RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/getty.fc

15 lines
643 B
Plaintext
Raw Normal View History

getty: overlook module * reorder file contexts * rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t * remove unneeded and confusing init permissions * delete access on generic pids * remove invalid etc filetrans: getty has no create permissions for its config files * restrict logfile access
2017-01-06 13:58:38 +00:00
/etc/mgetty(/.*)? gen_context(system_u:object_r:getty_conf_t,s0)
reorder to fit file context style rules
2005-05-10 19:47:37 +00:00
getty: overlook module * reorder file contexts * rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t * remove unneeded and confusing init permissions * delete access on generic pids * remove invalid etc filetrans: getty has no create permissions for its config files * restrict logfile access
2017-01-06 13:58:38 +00:00
/run/mgetty\.pid.* -- gen_context(system_u:object_r:getty_runtime_t,s0)
/run/agetty\.reload -- gen_context(system_u:object_r:getty_runtime_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0)
getty: overlook module * reorder file contexts * rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t * remove unneeded and confusing init permissions * delete access on generic pids * remove invalid etc filetrans: getty has no create permissions for its config files * restrict logfile access
2017-01-06 13:58:38 +00:00
/usr/sbin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/log/mgetty\.log.* -- gen_context(system_u:object_r:getty_log_t,s0)
add vgetty log fc
2006-07-06 14:52:04 +00:00
/var/log/vgetty\.log\..* -- gen_context(system_u:object_r:getty_log_t,s0)
more merging of NSA CVS policy
2005-09-13 13:06:07 +00:00
getty: overlook module * reorder file contexts * rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t * remove unneeded and confusing init permissions * delete access on generic pids * remove invalid etc filetrans: getty has no create permissions for its config files * restrict logfile access
2017-01-06 13:58:38 +00:00
/var/spool/fax(/.*)? gen_context(system_u:object_r:getty_runtime_t,s0)
/var/spool/voice(/.*)? gen_context(system_u:object_r:getty_runtime_t,s0)