From: dwalsh@redhat.com (Daniel J Walsh)
Date: Tue, 23 Feb 2010 16:42:30 -0500
Subject: [refpolicy] services_asterisk.patch
Message-ID: <4B844BC6.50006@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_asterisk.patch


+    asterisk_manage_lib_files(logrotate_t)
+    asterisk_exec(logrotate_t)

Needs net_admin

Drops capabilities
connects to unix_stream

execs itself

Requests kernel load modules

Execs shells


Connects to postgresql and snmp ports

Reads urand and generic usb devices


Has mysql and postgresql back ends
sends mail