.

KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory : /proc/21573/root/usr/share/selinux/targeted/
Upload File :
Current File : //proc/21573/root/usr/share/selinux/targeted/postgrey.pp
П |∙AтН |∙SE Linux Modulepostgrey1.1.0..$netlink_audit_socketnlmsg_relay
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_readprivnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read
tcp_socket
appendbindconnectcreatewriterelabelfrom
acceptfrom	connecttoioctl	name_bind	node_bindnewconnsendtorecv_msgsend_msggetattrsetattracceptgetoptname_connectreadsetoptshutdownrecvfromlock		relabelto
listen

msgq	associatecreatewrite	unix_readdestroygetattrsetattrread
enqueue
	unix_writedirrmdir
appendcreateexecutewriterelabelfromlinkunlinkioctlremove_namegetattrsetattradd_namereparentread
renamesearchlock		relabeltomountonquotaonswaponblk_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswapon
chr_file
appendcreateexecutewriterelabelfromlinkunlinkioctl
entrypointgetattrsetattrexecmodread
renamelock		relabeltoexecute_no_transmountonquotaonswapon		ipc	associatecreatewrite	unix_readdestroygetattrsetattrread
	unix_write	lnk_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponprocessgetcapsetcapsigstopsigchldshareexecheap
setcurrentsetfscreatesetkeycreatesiginh
dyntransition
transitionfork
getsession
noatsecuresigkillsignull	setrlimitgetattr	getschedsetexec
setschedgetpgid
setpgidptrace	execstack	rlimitinh
setsockcreatesignalexecmemfduse*packetflow_outsendrecv	relabeltoflow_insocket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen	
fifo_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponfile
appendcreateexecutewriterelabelfromlinkunlinkioctl
entrypointgetattrsetattrexecmodread
renamelock		relabeltoexecute_no_transmountonquotaonswapon		node
rawip_recvtcp_recvudp_recv
rawip_sendtcp_sendudp_send	dccp_recv		dccp_sendenforce_dest!netlink_nflog_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen+keycreatewriteviewlinksetattrreadsearch netlink_tcpdiag_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_readunix_stream_socket
appendbindconnectcreatewriterelabelfrom
acceptfrom	connecttoioctl	name_bindnewconnsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listennetlink_route_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read

shm	associatecreatewrite	unix_readdestroygetattrsetattrread
lock
	unix_write#netlink_selinux_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
capability	setpcapfownersys_bootsys_tty_confignet_raw	sys_admin
sys_chroot
sys_module	sys_rawiodac_override	ipc_ownerkilldac_read_search	sys_pacct
net_broadcastnet_bind_servicesys_nicesys_timefsetidmknodsetgidsetuidlease	
net_adminaudit_write
linux_immutable
sys_ptrace
audit_controlipc_locksys_resourcechown%netlink_ip6fw_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read,dccp_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptname_connectreadsetoptshutdownrecvfromlock		relabelto
listennetlink_firewall_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read	sock_file
appendcreateexecutewriterelabelfromlinkunlinkioctlgetattrsetattrread
renamelock		relabeltomountonquotaonswaponunix_dgram_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen(netlink_kobject_uevent_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen


