RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/entropyd.fc

15 lines
864 B
Plaintext
Raw Normal View History

Consider jitterentropy to belong to entropyd family Also allow jitterentropy (or rather some libs) to read /proc/crypto/fips_enabled. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-10 12:24:02 +00:00
/etc/rc\.d/init\.d/((audio-entropyd)|(haveged)|(jitterentropy-rngd)) -- gen_context(system_u:object_r:entropyd_initrc_exec_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
entropyd: label the unit file of haveged Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-18 19:20:27 +00:00
/usr/lib/systemd/system/haveged.*\.service -- gen_context(system_u:object_r:entropyd_unit_t,s0)
Consider jitterentropy to belong to entropyd family Also allow jitterentropy (or rather some libs) to read /proc/crypto/fips_enabled. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-10 12:24:02 +00:00
/usr/lib/systemd/system/jitterentropy.*\.service -- gen_context(system_u:object_r:entropyd_unit_t,s0)
entropyd: label the unit file of haveged Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-18 19:20:27 +00:00
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/usr/bin/audio-entropyd -- gen_context(system_u:object_r:entropyd_exec_t,s0)
/usr/bin/haveged -- gen_context(system_u:object_r:entropyd_exec_t,s0)
/usr/sbin/audio-entropyd -- gen_context(system_u:object_r:entropyd_exec_t,s0)
/usr/sbin/haveged -- gen_context(system_u:object_r:entropyd_exec_t,s0)
Consider jitterentropy to belong to entropyd family Also allow jitterentropy (or rather some libs) to read /proc/crypto/fips_enabled. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-10 12:24:02 +00:00
/usr/sbin/jitterentropy-rngd -- gen_context(system_u:object_r:entropyd_exec_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
Rename *_var_run_t types to *_runtime_t. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-08 20:55:02 +00:00
/run/audio-entropyd\.pid -- gen_context(system_u:object_r:entropyd_runtime_t,s0)
/run/haveged\.pid -- gen_context(system_u:object_r:entropyd_runtime_t,s0)