RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/init.fc

79 lines
2.7 KiB
Plaintext
Raw Normal View History

initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/init\.d/.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/rc -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/rc\.d/rc\.[^/]+ -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/init\.d/.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/sysconfig/network-scripts/ifup-ipsec -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/etc/X11/prefdm -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
ifdef(`distro_gentoo',`
/etc/vmware/init\.d/vmware -- gen_context(system_u:object_r:initrc_exec_t,s0)
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
2007-10-05 18:00:55 +00:00
/etc/x11/startDM\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /dev
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/dev/initctl -p gen_context(system_u:object_r:initctl_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
#
# /lib
#
ifdef(`distro_gentoo', `
/lib/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/lib32/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/lib64/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /sbin
#
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
2006-02-16 19:32:13 +00:00
/sbin/init(ng)? -- gen_context(system_u:object_r:init_exec_t,s0)
patch to add a file context for /sbin/upstart This patch adds a file context for /sbin/upstart.
2011-02-16 06:28:33 +00:00
# because nowadays, /sbin/init is often a symlink to /sbin/upstart
/sbin/upstart -- gen_context(system_u:object_r:init_exec_t,s0)
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
2006-02-16 19:32:13 +00:00
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_gentoo', `
Introduce rc_exec_t as file entry for initrc_t Within Gentoo, the init system (openrc) uses a single binary (/sbin/rc) for all its functions, be it executing init scripts, managing runlevels, checking state, etc. This binary is not allowed to be labeled initrc_exec_t as that would trigger domain transitions where this isn't necessary (or even allowed). A suggested solution is to use a separate type declaration for /sbin/rc (rc_exec_t) which transitions where necessary. This patch includes support for the /sbin/rc rc_exec_t type and declares the init_rc_exec() interface which allows domains to execute the binary without transitioning. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-09-03 14:19:27 +00:00
/sbin/rc -- gen_context(system_u:object_r:rc_exec_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/sbin/runscript -- gen_context(system_u:object_r:initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/sbin/runscript\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.
2006-01-16 18:30:14 +00:00
/sbin/runsvcscript\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
/sbin/svcinit -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')
#
# /usr
#
trunk: add sepostgresql policy from kaigai kohei.
2008-06-10 15:33:18 +00:00
/usr/bin/sepg_ctl -- gen_context(system_u:object_r:initrc_exec_t,s0)
add dcc, bug 1522
2006-05-04 17:44:26 +00:00
/usr/libexec/dcc/start-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/libexec/dcc/stop-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/sbin/apachectl -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/sbin/open_init_pty -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/run/utmp -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/runlevel\.dir gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/random-seed -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/setmixer_flag -- gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
ifdef(`distro_gentoo', `
/var/lib/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/var/run/svscan\.pid -- gen_context(system_u:object_r:initrc_var_run_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_suse', `
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/run/bootsplashctl -p gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/keymap -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/numlock-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/setleds-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/sysconfig(/.*)? gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')