filesystem	associate
quotagetrelabelfrom
transitiongetattr	quotamodmountremountunmount	relabelto"netlink_xfrm_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindnlmsg_writesendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
nlmsg_read&netlink_dnrt_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen.nscd	shmemservgethostgetgrp	shmemhostshmempwdgetpwdgetservshmemgrp
key_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listennetif
rawip_recvtcp_recvudp_recv
rawip_sendtcp_sendudp_send	dccp_recv	dccp_send
packet_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen
-memprotect	mmap_zeromsgsendreceive
udp_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen)appletalk_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listenrawip_socket
appendbindconnectcreatewriterelabelfromioctl	name_bind	node_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen'association
setcontextsendtorecvfrompolmatchnetlink_socket
appendbindconnectcreatewriterelabelfromioctl	name_bindsendtorecv_msgsend_msggetattrsetattracceptgetoptreadsetoptshutdownrecvfromlock		relabelto
listen		sem	associatecreatewrite	unix_readdestroygetattrsetattrread
	unix_writesystemipc_infosyslog_readsyslog_console
syslog_modsecuritycompute_membercompute_usercompute_create
setenforce
check_contextsetcheckreqprotcompute_relabel	setboolload_policy
setsecparam
compute_avobject_r@@@system_r@@@@@QQ@@direct_init
2@etc_runtime_t@nscd_var_run_t0@privfd	@@║file_type	@@Аexec_type	*@node_type(@unlabeled_t	+@port_type@selinux_config_t
@@Аentry_type@postgrey_var_lib_t@postgrey_var_run_tA@user_home_dir_t@postgrey_etc_t5@filesystem_type6@autofs_t@device_t=@devlog_t@devpts_t@initrc_t>@locale_t1@etc_t8@ld_so_t#@proc_t@rpm_t/@sysfs_tG@reserved_port_t@console_device_t
!@@АinitscriptK@client_packet_tH@reserved_port_type
M@postfix_etc_t @postgrey_initrc_exec_t
Q@udev_tbl_t@@direct_init_entry@postgrey_exec_t
9@ld_so_cache_t
E@netif_type	P@newrole_t@initrc_devpts_t@direct_run_init
?@net_conf_t.@urandom_device_t%@sysctl_kernel_tI@portmap_port_tB@tty_device_tN@postfix_spool_t$@sysctl_tD@var_yp_t&@bin_t@init_t7@lib_t)@netif_t@nscd_tF@port_tC@root_t'@sbin_t:@shlib_t4@tmp_t3@usr_t@var_t@@daemon@@ pidfile@@unpriv_userdomain@postgrey_spool_t;@textrel_shlib_t,@postgrey_port_t
@@initrc_domain-@postgrey_server_packet_t

