RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/config/file_contexts.subs_dist

34 lines
896 B
Plaintext
Raw Normal View History

clarify the file_contexts.subs_dist configuration file usage from Guido Trentalancia Add a comment at the top of the configuration file file_contexts.subs_dist to clarify that it performs aliasing and not substitutions in the strict sense of the word. A name change might be considered too, if it proves to lead to further confusion. There might be pieces of documentation that could benefit from similar considerations. Also note that a specific manual page is missing.
2012-08-14 12:03:19 +00:00
# This file can is used to configure base path aliases as in:
#
# /aliased_path /original_path_as_configured_in_file_contexts
#
# where original_path_as_configured_in_file_contexts is a base
# path being used in the main file_contexts configuration file.
#
# It does not perform substitutions as done by sed(1), for
# example, but aliasing.
remove trailing whitespaces
2016-12-06 12:28:10 +00:00
#
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/bin /usr/bin
/lib /usr/lib
/lib32 /usr/lib
/lib64 /usr/lib
misc daemons from Russell Coker. Put in libx32 subs entries that refer to directories with fc entries. Allow dpkg_t to transition to dpkg_script_t when it executes bin_t for dpkg-reconfigure. Some dontaudit rules for mta processes spawned by mon for notification. Lots of tiny changes that are obvious.
2017-04-19 00:38:13 +00:00
/libx32 /usr/lib
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/sbin /usr/sbin
Use substititions for /usr/local/lib and /etc/init.d Introduce the substitutions for the /usr/local/lib* locations (towards /usr/lib) and /etc/init.d (towards /etc/rc.d/init.d). Update the file contexts of the translated locations. Rebased (collided with Guido's patch for commenting within the file_contexts.subs_dist file) since v3. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-08-15 14:12:39 +00:00
/etc/init.d /etc/rc.d/init.d
On Debian, systemd binaries are installed in / not /usr On Debian, systemd binaries are installed in / not /usr, add an equivalence for this.
2014-11-09 09:36:56 +00:00
/lib/systemd /usr/lib/systemd
Support for file context path substitutions (file_contexts.subs). Install file_contexts.subs_dist out of Refpolicy. This is TYPE-agnostic so the file goes in config/. Populate the file with current substitutions.
2011-07-28 17:12:28 +00:00
/run/lock /var/lock
/usr/lib32 /usr/lib
/usr/lib64 /usr/lib
misc daemons from Russell Coker. Put in libx32 subs entries that refer to directories with fc entries. Allow dpkg_t to transition to dpkg_script_t when it executes bin_t for dpkg-reconfigure. Some dontaudit rules for mta processes spawned by mon for notification. Lots of tiny changes that are obvious.
2017-04-19 00:38:13 +00:00
/usr/libx32 /usr/lib
Use substititions for /usr/local/lib and /etc/init.d Introduce the substitutions for the /usr/local/lib* locations (towards /usr/lib) and /etc/init.d (towards /etc/rc.d/init.d). Update the file contexts of the translated locations. Rebased (collided with Guido's patch for commenting within the file_contexts.subs_dist file) since v3. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-08-15 14:12:39 +00:00
/usr/local/lib32 /usr/lib
/usr/local/lib64 /usr/lib
Remove trailing / from paths
2012-08-15 14:57:24 +00:00
/usr/local/lib /usr/lib
map systemd private dirs
2019-01-19 18:15:03 +00:00
/var/lib/private /var/lib
/var/cache/private /var/cache
/var/log/private /var/log
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
# backward compatibility
# not for refpolicy intern, but for /var/run using applications,
# like systemd tmpfiles or systemd socket configurations
/var/run /run