Using SELinux on an ICE-Linux CMS

#============= setroubleshootd_t ==============

allow setroubleshootd_t device_t:sock_file write;

allow setroubleshootd_t initrc_t:unix_dgram_socket sendto;

#============= snmpd_t ==============

allow snmpd_t device_t:sock_file write;

allow snmpd_t initrc_t:unix_dgram_socket sendto;

#============= system_dbusd_t ==============

allow system_dbusd_t device_t:sock_file write;

allow system_dbusd_t initrc_t:unix_dgram_socket sendto;

#============= system_mail_t ==============

allow system_mail_t device_t:sock_file write;

allow system_mail_t initrc_t:unix_dgram_socket sendto;

#============= tftpd_t ==============

allow tftpd_t device_t:sock_file write;

allow tftpd_t inetd_t:process sigchld;

allow tftpd_t initrc_t:unix_dgram_socket sendto;

allow tftpd_t usr_t:file { read getattr };