1# Point to Point Protocol daemon 2type ppp, domain; 3type ppp_device, dev_type; 4type ppp_exec, system_file_type, exec_type, file_type; 5 6net_domain(ppp) 7 8r_dir_file(ppp, proc_net_type) 9 10allow ppp mtp:{ socket pppox_socket } rw_socket_perms; 11 12# ioctls needed for VPN. 13allowxperm ppp self:udp_socket ioctl priv_sock_ioctls; 14allowxperm ppp mtp:{ socket pppox_socket } ioctl ppp_ioctls; 15 16allow ppp mtp:unix_dgram_socket rw_socket_perms; 17allow ppp ppp_device:chr_file rw_file_perms; 18allow ppp self:global_capability_class_set net_admin; 19allow ppp system_file:file rx_file_perms; 20not_full_treble(`allow ppp vendor_file:file rx_file_perms;') 21allow ppp vpn_data_file:dir w_dir_perms; 22allow ppp vpn_data_file:file create_file_perms; 23allow ppp mtp:fd use; 24