1# Point to Point Protocol daemon
2type ppp, domain;
3type ppp_device, dev_type;
4type ppp_exec, system_file_type, exec_type, file_type;
5
6net_domain(ppp)
7
8r_dir_file(ppp, proc_net_type)
9
10allow ppp mtp:{ socket pppox_socket } rw_socket_perms;
11
12# ioctls needed for VPN.
13allowxperm ppp self:udp_socket ioctl priv_sock_ioctls;
14allowxperm ppp mtp:{ socket pppox_socket } ioctl ppp_ioctls;
15
16allow ppp mtp:unix_dgram_socket rw_socket_perms;
17allow ppp ppp_device:chr_file rw_file_perms;
18allow ppp self:global_capability_class_set net_admin;
19allow ppp system_file:file rx_file_perms;
20not_full_treble(`allow ppp vendor_file:file rx_file_perms;')
21allow ppp vpn_data_file:dir w_dir_perms;
22allow ppp vpn_data_file:file create_file_perms;
23allow ppp mtp:fd use;
24