diff options
| -rw-r--r-- | policy/modules/services/clamav.if | 76 |
1 files changed, 76 insertions, 0 deletions
diff --git a/policy/modules/services/clamav.if b/policy/modules/services/clamav.if index d1296fcc..2adb1230 100644 --- a/policy/modules/services/clamav.if +++ b/policy/modules/services/clamav.if @@ -225,6 +225,82 @@ interface(`clamav_scannable_files',` ######################################## ## <summary> +## Allow specified domain to enable clamd units +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`clamav_enabledisable_clamd',` + gen_require(` + type clamav_unit_t; + class service { enable disable }; + ') + + allow $1 clamav_unit_t:service { enable disable }; +') + +######################################## +## <summary> +## Allow specified domain to start clamd units +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`clamav_startstop_clamd',` + gen_require(` + type clamd_unit_t; + class service { start stop }; + ') + + allow $1 clamd_unit_t:service { start stop }; +') + +######################################## +## <summary> +## Allow specified domain to get status of clamd +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`clamav_status_clamd',` + gen_require(` + type clamd_unit_t; + class service status; + ') + + allow $1 clamd_unit_t:service status; +') + +######################################## +## <summary> +## Allow specified domain reload of clamd +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`clamav_reload_clamd',` + gen_require(` + type clamd_unit_t; + class service reload; + ') + + allow $1 clamd_unit_t:service reload; +') + +######################################## +## <summary> ## All of the rules required to ## administrate an clamav environment. ## </summary> |