platform_system_sepolicy/racoon.te

# IKE key management daemon
type racoon, domain;
permissive racoon;
type racoon_exec, exec_type, file_type;

unconfined_domain(racoon)
racoon policy. Initial policy for racoon (IKE key management). Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil> Change-Id: If1e344f39ea914e42afbaa021b272ba1b7113479 2013-01-07 15:21:18 +01:00			`# IKE key management daemon`
			`type racoon, domain;`
Move domains into per-domain permissive mode. Bug: 4070557 Change-Id: I027f76cff6df90e9909711cb81fbd17db95233c1 2013-05-15 06:02:55 +02:00			`permissive racoon;`
racoon policy. Initial policy for racoon (IKE key management). Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil> Change-Id: If1e344f39ea914e42afbaa021b272ba1b7113479 2013-01-07 15:21:18 +01:00			`type racoon_exec, exec_type, file_type;`

Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`unconfined_domain(racoon)`