RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/miscfiles.fc

95 lines
3.1 KiB
Plaintext
Raw Normal View History

fixes for gentoo
2006-05-19 13:14:37 +00:00
#
# /emul
#
ifdef(`distro_gentoo',`
/emul/linux/x86/usr/(X11R6/)?lib/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
/etc/avahi/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
Additional miscfiles tweaks.
2010-11-17 14:29:22 +00:00
/etc/httpd/alias/[^/]*\.db(\.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
Add Debian location for PKI files
2012-09-17 11:45:04 +00:00
/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
Additional miscfiles tweaks.
2010-11-17 14:29:22 +00:00
/etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Label /etc/locale.alias as locale_t on Debian On Debian, /usr/share/locale/locale.alias is a symlink to /etc/locale.alias, properly label this file. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707246
2014-04-13 21:46:09 +00:00
ifdef(`distro_debian',`
/etc/locale.alias -- gen_context(system_u:object_r:locale_t,s0)
')
trunk: 3 more cherry picked Fedora fixes from David Hrdeman.
2008-07-25 12:11:14 +00:00
ifdef(`distro_redhat',`
/etc/sysconfig/clock -- gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /opt
#
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/opt/(.*/)?man(/.*)? gen_context(system_u:object_r:man_t,s0)
more upstream merging
2005-09-16 19:36:10 +00:00
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
#
# /srv
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/srv/([^/]*/)?ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
/srv/([^/]*/)?rsync(/.*)? gen_context(system_u:object_r:public_content_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /usr
#
system/miscfiles: Generalize the man_t fc's This won't match subdirectories of /usr/lib, but that shouldn't be a problem, since we have "allow domain lib_t ..." anyway. We can't match on "/usr/(.*/)?man(/.*)?", since that'd result in a few false positives; in particular, the files /usr/share/xmlto/format/docbook/man /usr/share/bash-completion/completions/man
2017-06-07 12:38:59 +00:00
/usr/(.*/)?man -d gen_context(system_u:object_r:man_t,s0)
/usr/(.*/)?man/.* gen_context(system_u:object_r:man_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/lib/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/local/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
system/miscfiles: Generalize the man_t fc's This won't match subdirectories of /usr/lib, but that shouldn't be a problem, since we have "allow domain lib_t ..." anyway. We can't match on "/usr/(.*/)?man(/.*)?", since that'd result in a few false positives; in particular, the files /usr/share/xmlto/format/docbook/man /usr/share/bash-completion/completions/man
2017-06-07 12:38:59 +00:00
/usr/share/docbook2X/xslt/man(/.*)? gen_context(system_u:object_r:usr_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
/usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0)
more merging from nsa cvs
2005-09-16 13:36:26 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_gentoo',`
/usr/share/misc/(pci|usb)\.ids -- gen_context(system_u:object_r:hwdata_t,s0)
')
ifdef(`distro_redhat',`
/usr/share/hwdata(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/var/ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/lib/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/cache/fontconfig(/.*)? gen_context(system_u:object_r:fonts_cache_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/cache/fonts(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
Whitespace fix in miscfiles.fc.
2012-11-26 16:07:16 +00:00
/var/cache/man(/.*)? gen_context(system_u:object_r:man_cache_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/named/chroot/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
system_miscfiles patch from Dan Walsh "move cobbler, Allow policy to define certs."
2010-11-11 20:11:38 +00:00
/var/spool/abrt-upload(/.*)? gen_context(system_u:object_r:public_content_rw_t,s0)
/var/spool/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_debian',`
/var/lib/msttcorefonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/var/lib/usbutils(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.
2007-03-01 15:43:39 +00:00
ifdef(`distro_redhat',`
/var/empty/sshd/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/var/spool/postfix/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
')