RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/mount.fc

10 lines
485 B
Plaintext
Raw Normal View History

patch from dan Tue, 24 Oct 2006 11:00:28 -0400
2006-10-31 21:01:48 +00:00
/usr/bin/fusermount -- gen_context(system_u:object_r:mount_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/mount.* -- gen_context(system_u:object_r:mount_exec_t,s0)
/usr/bin/umount.* -- gen_context(system_u:object_r:mount_exec_t,s0)
/usr/sbin/mount\.zfs -- gen_context(system_u:object_r:mount_exec_t,s0)
/usr/sbin/zfs -- gen_context(system_u:object_r:mount_exec_t,s0)
/usr/sbin/zpool -- gen_context(system_u:object_r:mount_exec_t,s0)
Add mount_var_run_t type and allow mount_t domain to manage the files and directories In Debian, mount store some information (a utab file) under /var/run/mount directory. This is inspired by the fedora policy.
2013-01-12 21:32:26 +00:00
update mount module * rename mount_var_run_t to mount_runtime_t * delete kernel_read_unlabeled_files(mount_t) * add selinux_getattr_fs(mount_t)
2017-01-06 14:05:00 +00:00
/run/mount(/.*)? gen_context(system_u:object_r:mount_runtime_t,s0)