diff options
Diffstat (limited to 'policy/modules/services/dictd.if')
| -rw-r--r-- | policy/modules/services/dictd.if | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/policy/modules/services/dictd.if b/policy/modules/services/dictd.if new file mode 100644 index 00000000..5addaa1a --- /dev/null +++ b/policy/modules/services/dictd.if @@ -0,0 +1,22 @@ +## <summary>Dictionary daemon</summary> + +######################################## +## <summary> +## Use dictionary services by connecting +## over TCP. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`dictd_tcp_connect',` + gen_require(` + type dictd_t; + ') + + allow $1 dictd_t:tcp_socket { connectto recvfrom }; + allow dictd_t $1:tcp_socket { acceptfrom recvfrom }; + kernel_tcp_recvfrom($1) +') |