RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/modutils.fc

34 lines
1.7 KiB
Plaintext
Raw Normal View History

modutils: format filecontexts
2017-02-18 20:58:49 +00:00
/etc/modules\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.d(/.*)? gen_context(system_u:object_r:modules_conf_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
testing fixes
2006-08-18 18:20:22 +00:00
ifdef(`distro_gentoo',`
# gentoo init scripts still manage this file
# even if devfs is off
Remove unescaped single dot from the policy In a pattern, a dot can match any character, including slash. It makes sense when it is combined with ?, + or *, but makes little sense when left alone. Most of the time, the label was for file containing dots, where the dot was not escaped. A few times, the dot was really intended to match any character. In such case, [^/] better suits the intent. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-27 21:38:09 +00:00
/etc/modprobe\.devfs.* -- gen_context(system_u:object_r:modules_conf_t,s0)
testing fixes
2006-08-18 18:20:22 +00:00
')
systemd-tmpfiles: refactor runtime configs handle runtime configuration files under /run/tmpfiles.d as 3rd party content, like /run or /var/lib
2017-02-18 21:16:30 +00:00
ifdef(`init_systemd',`
/run/tmpfiles\.d/kmod\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
')
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
modutils: format filecontexts
2017-02-18 20:58:49 +00:00
/usr/bin/kmod -- gen_context(system_u:object_r:kmod_exec_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
modutils: format filecontexts
2017-02-18 20:58:49 +00:00
/usr/lib/modules/[^/]+/modules\..+ -- gen_context(system_u:object_r:modules_dep_t,s0)
/usr/lib/modules/modprobe\.conf -- gen_context(system_u:object_r:modules_conf_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/sbin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
modutils: format filecontexts
2017-02-18 20:58:49 +00:00
/usr/sbin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/sbin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)