selinux-refpolicy/policy/modules/system/unconfined.te

217 lines
3.7 KiB
Plaintext
Raw Normal View History

2005-07-05 20:59:51 +00:00
2007-05-11 17:10:43 +00:00
policy_module(unconfined,1.6.1)
2005-07-05 20:59:51 +00:00
########################################
#
# Declarations
#
type unconfined_t;
2005-07-05 20:59:51 +00:00
type unconfined_exec_t;
init_system_domain(unconfined_t,unconfined_exec_t)
ifdef(`targeted_policy',`
type unconfined_execmem_t;
type unconfined_execmem_exec_t;
init_system_domain(unconfined_execmem_t,unconfined_execmem_exec_t)
')
2005-07-05 20:59:51 +00:00
########################################
#
# Local policy
#
unconfined_domain(unconfined_t)
2005-07-08 20:44:57 +00:00
2005-07-05 20:59:51 +00:00
logging_send_syslog_msg(unconfined_t)
2005-07-06 20:28:29 +00:00
ifdef(`targeted_policy',`
allow unconfined_t self:system syslog_read;
2005-11-01 15:34:00 +00:00
dontaudit unconfined_t self:capability sys_module;
2005-07-06 20:28:29 +00:00
domain_auto_trans(unconfined_t,unconfined_execmem_exec_t,unconfined_execmem_t)
2005-11-09 15:51:22 +00:00
files_create_boot_flag(unconfined_t)
mcs_killall(unconfined_t)
mcs_ptrace_all(unconfined_t)
2005-07-08 20:44:57 +00:00
init_domtrans_script(unconfined_t)
libs_domtrans_ldconfig(unconfined_t)
logging_domtrans_auditctl(unconfined_t)
mount_domtrans_unconfined(unconfined_t)
2007-05-11 17:10:43 +00:00
seutil_domtrans_setfiles(unconfined_t)
seutil_domtrans_semanage(unconfined_t)
2005-07-06 20:28:29 +00:00
userdom_unconfined(unconfined_t)
2005-10-25 19:03:15 +00:00
userdom_priveleged_home_dir_manager(unconfined_t)
optional_policy(`
ada_domtrans(unconfined_t)
')
optional_policy(`
2005-10-31 22:19:16 +00:00
apache_domtrans_helper(unconfined_t)
')
optional_policy(`
2005-10-27 15:16:42 +00:00
bind_domtrans_ndc(unconfined_t)
')
optional_policy(`
bootloader_domtrans(unconfined_t)
')
optional_policy(`
init_dbus_chat_script(unconfined_t)
2005-11-25 16:43:03 +00:00
dbus_stub(unconfined_t)
optional_policy(`
2005-11-29 21:27:15 +00:00
avahi_dbus_chat(unconfined_t)
')
optional_policy(`
2005-12-02 22:06:05 +00:00
bluetooth_dbus_chat(unconfined_t)
')
optional_policy(`
consolekit_dbus_chat(unconfined_t)
')
optional_policy(`
2005-12-02 22:06:05 +00:00
cups_dbus_chat_config(unconfined_t)
')
optional_policy(`
2005-11-29 21:27:15 +00:00
hal_dbus_chat(unconfined_t)
')
optional_policy(`
2005-11-25 16:43:03 +00:00
networkmanager_dbus_chat(unconfined_t)
')
optional_policy(`
oddjob_dbus_chat(unconfined_t)
')
2005-11-25 16:43:03 +00:00
')
optional_policy(`
firstboot_domtrans(unconfined_t)
2005-10-26 16:00:13 +00:00
')
2006-06-13 18:17:34 +00:00
optional_policy(`
ftp_domtrans_ftpdctl(unconfined_t)
')
optional_policy(`
inn_domtrans(unconfined_t)
')
optional_policy(`
java_domtrans(unconfined_t)
')
optional_policy(`
2005-10-26 16:00:13 +00:00
lpd_domtrans_checkpc(unconfined_t)
')
optional_policy(`
2005-10-25 19:03:15 +00:00
modutils_domtrans_update_mods(unconfined_t)
')
2005-07-06 20:28:29 +00:00
optional_policy(`
mono_domtrans(unconfined_t)
')
optional_policy(`
oddjob_domtrans_mkhomedir(unconfined_t)
')
optional_policy(`
prelink_domtrans(unconfined_t)
')
optional_policy(`
portmap_domtrans_helper(unconfined_t)
')
optional_policy(`
2005-10-25 00:00:50 +00:00
postfix_domtrans_map(unconfined_t)
# cjp: this should probably be removed:
postfix_domtrans_master(unconfined_t)
')
optional_policy(`
# cjp: this should probably be removed:
rpc_domtrans_nfsd(unconfined_t)
2005-10-25 00:00:50 +00:00
')
optional_policy(`
2005-10-26 13:51:33 +00:00
rpm_domtrans(unconfined_t)
')
optional_policy(`
2005-10-24 21:33:46 +00:00
samba_domtrans_net(unconfined_t)
samba_domtrans_winbind_helper(unconfined_t)
2005-10-24 21:33:46 +00:00
')
optional_policy(`
2006-01-11 15:28:14 +00:00
sendmail_domtrans(unconfined_t)
')
optional_policy(`
sysnet_domtrans_dhcpc(unconfined_t)
sysnet_dbus_chat_dhcpc(unconfined_t)
')
optional_policy(`
tzdata_domtrans(unconfined_t)
')
optional_policy(`
2005-11-09 15:51:22 +00:00
usermanage_domtrans_admin_passwd(unconfined_t)
')
optional_policy(`
vpn_domtrans(unconfined_t)
')
optional_policy(`
2005-10-27 14:52:37 +00:00
webalizer_domtrans(unconfined_t)
')
optional_policy(`
wine_domtrans(unconfined_t)
')
optional_policy(`
xserver_domtrans_xdm_xserver(unconfined_t)
')
2005-07-06 20:28:29 +00:00
')
########################################
#
# Unconfined Execmem Local policy
#
ifdef(`targeted_policy',`
allow unconfined_execmem_t self:process { execstack execmem };
unconfined_domain_noaudit(unconfined_execmem_t)
optional_policy(`
dbus_stub(unconfined_execmem_t)
init_dbus_chat_script(unconfined_execmem_t)
unconfined_dbus_chat(unconfined_execmem_t)
optional_policy(`
hal_dbus_chat(unconfined_execmem_t)
')
')
')