RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/miscfiles.fc

95 lines
3.0 KiB
Plaintext
Raw Normal View History

fixes for gentoo
2006-05-19 13:14:37 +00:00
#
# /emul
#
ifdef(`distro_gentoo',`
/emul/linux/x86/usr/(X11R6/)?lib/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
/etc/avahi/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
trunk: 3 more cherry picked Fedora fixes from David Hrdeman.
2008-07-25 12:11:14 +00:00
ifdef(`distro_redhat',`
/etc/sysconfig/clock -- gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /opt
#
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/opt/(.*/)?man(/.*)? gen_context(system_u:object_r:man_t,s0)
more upstream merging
2005-09-16 19:36:10 +00:00
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
#
# /srv
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/srv/([^/]*/)?ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
/srv/([^/]*/)?rsync(/.*)? gen_context(system_u:object_r:public_content_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /usr
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/lib/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/lib(64)?/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/local/man(/.*)? gen_context(system_u:object_r:man_t,s0)
trunk: 3 patches from dan.
2009-03-20 13:58:15 +00:00
/usr/local/share/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/local/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
/usr/share/man(/.*)? gen_context(system_u:object_r:man_t,s0)
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
/usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0)
more merging from nsa cvs
2005-09-16 13:36:26 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/X11R6/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_gentoo',`
/usr/share/misc/(pci|usb)\.ids -- gen_context(system_u:object_r:hwdata_t,s0)
')
ifdef(`distro_redhat',`
/usr/share/hwdata(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/var/ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/lib/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/cache/fontconfig(/.*)? gen_context(system_u:object_r:fonts_cache_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/cache/fonts(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
/var/cache/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Misc fixes for 1031ee6.
2010-02-08 18:38:48 +00:00
/var/lib/cobbler/webui_sessions(/.*)? gen_context(system_u:object_r:public_content_rw_t, s0)
Implement cobblerd policy. My previous version had a minor bug in admin_role where it was using cobblerd_var_log_t, and cobblerd_var_lib_t instead of cobbler_var_log_t, and cobbler_var_lib_t. Whilst i was at it, i decided the implement a cobbler_etc_t for cobbler content in /etc. This because you cannot admin a cobbler environment witouth having access to cobbler config files and i dont want to give cobbler_admin access to manage etc_t. As a consequence if this i also removed the files_read_etc_files(cobblerd_t), as i think that cobbler only needed it to read its own files in /etc. However this is not confirmed, and it may need read access to etc_t afteral. Also i would like to underscore my reason for using public_content_rw_t. One of the reasons is that i do not want to give cobbler access to manage httpd_sys_content_rw_t. In general i do not want to depend on apache module at all. Signed-off-by: Dominick Grift <domg472@gmail.com> Signed-off-by: Chris PeBenito <pebenito@gentoo.org>
2010-01-05 15:26:14 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/named/chroot/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/spool/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/www/cobbler/images(/.*)? gen_context(system_u:object_r:public_content_rw_t, s0)
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_debian',`
/var/lib/msttcorefonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/var/lib/usbutils(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.
2007-03-01 15:43:39 +00:00
ifdef(`distro_redhat',`
/var/empty/sshd/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/var/spool/postfix/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
')