++ b/policy/modules/services/perdition.if
@@ -0,0 +1,21 @@
+## <summary>Perdition POP and IMAP proxy</summary>
+
+########################################
+## <summary>
+## Connect to perdition over a TCP socket
+## </summary>
+## <param name="domain">
+## <summary>
+## The type of the process performing this action.
+## </summary>
+## </param>
+#
+interface(`perdition_tcp_connect',`
+ gen_require(`
+ type perdition_t;
+ ')
+
+ allow $1 perdition_t:tcp_socket { connectto recvfrom };
+ allow perdition_t $1:tcp_socket { acceptfrom recvfrom };
+ kernel_tcp_recvfrom($1)
+')