diff --git a/.gitignore b/.gitignore index 1c55f2a..c01906d 100644 --- a/.gitignore +++ b/.gitignore @@ -1,4 +1,4 @@ Makefile tmp *.pp - +.*.swp diff --git a/ossec.if b/ossec.if index 3c830ee..6954ed6 100644 --- a/ossec.if +++ b/ossec.if @@ -79,3 +79,38 @@ interface(`ossec_write_log',` allow $1 ossec_log_t:file write; ') + + +interface(`ossec_read_config',` + gen_require(` + type ossec_etc_t; + ') + + search_dirs_pattern($1, ossec_etc_t, ossec_etc_t) + read_lnk_files_pattern($1, ossec_etc_t, ossec_etc_t) + read_files_pattern($1, ossec_etc_t, ossec_etc_t) + sysnet_read_config($1) +') + +interface(`ossec_read_etc_shared',` + gen_require(` + type ossec_etc_t; + type ossec_etc_share_t; + ') + + search_dirs_pattern($1, ossec_etc_t, ossec_etc_t) + search_dirs_pattern($1, ossec_etc_share_t, ossec_etc_share_t) + read_files_pattern($1, ossec_etc_share_t, ossec_etc_share_t) +') + +interface(`ossec_manage_etc_shared',` + gen_require(` + type ossec_etc_t; + type ossec_etc_share_t; + ') + + search_dirs_pattern($1, ossec_etc_t, ossec_etc_t) + search_dirs_pattern($1, ossec_etc_share_t, ossec_etc_share_t) + manage_files_pattern($1, ossec_etc_share_t, ossec_etc_share_t) +') +