.

KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory : /proc/21572/root/usr/share/selinux/targeted/
Upload File :
Current File : //proc/21572/root/usr/share/selinux/targeted/smartmon.pp
П |∙ўН |∙SE Linux Modulesmartmon1.1.0..$netlink_audit_socketnlmsg_relay
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_readprivnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read
tcp_socket
appendbindconnectcreatewriterelabelfrom
acceptfrom	connecttoioctl	name_bind	node_bindnewconnsendtorecv_msgsend_msggetattrsetattracceptgetoptname_connectreadsetoptshutdownrecvfromlock		relabelto
listen

msgq	associatecreatewrite	unix_readdestroygetattrsetattrread
enqueue
	unix_writedirrmdir
appendcreateexecutewriterelabelfromlinkunlinkioctlremove_namegetattrsetattradd_namereparentread
renamesearchlock		relabeltomountonquotaonswaponblk_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswapon
chr_file
appendcreateexecutewriterelabelfromlinkunlinkioctl
entrypointgetattrsetattrexecmodread
renamelock		relabeltoexecute_no_transmountonquotaonswapon		ipc	associatecreatewrite	unix_readdestroygetattrsetattrread
	unix_write	lnk_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponprocessgetcapsetcapsigstopsigchldshareexecheap
setcurrentsetfscreatesetkeycreatesiginh
dyntransition
transitionfork
getsession
noatsecuresigkillsignull	setrlimitgetattr	getschedsetexec
setschedgetpgid
setpgidptrace	execstack	rlimitinh
setsockcreatesignalexecmemfduse*packetflow_outsendrecv	relabeltoflow_insocket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen	
fifo_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponfile
appendcreateexecutewriterelabelfromlinkunlinkioctl
entrypointgetattrsetattrexecmodread
renamelock		relabeltoexecute_no_transmountonquotaonswapon		node
rawip_recvtcp_recvudp_recv
rawip_sendtcp_sendudp_send	dccp_recv		dccp_sendenforce_dest!netlink_nflog_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen+keycreatewriteviewlinksetattrreadsearch netlink_tcpdiag_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_readunix_stream_socket
appendbindconnectcreatewriterelabelfrom
acceptfrom	connecttoioctl	name_bindnewconnsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listennetlink_route_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read

shm	associatecreatewrite	unix_readdestroygetattrsetattrread
lock
	unix_write#netlink_selinux_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
capability	setpcapfownersys_bootsys_tty_confignet_raw	sys_admin
sys_chroot
sys_module	sys_rawiodac_override	ipc_ownerkilldac_read_search	sys_pacct
net_broadcastnet_bind_servicesys_nicesys_timefsetidmknodsetgidsetuidlease	
net_adminaudit_write
linux_immutable
sys_ptrace
audit_controlipc_locksys_resourcechown%netlink_ip6fw_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read,dccp_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptname_connectreadsetoptshutdownrecvfromlock		relabelto
listennetlink_firewall_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read	sock_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponunix_dgram_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen(netlink_kobject_uevent_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen


