RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/application.te

25 lines
471 B
Plaintext
Raw Normal View History

application: Module version bump. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-05-12 15:24:40 +00:00
policy_module(application, 1.2.1)
trunk: add application module
2007-07-19 18:57:48 +00:00
# Attribute of user applications
attribute application_domain_type;
# Executables to be run by user
attribute application_exec_type;
Start pulling in pieces of Fedora policy in system layer.
2011-03-31 17:29:59 +00:00
optional_policy(`
cron_sigchld(application_domain_type)
')
trunk: add application module
2007-07-19 18:57:48 +00:00
optional_policy(`
ssh_sigchld(application_domain_type)
ssh_rw_stream_sockets(application_domain_type)
application: applications can be executed from ssh without pty For example ansible uses `ssh localhost sudo id` to become root. This doesn't appear to be necessary in redhat due to https://src.fedoraproject.org/rpms/openssh/blob/master/f/openssh-6.6p1-privsep-selinux.patch Signed-off-by: bauen1 <j2468h@gmail.com>
2020-05-11 16:28:05 +00:00
ifndef(`distro_redhat', `
ssh_rw_pipes(application_domain_type)
')
trunk: add application module
2007-07-19 18:57:48 +00:00
')
Application patch from Dan Walsh.
2009-11-24 16:47:12 +00:00
optional_policy(`
sudo_sigchld(application_domain_type)
')