RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/miscfiles.fc

97 lines
3.2 KiB
Plaintext
Raw Normal View History

fixes for gentoo
2006-05-19 13:14:37 +00:00
#
# /emul
#
ifdef(`distro_gentoo',`
/emul/linux/x86/usr/(X11R6/)?lib/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
/etc/avahi/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
Additional miscfiles tweaks.
2010-11-17 14:29:22 +00:00
/etc/httpd/alias/[^/]*\.db(\.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
base: create a type for SSL private keys Reserve the tls_privkey_t file label for SSL/TLS private keys (e.g. files in /etc/pki/*/private/). Create and use appropriate interfaces for such new scenario (so that SSL/TLS private keys are protected). This part (1/2) refers to the base policy changes. Signed-off-by: Guido Trentalancia <guido@trentalancia.com>
2017-11-08 17:30:09 +00:00
/etc/pki/.*/private(/.*)? gen_context(system_u:object_r:tls_privkey_t,s0)
Add Debian location for PKI files
2012-09-17 11:45:04 +00:00
/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
Additional miscfiles tweaks.
2010-11-17 14:29:22 +00:00
/etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Label /etc/locale.alias as locale_t on Debian On Debian, /usr/share/locale/locale.alias is a symlink to /etc/locale.alias, properly label this file. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707246
2014-04-13 21:46:09 +00:00
ifdef(`distro_debian',`
Remove unescaped single dot from the policy In a pattern, a dot can match any character, including slash. It makes sense when it is combined with ?, + or *, but makes little sense when left alone. Most of the time, the label was for file containing dots, where the dot was not escaped. A few times, the dot was really intended to match any character. In such case, [^/] better suits the intent. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-27 21:38:09 +00:00
/etc/locale\.alias -- gen_context(system_u:object_r:locale_t,s0)
Label /etc/locale.alias as locale_t on Debian On Debian, /usr/share/locale/locale.alias is a symlink to /etc/locale.alias, properly label this file. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707246
2014-04-13 21:46:09 +00:00
')
trunk: 3 more cherry picked Fedora fixes from David Hrdeman.
2008-07-25 12:11:14 +00:00
ifdef(`distro_redhat',`
/etc/sysconfig/clock -- gen_context(system_u:object_r:locale_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /opt
#
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/opt/(.*/)?man(/.*)? gen_context(system_u:object_r:man_t,s0)
more upstream merging
2005-09-16 19:36:10 +00:00
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
#
# /srv
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/srv/([^/]*/)?ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
/srv/([^/]*/)?rsync(/.*)? gen_context(system_u:object_r:public_content_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /usr
#
system/miscfiles: Generalize the man_t fc's This won't match subdirectories of /usr/lib, but that shouldn't be a problem, since we have "allow domain lib_t ..." anyway. We can't match on "/usr/(.*/)?man(/.*)?", since that'd result in a few false positives; in particular, the files /usr/share/xmlto/format/docbook/man /usr/share/bash-completion/completions/man
2017-06-07 12:38:59 +00:00
/usr/(.*/)?man -d gen_context(system_u:object_r:man_t,s0)
/usr/(.*/)?man/.* gen_context(system_u:object_r:man_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/lib/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/local/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
miscfiles: Label /usr/share/texmf*/fonts/ as fonts_t fontconfig can be configure to use the TeX Live fonts in addition to /usr/share/fonts/.
2018-10-14 10:05:06 +00:00
/usr/share/texmf[^/]*/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
/usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0)
more merging from nsa cvs
2005-09-16 13:36:26 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_gentoo',`
/usr/share/misc/(pci|usb)\.ids -- gen_context(system_u:object_r:hwdata_t,s0)
')
ifdef(`distro_redhat',`
/usr/share/hwdata(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
2005-10-13 20:59:36 +00:00
/var/ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0)
add in a few parts of ftp
2005-09-27 22:29:45 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/lib/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/cache/fontconfig(/.*)? gen_context(system_u:object_r:fonts_cache_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/cache/fonts(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
Whitespace fix in miscfiles.fc.
2012-11-26 16:07:16 +00:00
/var/cache/man(/.*)? gen_context(system_u:object_r:man_cache_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
/var/named/chroot/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
system_miscfiles patch from Dan Walsh "move cobbler, Allow policy to define certs."
2010-11-11 20:11:38 +00:00
/var/spool/abrt-upload(/.*)? gen_context(system_u:object_r:public_content_rw_t,s0)
/var/spool/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0)
Miscfiles patch from Dan Walsh.
2010-03-09 15:44:55 +00:00
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
ifdef(`distro_debian',`
/var/lib/msttcorefonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/var/lib/usbutils(/.*)? gen_context(system_u:object_r:hwdata_t,s0)
')
patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.
2007-03-01 15:43:39 +00:00
ifdef(`distro_redhat',`
/var/empty/sshd/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/var/spool/postfix/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
')