filesystem	associate
quotagetrelabelfrom
transitiongetattr	quotamodmountremountunmount	relabelto"netlink_xfrm_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read&netlink_dnrt_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen.nscd	shmemservgethostgetgrp	shmemhostshmempwdgetpwdgetservshmemgrp
key_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listennetif
rawip_recvtcp_recvudp_recv
rawip_sendtcp_sendudp_send	dccp_recv	dccp_send
packet_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
-memprotect	mmap_zeromsgsendreceive
udp_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen)appletalk_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listenrawip_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen'association
setcontextsendtorecvfrompolmatchnetlink_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen		sem	associatecreatewrite	unix_readdestroygetattrsetattrread
	unix_writesystemipc_infosyslog_readsyslog_console
syslog_modsecuritycompute_membercompute_usercompute_create
setenforce
check_contextsetcheckreqprotcompute_relabel	setboolload_policy
setsecparam
compute_avobject_r@@@system_r@@@@@ZZ@@direct_init
2@etc_runtime_t@nscd_var_run_t0@privfd	@@*file_type	@@exec_typeM@dns_client_packet_t	,@node_type*@unlabeled_t@fsdaemon_var_run_t	-@port_type@@scsi_generic_device_t=@@fixed_disk_raw_write@selinux_config_t
@@entry_typeQ@user_home_dir_t<@@fixed_disk_raw_readX@default_context_t5@filesystem_type6@autofs_t@device_tH@devlog_t@devpts_t@initrc_tI@locale_t?@@scsi_generic_readN@avahi_t1@etc_tC@ld_so_t"@proc_t@rpm_t.@sysfs_t;@tmpfs_t@console_device_t
@@initscript)@base_ro_file_type
Z@udev_tbl_t@fsdaemon_tmp_t7@@mlsfileread@@direct_init_entry
D@ld_so_cache_t
K@netif_type	W@newrole_t@initrc_devpts_t
%@proc_mdstat_t@direct_run_initO@avahi_var_run_t
J@net_conf_t/@urandom_device_tY@file_context_t$@sysctl_kernel_t@fsdaemon_exec_t
!@@ polymemberR@tty_device_tA@@scsi_generic_write8@@mlsfilewrite:@fixed_disk_device_t#@sysctl_t&@bin_t@init_tB@lib_t+@netif_t@nscd_tS@root_t'@sbin_tE@shlib_t @tmp_t4@usr_t@var_t@fsdaemon_initrc_exec_t
@fsdaemon_t@@daemon@@pidfile@@ tmpfile
U@system_mail_tP@unpriv_userdomain
L@dns_port_tT@mta_user_agentF@textrel_shlib_t
@@initrc_domain>@removable_device_t
9@@mlsrangetrans