@security_t
@unconfined_tO@var_spool_t
@postgrey_t	<@syslogd_t	"@var_lib_t	@var_run_tJ@portmap_client_packet_t
@@configfileL@server_packet_t	@@domainpostgrey_disable_transallow_ypbinds0@c0c1023
@@@@@@S @@ @@@@S 	@@ @@@@H@@ @@@@@@@@@ @
W@@@@@ @@@ @@@@@@ @@@@@@ @@@@X@@ @@@@@@ @@@@ К@@@@@@@@@@@@@@@@@@@@@@@@S @@@@@@@@@@@@
W@@@@@@S@@@@@@	@@@@@@S@@@@@@
W@@@@@@ @@@@@@@@@@@@X@@@@@@@@@@@@@@@@@@X@@@@@@@@@@@@
W@@@@@@@@ @@@А@@@ @@@А@S @@@@@├@@@@@@@@@@|@@@@@?■@@@@@
@@@@@@S@@@@@@@@@@@@S@@@@@@@@@@@@	@@@@@@W@@@@@@>@@@@@@W@@@@@@@@@@@@W@@@@@@
@@@@@@W@@@@@@@@@@@@W@@@@@@@@@@@А@@@@@@@W@@@@@@@@@@@ @W@@@@@ @@@@@@ @W@@@@@ @@@@@@А@@@@@@@W@@@@@@@@@@@@S@@@@@@	@@@@@@S@@@@@@@@@@@@S@@@@@@S@@@@@@S@@@@@ @@@@@@@@@@@@@ @@@@@@@@@@@@@А@*@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@*@@@@@@*@@@@@@S@@@@@ @
S@@@@@@@S@@@@@@@S	S@@@@@А@@@@@@@S@@@@@@S@@@@@@	S@@@@@@S@@@@@@S@@@@@@	@@@@@@S@@@@@@@@@@@@S@@@@@@@@@@@@	@@@@@@S@@@@@@S@@@@@@	@@@@@@S@@@@@@S	S@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@
W@@@@@@@@@@@@S@@@@@@	@@@@@@S@@@@@@
W@@@@@@S@@@@@@@S@@@@@@@	S@@@@@А@	S@@@@@А@S @@@@@@S@@@@@@S@@@@@@@S@@@@@@@	S@@@@@@	S@@@@@@S @@@@@@@@@@@@	@@@@@@W@@@@@@@@@@@@@@@@@@?╬@@@@@?╬@@@@@@S@@@@@@	@@@@@@
W@@@@@@@@@@@@	@@@@@@@@@@@ @S@@@@@ @	S@@@@@ @S@@@@@@@@@@@@@S@@@@@@@S	S@@@@@@@@@@@@@S@@@@@А@@@@@А@@@@@@А@@
W@@@@@@
@@@@А@@@@@     @@@А№╟ЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@║@@@@@@@@@@@@@@@@@ @@@     @@@А№╟ЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@@@@@@@@
S@@@     @@@А№╧ЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     @@@А№╫ЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@@@@@@ @@@@@@ @@@@     @@@А№чЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@
@@@@@?╬@@@@@ @.@@@@@ @@@@@@ @.ё@@@@@А@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@     ?@@@А№╟ E    @@@@@@@.@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@ @@@@@@@@)@@@@@@@S@@@@@@@@@@А@@*@@@@А@@*@@@@А@@*@@@@А@@*@@@@А@@*@@@@А@@*@@@@@@@@@@А@А@@@@@А@ @@@@@А@@@@@@@А@@@@@@@@ @@@@@@ @@@@А@А@ @@@@А@А@ @@@@@@@@@А@@@ @@@@@@@@@А@@@ @@@@А@ @ @@@@А@ @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@А@@@@@@А@@@@@@А@@@@@@@А@*@@@@А@@S@@@@А@@	@@@@А@@S@@@@@?╬@@@@@?■@@@@@@@@     @@@А№╟ЯE    @ @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@	@@@@А@@@@@@А@@S@@@@А@@@@@@А@@	@@@@@@@@@@@А@@@@@А@@@@@@@А@ @W@@@@А@ @@@@     @@@А№╟ЯE    @p@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@	@@@@А@А@@@@     @@@А№╟ЯE    @А@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@
@@@@@@S@@@@@@	@@@@А@@S@@@@А@@@@@@А@@S@@@@А@@@@@@А@@	@@@     @@@А№╟ЯE    @@@@@@@-@@ @@   ?@@@@   @@ @@  @@  ?@@@@  @@  @@  @@  @@  @@  ?@@   @@  @@  @@ @@ @@  ?@@  ?@@  ?@@   @@  ?@@ @@@@ @@ @@ @@   @@   @@   @@  ?@@   @@  ?@@   @@   @@  ?@@@@  ?@@  ?@@@@@@   @@@@@@@@@@.netlink_audit_socket
tcp_socketmsgqdirblk_filechr_fileipclnk_fileprocessfdpacketsocket	fifo_filefilenodenetlink_nflog_socketkeynetlink_tcpdiag_socketunix_stream_socketnetlink_route_socketshmnetlink_selinux_socket
capabilitynetlink_ip6fw_socketdccp_socketnetlink_firewall_socket	sock_fileunix_dgram_socketnetlink_kobject_uevent_socket
filesystemnetlink_xfrm_socketnetlink_dnrt_socketnscd
key_socketnetif
packet_socket
memprotectmsg
udp_socketappletalk_socketrawip_socketassociationnetlink_socketsemsystemsecurityobject_rsystem_rQdirect_init
etc_runtime_tnscd_var_run_tprivfd	file_type	exec_type	node_typeunlabeled_t	port_typeselinux_config_t
entry_typepostgrey_var_lib_tpostgrey_var_run_tuser_home_dir_tpostgrey_etc_tfilesystem_typeautofs_tdevice_t
devlog_tdevpts_tinitrc_tlocale_tetc_tld_so_tproc_trpm_tsysfs_treserved_port_tconsole_device_t
initscriptclient_packet_treserved_port_type
postfix_etc_tpostgrey_initrc_exec_t
udev_tbl_t
direct_init_entrypostgrey_exec_t
ld_so_cache_t
netif_type	newrole_t	initrc_devpts_tdirect_run_init
net_conf_turandom_device_tsysctl_kernel_tportmap_port_ttty_device_tpostfix_spool_tsysctl_tvar_yp_tbin_tinit_tlib_tnetif_tnscd_tport_troot_tsbin_tshlib_ttmp_tusr_tvar_tdaemonpidfileunpriv_userdomainpostgrey_spool_ttextrel_shlib_tpostgrey_port_t
initrc_domainpostgrey_server_packet_t
security_tunconfined_tvar_spool_t
postgrey_t	syslogd_t	var_lib_t	var_run_tportmap_client_packet_t
configfileserver_packet_tdomainpostgrey_disable_transallow_ypbinds0c0c1023Р |∙#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#




























