RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/iptables.fc

23 lines
1.5 KiB
Plaintext
Raw Normal View History

Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/etc/rc\.d/init\.d/ip6?tables -- gen_context(system_u:object_r:iptables_initrc_exec_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/etc/rc\.d/init\.d/ebtables -- gen_context(system_u:object_r:iptables_initrc_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/etc/sysconfig/ip6?tables.* -- gen_context(system_u:object_r:iptables_conf_t,s0)
/etc/sysconfig/system-config-firewall.* -- gen_context(system_u:object_r:iptables_conf_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/sbin/ebtables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ebtables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ip6?tables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ip6?tables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ip6?tables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/sbin/ipvsadm -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
ip6?tables-multi is combined in xtables-multi Since april, the *-multi applications offered through iptables are combined through a single binary called xtables-multi. The previous commands are now symbolic links towards this application. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-08-23 10:37:18 +00:00
/sbin/xtables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
Add conntrack fc entry. This tool is for maintaining the netfilter connection tracking.
2013-04-05 13:45:04 +00:00
/usr/sbin/conntrack -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/usr/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
Run ipset in iptables domain The ipset command is used to manage ip sets, used by iptables for a more flexible management of firewall rules. It has very similar requirements as iptables for accessing and working with the Linux kernel, so marking ipset as iptables_exec_t to have it run in the iptables domain. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-11-10 16:52:04 +00:00
/usr/sbin/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/usr/sbin/iptables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/usr/sbin/iptables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
/usr/sbin/iptables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)