@security_t
@unconfined_t	G@syslogd_t	@var_run_t(@user_exec_typeV@sendmail_exec_t
3@configfile	@@domainfsdaemon_disable_transs0@c0c1023@@@@@@S @@ @@@@S 	@@ @@@@H@@ @@@@@@@@@ @
W@@@@@ @@@ @@@@@@ @@@@@@ @@@@X@@ @@@@@@ @@@@ ╜@@@@@@@@@@@@@@@@@@@@@@@@S @@@@@@@@@@@@
W@@@@@@S@@@@@@	@@@@@@S@@@@@@
W@@@@@@ @@@@@@@@@@@@X@@@@@@@@@@@@@@@@@@X@@@@@@@@@@@@
W@@@@@@@@ @@@@@@ @@@@S @@@@@@"@@@@@@@@@@|@@@@@
W@@@@@?╬@@@@@?■@@@@@?╬@@@@@?╬A@@@@@ @W@@@@@ @>@@@@@ @W@@@@@ @@@@@@А@W@@@@@А@@@@@@@W@@@@@@@@@@@А@@@@@@@W@@@@@@@@@@@@@@@@@@S@@@@@@S@@@@@@S@@@@@@S@@@@@@S@@@@@@S@@@@@@	@@@@@@S@@@@@А@S @@@@@А@S @@@@@`@S@@@@@`@	S@@@@@@S @@@@@@*@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@U4@@@@@ @S@@@@@ @S	S@@@@@@S@@@@@@@
S@@@@@А@@@@@@@S@@@@@@	S@@@@@@S @@@@@@S@@@@@@S@@@@@@	@@@@@@S@@@@@@S@@@@@@	S@@@@@@S@@@@@@S@@@@@@	@@@@@@S@@@@@@@@@@@@S@@@@@@@@@@@@	@@@@@@S@@@@@@S	S@@@@@@@@@@@@@@@@@ @@@@@@@W@@@@@@:@@@@@@А@@@@@А@А@@@@@@S@@@@@@	@@@@@@S@@@@@@
S@@@@@@S@@@@@@	@@@@@@@@@@@@
@@@@@@S@@@@@@	@@@@@ @S@@@@@@S@@@@@@	@@@@@А@
S@@@@@@S@@@@@@	@@@@@А@
@@@@@@S@@@@@@	@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@
@@@@@@U@@@@@@
W@@@@@@S@@@@@@@@@@@@@@@@@@S@@@@@@	@@@@@@S@@@@@@
W@@@@@@S@@@@А@@S@@@@А@@	S@@@@А@@	S@@@@А@@S @@@@А@@S@@@@@@S@@@@А@@S@@@@А@@	S@@@@А@0@	S@@@@А@0@S @@@@А@ @@@@@А@@S@@@@А@@	S@@@@А@@	S@@@@А@@S @@@@@@@@@@А@@S@@@@А@@	S@@@@А@@S @@@@А@А@	@@@@А@А@W@@@@А@@@@@@@А@@@@@@@@@?╬@@@@@?╬@@@@@@S@@@@@@	@@@@@@
W@@@@@@@@@@@@	@@@@@@@@@@А@@S@@@@А@@	S@@@@А@@S@@@@@@@@@@А@@S@@@@А@@S	S@@@@@@S@@@@@@@@@@@@@@@@@?╬@@@@@?╬@@@@@@*@@@@А@@@@@@А@@@@@@А@@@@@@@@@@@@@@@@@@@@@@@@А@@@@@@А@@@@@@А@@@@@@А@@@@@@А@@*@@@@А@@*@@@@@@@@@@А@@S@@@@А@А@@@@@А@@@@@@А@@
W@@@@@@
@@@@А@@@@@     @@@А№╫Я╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@*@@@@@@@@@@@@@@@@@ @@@     @@@А№╫Я╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@@@@@@@@
S@@@     @@@А№▀Я╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     @@@А№╫Я╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@ @@@@@@ @@@@     @@@А№ўЯ╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@
@@@@@?╬@@@@@ @.@@@@@ @@@@@@ @.ё@@@@@А@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@     ?@@@А№╫ ╒    @ Я@@@@@@.@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@ @@@@@@@@@@@@@А@@@@@@@@@@@А@@@@@@@А@@@@@@@А@ @@@@@     @@@А№╫Я╒    @  @@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@
@@@@@?╬@@@@@ @.@@@@@ @@@@@@ @.ё@@@@@А@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@     ?@@@А№╫ ╒    @ Я@@@@@@.@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@ @@@@@@@@	@@@@А@ @	S@@@@А@ @ @@@@А@@@@@@А@@X@@@@А@ @U@@@@А@@@А@@@@@@А@@@@@
W@А@@@@@@А@@@@@@А@@@@@@А@@@@@
@@@     @@@А№╫Я╒    @ Я?@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@
@@@@А@@@@@@@@@@@@@А @А@@@@@А@@@@@@А@@S@@@     @@@А№ўЯ╒    @ Я╟@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@@S@@@@@@	@@@@А@@S@@@@А@@@@@@А@@S@@@@А@@@@@@А@@	@@@     @@@А№╫Я╒    @ Я@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@.netlink_audit_socket
tcp_socketmsgqdirblk_filechr_fileipclnk_fileprocessfdpacketsocket	fifo_filefilenodenetlink_nflog_socketkeynetlink_tcpdiag_socketunix_stream_socketnetlink_route_socketshmnetlink_selinux_socket
capabilitynetlink_ip6fw_socketdccp_socketnetlink_firewall_socket	sock_fileunix_dgram_socketnetlink_kobject_uevent_socket
filesystemnetlink_xfrm_socketnetlink_dnrt_socketnscd
key_socketnetif
packet_socket
memprotectmsg
udp_socketappletalk_socketrawip_socketassociationnetlink_socketsemsystemsecurityobject_rsystem_rZdirect_init
etc_runtime_tnscd_var_run_tprivfd	file_type	exec_typedns_client_packet_t	node_typeunlabeled_tfsdaemon_var_run_t	port_typescsi_generic_device_tfixed_disk_raw_writeselinux_config_t