#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#






























#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
























#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#





#
# unix domain socket patterns
#



########################################
#
# Macros for switching between source policy
# and loadable policy module support
#

##############################
#
# For adding the module statement
#


##############################
#
# For use in interfaces, to optionally insert a require block
#


# helper function, since m4 wont expand macros
# if a line is a comment (#):

##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#


##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#




##############################
#
# Optional policy handling
#


##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#


##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.



##############################
#
# Tunable declaration
#


##############################
#
# Tunable policy handling
#


########################################
#
# Helper macros
#

#
# shiftn(num,list...)
#
# shift the list num times
#


#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#


#
# __endline__
#
# dummy macro to insert a newline.  used for 
# errprint, so the close parentheses can be
# indented correctly.
#


########################################
#
# refpolwarn(message)
#
# print a warning message
#


########################################
#
# refpolerr(message)
#
# print an error message.  does not
# make anything fail.
#


########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#


########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#

########################################
#
# can_exec(domain,executable)
#


########################################
#
# gen_bool(name,default_value)
#



#
# Specified domain transition patterns
#


# compatibility:




#
# Automatic domain transition patterns
#


# compatibility:




#
# Other process permissions
#



########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#




########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#






########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#




########################################
#
# Basic level names for system low and high
#





########################################
# 
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.

#
# All directory and file classes
#


#
# All non-directory file classes.
#


#
# Non-device file classes.
#


#
# Device file classes.
#


#
# All socket classes.
#



#
# Datagram socket classes.
# 


#
# Stream socket classes.
#


#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#


########################################
# 
# Macros for sets of permissions
#

# 
# Permissions for getting file attributes.
#


# 
# Permissions for executing files.
#


# 
# Permissions for reading files and their attributes.
#


# 
# Permissions for reading and executing files.
#


# 
# Permissions for reading and appending to files.
#


#
# Permissions for linking, unlinking and renaming files.
# 


#
# Permissions for creating lnk_files.
#


#
# Permissions for creating and using files.
# 


# 
# Permissions for reading directories and their attributes.
#


# 
# Permissions for reading and writing directories and their attributes.
#


# 
# Permissions for reading and adding names to directories.
#



#
# Permissions for creating and using directories.
# 


#
# Permissions to mount and unmount file systems.
#


#
# Permissions for using sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for using stream sockets.
# 


#
# Permissions for creating and using stream sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for creating and using sockets.
# 



#
# Permissions for creating and using netlink sockets.
# 


#
# Permissions for using netlink sockets for operations that modify state.
# 


#
# Permissions for using netlink sockets for operations that observe state.
# 


#
# Permissions for sending all signals.
#


#
# Permissions for sending and receiving network packets.
#


#
# Permissions for using System V IPC
#










########################################
#
# New permission sets
#

#
# Directory
#








#
# File
#









#
# Use (read and write) terminals
#


#
# Sockets
#



########################################
#
# New permission sets
#

#
# Directory (dir)
#












#
# Regular file (file)
#















#
# Symbolic link (lnk_file)
#












#
# (Un)named Pipes/FIFOs (fifo_file)
#













#
# (Un)named Sockets (sock_file)
#












#
# Block device nodes (blk_file)
#














#
# Character device nodes (chr_file)
#














########################################
#
# Special permission sets
#

#
# Use (read and write) terminals
#


#
# Sockets
#











#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#




























#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#






























#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
























#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#


























#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#





#
# unix domain socket patterns
#



########################################
#
# Macros for switching between source policy
# and loadable policy module support
#

##############################
#
# For adding the module statement
#


##############################
#
# For use in interfaces, to optionally insert a require block
#


# helper function, since m4 wont expand macros
# if a line is a comment (#):

##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#


##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#




##############################
#
# Optional policy handling
#


##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#


##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.



