selinux-refpolicy/strict/tunables/tunable.tun

35 lines
1.0 KiB
Plaintext
Raw Normal View History

2005-04-29 17:45:15 +00:00
# Allow rpm to run unconfined.
2005-09-15 21:03:45 +00:00
dnl define(`unlimitedRPM')
2005-04-29 17:45:15 +00:00
# Allow privileged utilities like hotplug and insmod to run unconfined.
2005-09-15 21:03:45 +00:00
dnl define(`unlimitedUtils')
2005-04-29 17:45:15 +00:00
# Allow rc scripts to run unconfined, including any daemon
# started by an rc script that does not have a domain transition
# explicitly defined.
2005-09-15 21:03:45 +00:00
dnl define(`unlimitedRC')
2005-04-29 17:45:15 +00:00
# Allow sysadm_t to directly start daemons
define(`direct_sysadm_daemon')
2005-09-15 21:03:45 +00:00
# Do not allow sysadm_t to be in the security manager domain
dnl define(`separate_secadm')
2005-04-29 17:45:15 +00:00
# Do not audit things that we know to be broken but which
# are not security risks
2005-09-15 21:03:45 +00:00
dnl define(`hide_broken_symptoms')
2005-04-29 17:45:15 +00:00
# Allow user_r to reach sysadm_r via su, sudo, or userhelper.
# Otherwise, only staff_r can do so.
2005-09-15 21:03:45 +00:00
dnl define(`user_canbe_sysadm')
2005-04-29 17:45:15 +00:00
# Allow xinetd to run unconfined, including any services it starts
# that do not have a domain transition explicitly defined.
dnl define(`unlimitedInetd')
# for ndc_t to be used for restart shell scripts
dnl define(`ndc_shell_script')
2005-09-15 21:03:45 +00:00
# Enable Polyinstantiation support
dnl define(`support_polyinstatiation')