entry_typeuser_home_dir_tfixed_disk_raw_readdefault_context_t
filesystem_typeautofs_tdevice_tdevlog_tdevpts_tinitrc_tlocale_tscsi_generic_readavahi_tetc_t
ld_so_tproc_trpm_tsysfs_ttmpfs_tconsole_device_t
initscriptbase_ro_file_type
udev_tbl_tfsdaemon_tmp_tmlsfilereaddirect_init_entry
ld_so_cache_t
netif_type	newrole_t
initrc_devpts_t
proc_mdstat_tdirect_run_initavahi_var_run_t
net_conf_turandom_device_tfile_context_t
sysctl_kernel_tfsdaemon_exec_t
polymembertty_device_tscsi_generic_writemlsfilewritefixed_disk_device_tsysctl_tbin_tinit_tlib_tnetif_tnscd_troot_tsbin_tshlib_ttmp_tusr_tvar_tfsdaemon_initrc_exec_t
fsdaemon_tdaemonpidfiletmpfile
system_mail_t	unpriv_userdomain
dns_port_tmta_user_agent	textrel_shlib_t
initrc_domainremovable_device_t
mlsrangetrans
security_tunconfined_t	syslogd_t	var_run_tuser_exec_typesendmail_exec_t	
configfiledomainfsdaemon_disable_transs0c0c1023Р |∙#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#




























#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#






























#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
























#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#





#
# unix domain socket patterns
#



########################################
#
# Macros for switching between source policy
# and loadable policy module support
#

##############################
#
# For adding the module statement
#


##############################
#
# For use in interfaces, to optionally insert a require block
#


# helper function, since m4 wont expand macros
# if a line is a comment (#):

##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#


##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#




##############################
#
# Optional policy handling
#


##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#


##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.



##############################
#
# Tunable declaration
#


##############################
#
# Tunable policy handling
#


########################################
#
# Helper macros
#

#
# shiftn(num,list...)
#
# shift the list num times
#


#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#


#
# __endline__
#
# dummy macro to insert a newline.  used for 
# errprint, so the close parentheses can be
# indented correctly.
#


########################################
#
# refpolwarn(message)
#
# print a warning message
#


########################################
#
# refpolerr(message)
#
# print an error message.  does not
# make anything fail.
#


########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#


########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#

########################################
#
# can_exec(domain,executable)
#


########################################
#
# gen_bool(name,default_value)
#



#
# Specified domain transition patterns
#


# compatibility:




#
# Automatic domain transition patterns
#


# compatibility:




#
# Other process permissions
#



########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#




########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#






########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#




########################################
#
# Basic level names for system low and high
#





########################################
# 
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.

#
# All directory and file classes
#


#
# All non-directory file classes.
#


#
# Non-device file classes.
#


#
# Device file classes.
#


#
# All socket classes.
#



#
# Datagram socket classes.
# 


#
# Stream socket classes.
#


#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#


########################################
# 
# Macros for sets of permissions
#

# 
# Permissions for getting file attributes.
#


# 
# Permissions for executing files.
#


# 
# Permissions for reading files and their attributes.
#


# 
# Permissions for reading and executing files.
#


# 
# Permissions for reading and appending to files.
#


#
# Permissions for linking, unlinking and renaming files.
# 


#
# Permissions for creating lnk_files.
#


#
# Permissions for creating and using files.
# 


# 
# Permissions for reading directories and their attributes.
#


# 
# Permissions for reading and writing directories and their attributes.
#


# 
# Permissions for reading and adding names to directories.
#



#
# Permissions for creating and using directories.
# 


#
# Permissions to mount and unmount file systems.
#


#
# Permissions for using sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for using stream sockets.
# 


#
# Permissions for creating and using stream sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for creating and using sockets.
# 



#
# Permissions for creating and using netlink sockets.
# 


#
# Permissions for using netlink sockets for operations that modify state.
# 


#
# Permissions for using netlink sockets for operations that observe state.
# 


#
# Permissions for sending all signals.
#


#
# Permissions for sending and receiving network packets.
#


#
# Permissions for using System V IPC
#










########################################
#
# New permission sets
#

#
# Directory
#








#
# File
#









#
# Use (read and write) terminals
#


#
# Sockets
#



########################################
#
# New permission sets
#

#
# Directory (dir)
#












#
# Regular file (file)
#















#
# Symbolic link (lnk_file)
#












#
# (Un)named Pipes/FIFOs (fifo_file)
#













#
# (Un)named Sockets (sock_file)
#












#
# Block device nodes (blk_file)
#














#
# Character device nodes (chr_file)
#














########################################
#
# Special permission sets
#

#
# Use (read and write) terminals
#


#
# Sockets
#











#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#




























#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#






























#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
























#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#





#
# unix domain socket patterns
#



########################################
#
# Macros for switching between source policy
# and loadable policy module support
#