##############################
#
# Tunable declaration
#


##############################
#
# Tunable policy handling
#


########################################
#
# Helper macros
#

#
# shiftn(num,list...)
#
# shift the list num times
#


#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#


#
# __endline__
#
# dummy macro to insert a newline.  used for 
# errprint, so the close parentheses can be
# indented correctly.
#


########################################
#
# refpolwarn(message)
#
# print a warning message
#


########################################
#
# refpolerr(message)
#
# print an error message.  does not
# make anything fail.
#


########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#


########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#

########################################
#
# can_exec(domain,executable)
#


########################################
#
# gen_bool(name,default_value)
#



#
# Specified domain transition patterns
#


# compatibility:




#
# Automatic domain transition patterns
#


# compatibility:




#
# Other process permissions
#



########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#




########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#






########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#




########################################
#
# Basic level names for system low and high
#





########################################
# 
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.

#
# All directory and file classes
#


#
# All non-directory file classes.
#


#
# Non-device file classes.
#


#
# Device file classes.
#


#
# All socket classes.
#



#
# Datagram socket classes.
# 


#
# Stream socket classes.
#


#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#


########################################
# 
# Macros for sets of permissions
#

# 
# Permissions for getting file attributes.
#


# 
# Permissions for executing files.
#


# 
# Permissions for reading files and their attributes.
#


# 
# Permissions for reading and executing files.
#


# 
# Permissions for reading and appending to files.
#


#
# Permissions for linking, unlinking and renaming files.
# 


#
# Permissions for creating lnk_files.
#


#
# Permissions for creating and using files.
# 


# 
# Permissions for reading directories and their attributes.
#


# 
# Permissions for reading and writing directories and their attributes.
#


# 
# Permissions for reading and adding names to directories.
#



#
# Permissions for creating and using directories.
# 


#
# Permissions to mount and unmount file systems.
#


#
# Permissions for using sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for using stream sockets.
# 


#
# Permissions for creating and using stream sockets.
# 


#
# Permissions for creating and using sockets.
# 


#
# Permissions for creating and using sockets.
# 



#
# Permissions for creating and using netlink sockets.
# 


#
# Permissions for using netlink sockets for operations that modify state.
# 


#
# Permissions for using netlink sockets for operations that observe state.
# 


#
# Permissions for sending all signals.
#


#
# Permissions for sending and receiving network packets.
#


#
# Permissions for using System V IPC
#










########################################
#
# New permission sets
#

#
# Directory
#








#
# File
#









#
# Use (read and write) terminals
#


#
# Sockets
#



########################################
#
# New permission sets
#

#
# Directory (dir)
#












#
# Regular file (file)
#















#
# Symbolic link (lnk_file)
#












#
# (Un)named Pipes/FIFOs (fifo_file)
#













#
# (Un)named Sockets (sock_file)
#












#
# Block device nodes (blk_file)
#














#
# Character device nodes (chr_file)
#














########################################
#
# Special permission sets
#

#
# Use (read and write) terminals
#


#
# Sockets
#












/etc/postgrey(/.*)?		system_u:object_r:postgrey_etc_t:s0
/etc/rc\.d/init\.d/postgrey	--	system_u:object_r:postgrey_initrc_exec_t:s0


/usr/sbin/postgrey	--	system_u:object_r:postgrey_exec_t:s0

/var/lib/postgrey(/.*)?		system_u:object_r:postgrey_var_lib_t:s0

/var/run/postgrey(/.*)?		system_u:object_r:postgrey_var_run_t:s0
/var/run/postgrey\.pid	--	system_u:object_r:postgrey_var_run_t:s0

/var/spool/postfix/postgrey(/.*)?	system_u:object_r:postgrey_spool_t:s0
Anon7 - 2021