RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/init.fc

88 lines
3.0 KiB
Plaintext
Raw Normal View History

initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/rc -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/rc\.d/rc\.[^/]+ -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/init\.d/.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/sysconfig/network-scripts/ifup-ipsec -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/etc/X11/prefdm -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
ifdef(`distro_gentoo',`
/etc/vmware/init\.d/vmware -- gen_context(system_u:object_r:initrc_exec_t,s0)
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
2007-10-05 18:00:55 +00:00
/etc/x11/startDM\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /dev
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/dev/initctl -p gen_context(system_u:object_r:initctl_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
#
# /lib
#
Move systemd fc entry.
2014-09-12 13:42:59 +00:00
/lib/systemd/systemd -- gen_context(system_u:object_r:init_exec_t,s0)
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
ifdef(`distro_gentoo', `
/lib/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /sbin
#
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
2006-02-16 19:32:13 +00:00
/sbin/init(ng)? -- gen_context(system_u:object_r:init_exec_t,s0)
patch to add a file context for /sbin/upstart This patch adds a file context for /sbin/upstart.
2011-02-16 06:28:33 +00:00
# because nowadays, /sbin/init is often a symlink to /sbin/upstart
/sbin/upstart -- gen_context(system_u:object_r:init_exec_t,s0)
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
2006-02-16 19:32:13 +00:00
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_gentoo', `
Introduce rc_exec_t as file entry for initrc_t Within Gentoo, the init system (openrc) uses a single binary (/sbin/rc) for all its functions, be it executing init scripts, managing runlevels, checking state, etc. This binary is not allowed to be labeled initrc_exec_t as that would trigger domain transitions where this isn't necessary (or even allowed). A suggested solution is to use a separate type declaration for /sbin/rc (rc_exec_t) which transitions where necessary. This patch includes support for the /sbin/rc rc_exec_t type and declares the init_rc_exec() interface which allows domains to execute the binary without transitioning. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-09-03 14:19:27 +00:00
/sbin/rc -- gen_context(system_u:object_r:rc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')
#
# /usr
#
trunk: add sepostgresql policy from kaigai kohei.
2008-06-10 15:33:18 +00:00
/usr/bin/sepg_ctl -- gen_context(system_u:object_r:initrc_exec_t,s0)
Label systemd files in init module
2014-09-07 21:28:10 +00:00
/usr/lib/systemd/systemd -- gen_context(system_u:object_r:init_exec_t,s0)
Implement core systemd policy. Significant contributions from the Tresys CLIP team. Other changes from Laurent Bigonville.
2015-10-23 14:16:59 +00:00
/usr/lib/systemd/system-preset(/.*)? gen_context(system_u:object_r:systemd_unit_t,s0)
/usr/lib/systemd/user-preset(/.*)? gen_context(system_u:object_r:systemd_unit_t,s0)
/usr/lib/systemd/ntp-units\.d -d gen_context(system_u:object_r:systemd_unit_t,s0)
/usr/lib/systemd/system(/.*)? gen_context(system_u:object_r:systemd_unit_t,s0)
Label systemd files in init module
2014-09-07 21:28:10 +00:00
add dcc, bug 1522
2006-05-04 17:44:26 +00:00
/usr/libexec/dcc/start-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/libexec/dcc/stop-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/sbin/apachectl -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/sbin/open_init_pty -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
Label systemd files in init module
2014-09-07 21:28:10 +00:00
/var/lib/systemd(/.*)? gen_context(system_u:object_r:init_var_lib_t,s0)
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
/run/initctl -p gen_context(system_u:object_r:initctl_t,s0)
/run/utmp -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/runlevel\.dir gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/random-seed -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/setmixer_flag -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/systemd(/.*)? gen_context(system_u:object_r:init_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_debian',`
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
/run/hotkey-setup -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/kdm/.* -- gen_context(system_u:object_r:initrc_var_run_t,s0)
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
')
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
ifdef(`distro_gentoo', `
/var/lib/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
/run/svscan\.pid -- gen_context(system_u:object_r:initrc_var_run_t,s0)
Rearrange distro blocks in init.fc
2010-12-15 19:48:43 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_suse', `
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
/run/bootsplashctl -p gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/keymap -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/numlock-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/setleds-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/run/sysconfig(/.*)? gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')