##############################
#
# For adding the module statement
#


##############################
#
# For use in interfaces, to optionally insert a require block
#


# helper function, since m4 wont expand macros
# if a line is a comment (#):

##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#


##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#




##############################
#
# Optional policy handling
#


##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#


##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.



##############################
#
# Tunable declaration
#


##############################
#
# Tunable policy handling
#


########################################
#
# Helper macros
#

#
# shiftn(num,list...)
#
# shift the list num times
#


#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#


#
# __endline__
#
# dummy macro to insert a newline.  used for 
# errprint, so the close parentheses can be
# indented correctly.
#


########################################
#
# refpolwarn(message)
#
# print a warning message
#


########################################
#
# refpolerr(message)
#
# print an error message.  does not
# make anything fail.
#


########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#


########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#

########################################
#
# can_exec(domain,executable)
#


########################################
#
# gen_bool(name,default_value)
#



#
# Specified domain transition patterns
#


# compatibility:




#
# Automatic domain transition patterns
#


# compatibility:




#
# Other process permissions
#



########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#




########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#






########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#




########################################
#
# Basic level names for system low and high
#





########################################
# 
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.

#
# All directory and file classes
#


#
# All non-directory file classes.
#


#
# Non-device file classes.
#


#
# Device file classes.
#


#
# All socket classes.
#



#
# Datagram socket classes.
# 


#
# Stream socket classes.
#


#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#


########################################
# 
# Macros for sets of permissions
#

# 
# Permissions for getting file attributes.
#


# 
# Permissions for executing files.
#


# 
# Permissions for reading files and their attributes.
#


# 
# Permissions for reading and executing files.
#


# 
# Permissions for reading and appending to files.
#


#
# Permissions for linking, unlinking and renaming files.
# 


#
# Permissions for creating lnk_files.
#


#
# Permissions for creating and using files.
# 


# 
# Permissions for reading directories and their attributes.
#


# 
# Permissions for reading and writing directories and their attributes.
#


# 
# Permissions for reading and adding names to directories.
#



#
# Permissions for creating and using directories.
# 


#
# Permissions to mount and unmount file systems.
#


#
# Permissions for using sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for using stream sockets.
# 


#
# Permissions for creating and using stream sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for creating and using sockets.
# 



#
# Permissions for creating and using netlink sockets.
# 


#
# Permissions for using netlink sockets for operations that modify state.
# 


#
# Permissions for using netlink sockets for operations that observe state.
# 


#
# Permissions for sending all signals.
#


#
# Permissions for sending and receiving network packets.
#


#
# Permissions for using System V IPC
#










########################################
#
# New permission sets
#

#
# Directory
#








#
# File
#









#
# Use (read and write) terminals
#


#
# Sockets
#



########################################
#
# New permission sets
#

#
# Directory (dir)
#












#
# Regular file (file)
#















#
# Symbolic link (lnk_file)
#












#
# (Un)named Pipes/FIFOs (fifo_file)
#













#
# (Un)named Sockets (sock_file)
#












#
# Block device nodes (blk_file)
#














#
# Character device nodes (chr_file)
#














########################################
#
# Special permission sets
#

#
# Use (read and write) terminals
#


#
# Sockets
#











/etc/rc\.d/init\.d/smartd --	system_u:object_r:fsdaemon_initrc_exec_t:s0

#
# /usr
#
/usr/sbin/smartd	--	system_u:object_r:fsdaemon_exec_t:s0

#
# /var
#
/var/run/smartd\.pid	--	system_u:object_r:fsdaemon_var_run_t:s0
Anon7 - 2021