2015-11-18 21:19:44 -05:00
|
|
|
|
2015-11-21 16:14:31 -05:00
|
|
|
policy_module(ossec,1.0.6)
|
2015-11-18 21:19:44 -05:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
2015-11-21 16:14:31 -05:00
|
|
|
type ossec_t;
|
|
|
|
|
type ossec_bin_t;
|
|
|
|
|
type ossec_exec_t;
|
|
|
|
|
role system_r types ossec_t;
|
|
|
|
|
domain_type(ossec_t)
|
|
|
|
|
domain_entry_file(ossec_t, ossec_exec_t)
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
ossec_domtrans(httpd_t)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
type ossec_var_t;
|
|
|
|
|
files_type(ossec_var_t)
|
|
|
|
|
|
|
|
|
|
type ossec_tmp_t;
|
|
|
|
|
files_tmp_file(ossec_tmp_t)
|
|
|
|
|
|
|
|
|
|
type ossec_log_t;
|
|
|
|
|
logging_log_file(ossec_log_t)
|
|
|
|
|
|
|
|
|
|
type ossec_etc_t;
|
|
|
|
|
files_config_file(ossec_etc_t)
|
|
|
|
|
|
|
|
|
|
type ossec_rule_t;
|
|
|
|
|
files_config_file(ossec_rule_t)
|
|
|
|
|
|
|
|
|
|
type ossec_stats_t;
|
|
|
|
|
files_type(ossec_stats_t)
|
|
|
|
|
|
|
|
|
|
type ossec_queue_t;
|
|
|
|
|
files_type(ossec_queue_t)
|
|
|
|
|
|
|
|
|
|
type ossec_script_t;
|
|
|
|
|
files_type(ossec_script_t)
|
|
|
|
|
|
|
|
|
|
require {
|
|
|
|
|
type ossec_t;
|
|
|
|
|
type ossec_bin_t;
|
|
|
|
|
type ossec_exec_t;
|
|
|
|
|
type ossec_var_t;
|
|
|
|
|
type ossec_tmp_t;
|
|
|
|
|
type ossec_log_t;
|
|
|
|
|
type ossec_etc_t;
|
|
|
|
|
type ossec_rule_t;
|
|
|
|
|
type ossec_stats_t;
|
|
|
|
|
type ossec_queue_t;
|
|
|
|
|
type ossec_script_t;
|
|
|
|
|
class file { rename read lock create write getattr unlink open append };
|
|
|
|
|
class dir { write getattr read remove_name create add_name };
|
|
|
|
|
}
|
|
|
|
|
|
2015-11-18 21:19:44 -05:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# ossec local policy
|
|
|
|
|
#
|
|
|
|
|
|
