RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/unconfined.fc

27 lines
1.3 KiB
Plaintext
Raw Normal View History

add unconfined
2005-07-05 20:59:51 +00:00
# Add programs here which should not be confined by SELinux
# e.g.:
patch from dan Thu, 31 Aug 2006 15:16:30 -0400
2006-09-01 15:52:05 +00:00
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
part of dan's mega patch
2006-01-06 22:51:40 +00:00
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
Remove the ada module, it is unecessary and not touched since ~2008 It is only used to allow the compiler execmem / execstack but we have unconfined_execmem_t for that. Signed-off-by: bauen1 <j2468h@gmail.com>
2020-06-14 15:58:56 +00:00
/usr/bin/gnatbind -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
/usr/bin/gnatls -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
/usr/bin/gnatmake -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/usr/bin/valgrind -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
patch from dan Thu, 31 Aug 2006 15:16:30 -0400
2006-09-01 15:52:05 +00:00
/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
patch from dan Tue, 06 Jun 2006 22:50:46 -0400
2006-06-07 17:43:10 +00:00
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/usr/lib/ia32el/ia32x_loader -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
Remove the ada module, it is unecessary and not touched since ~2008 It is only used to allow the compiler execmem / execstack but we have unconfined_execmem_t for that. Signed-off-by: bauen1 <j2468h@gmail.com>
2020-06-14 15:58:56 +00:00
/usr/libexec/gcc(/.*)?/gnat1 -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
/usr/local/RealPlayer/realplay\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
trunk: add openoffice locations in gentoo.
2007-12-10 15:59:01 +00:00
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_debian',`
/usr/bin/gcj-dbtool-4\.1 -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
/usr/bin/gij-4\.1 -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
/usr/lib/openoffice/program/soffice\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
')
trunk: add openoffice locations in gentoo.
2007-12-10 15:59:01 +00:00
ifdef(`distro_gentoo',`
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/openoffice/program/[^/]+\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
trunk: add openoffice locations in gentoo.
2007-12-10 15:59:01 +00:00
')