RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/iptables.fc

32 lines
2.1 KiB
Plaintext
Raw Normal View History

Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/etc/rc\.d/init\.d/ip6?tables -- gen_context(system_u:object_r:iptables_initrc_exec_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/etc/rc\.d/init\.d/ebtables -- gen_context(system_u:object_r:iptables_initrc_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/etc/sysconfig/ip6?tables.* -- gen_context(system_u:object_r:iptables_conf_t,s0)
/etc/sysconfig/system-config-firewall.* -- gen_context(system_u:object_r:iptables_conf_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/sbin/ebtables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ebtables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
Add label for /sbin/ipset
2016-02-05 00:14:30 +00:00
/sbin/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/sbin/ip6?tables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ip6?tables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ip6?tables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/sbin/ipvsadm -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
ip6?tables-multi is combined in xtables-multi Since april, the *-multi applications offered through iptables are combined through a single binary called xtables-multi. The previous commands are now symbolic links towards this application. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-08-23 10:37:18 +00:00
/sbin/xtables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
Add systemd units for core refpolicy services. Only for services that already have a named init script. Add rules to init_startstop_service(), with conditional arg until all of refpolicy-contrib callers are updated.
2015-10-20 18:33:56 +00:00
/usr/lib/systemd/system/[^/]*arptables.* -- gen_context(system_u:object_r:iptables_unit_t,s0)
/usr/lib/systemd/system/[^/]*ebtables.* -- gen_context(system_u:object_r:iptables_unit_t,s0)
/usr/lib/systemd/system/[^/]*ip6tables.* -- gen_context(system_u:object_r:iptables_unit_t,s0)
/usr/lib/systemd/system/[^/]*iptables.* -- gen_context(system_u:object_r:iptables_unit_t,s0)
Add conntrack fc entry. This tool is for maintaining the netfilter connection tracking.
2013-04-05 13:45:04 +00:00
/usr/sbin/conntrack -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/usr/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
Run ipset in iptables domain The ipset command is used to manage ip sets, used by iptables for a more flexible management of firewall rules. It has very similar requirements as iptables for accessing and working with the Linux kernel, so marking ipset as iptables_exec_t to have it run in the iptables domain. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-11-10 16:52:04 +00:00
/usr/sbin/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0)
Iptables and modutils patches from Dan Walsh.
2009-12-01 14:23:11 +00:00
/usr/sbin/iptables -- gen_context(system_u:object_r:iptables_exec_t,s0)
/usr/sbin/iptables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
/usr/sbin/iptables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
Label /var/run/xtables.lock as iptables_var_run_t.
2015-08-11 09:55:18 +00:00
Label /var/run/ebtables.lock as iptables_var_run_t. This lock file is used on debian since version 2.0.10.4-3.2. This is also used on Fedora.
2016-02-08 21:48:53 +00:00
/var/run/ebtables\.lock -- gen_context(system_u:object_r:iptables_var_run_t,s0)
Whitespace fix in iptables.fc.
2016-02-10 15:34:51 +00:00
/var/run/xtables.* -- gen_context(system_u:object_r:iptables_var_run_t,s0)