RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/userdomain.te

133 lines
2.8 KiB
Plaintext
Raw Normal View History

various: Module version bump. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-11-22 19:03:11 +00:00
policy_module(userdomain, 4.20.3)
start adding user domains. fix ttynode and ptynode handling, as they're more then user terminals (at least ptynode is). start adding XML comments
2005-05-16 21:10:33 +00:00
########################################
#
# Declarations
#
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
## <desc>
## <p>
## Allow users to connect to mysql
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(allow_user_mysql_connect, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
trunk: Tunable connection to postgresql for users from KaiGai Kohei.
2007-06-19 14:30:06 +00:00
## <desc>
## <p>
## Allow users to connect to PostgreSQL
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(allow_user_postgresql_connect, false)
trunk: Tunable connection to postgresql for users from KaiGai Kohei.
2007-06-19 14:30:06 +00:00
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
## <desc>
## <p>
## Allow regular users direct mouse access
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(user_direct_mouse, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
## <desc>
## <p>
## Allow users to read system messages.
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(user_dmesg, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
## <desc>
## <p>
## Allow user to r/w files on filesystems
## that do not have extended attributes (FAT, CDROM, FLOPPY)
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(user_rw_noexattrfile, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
Improve tunable support for rw operations on noxattr fs / removable media Improve the existing user domain template policy: - better support for the "user_rw_noexattrfile" boolean (enable write operations on filesystems that do not support extended attributes, such as FAT or cdrom filesystem); - add support for a new "user_exec_noexattrfile" boolean to control the execution of files from filesystems that do not support extended attributes (potentially dangerous); - add support for a new "user_write_removable" boolean which enables write operations on removable devices (such as external removable USB memory, USB mobile phones, etc). Note that devices might be removable but support extended attributes (Linux xattr filesystems on external USB mass storage devices), so two separate booleans are needed for optimal configuration flexibility. Writing to removable mass storage devices is a major cause of leakage of confidential information, so the new boolean defaults to false. Disable raw access for MLS policies (thanks to Christoper PeBenito for suggesting this). This new version of the patch correctly includes the definitions of the new booleans (by including the .te file differences). Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
2016-09-05 16:58:48 +00:00
## <desc>
## <p>
## Allow user to execute files on filesystems
## that do not have extended attributes (FAT, CDROM, FLOPPY)
## </p>
## </desc>
gen_tunable(user_exec_noexattrfile, false)
## <desc>
## <p>
## Allow user to write files on removable
## devices (e.g. external USB memory
## devices or floppies)
## </p>
## </desc>
gen_tunable(user_write_removable, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
## <desc>
## <p>
## Allow w to display everyone
## </p>
## </desc>
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
gen_tunable(user_ttyfile_stat, false)
- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
rename admin_tun_type to admindomain.
2009-08-31 13:03:51 +00:00
attribute admindomain;
reorganize tun patch changes.
2009-08-31 12:44:11 +00:00
start adding user domains. fix ttynode and ptynode handling, as they're more then user terminals (at least ptynode is). start adding XML comments
2005-05-16 21:10:33 +00:00
# all user domains
attribute userdomain;
# unprivileged user domains
attribute unpriv_userdomain;
Create a attribute user_home_content_type and assign it to all types that are classified userdom_user_home_content() Create various interfaces using the user_home_content_type attribute for tmpreaper user_home_t, user_tmp_t and user_tmpfs_t are user_home_content_type (why?) We should probably also create user_tmp_content_type and user_tmpfs_content_type attributes and assign to userdom_tmp_file and userdom_tmpfs_file respectively Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2012-11-05 11:55:13 +00:00
attribute user_home_content_type;
Make an attribute for objects in /run/user/%{USERID}/* Setup attribute user_runtime_content_type in userdomain for files in /run/user/%{USERID}/* interfaces to associate this attribute with types and interfaces to delete types with this attribute. Signed-off-by: Dave Sugar <dsugar@tresys.com>
2017-12-12 02:15:18 +00:00
# dirs/files/etc created in /run/user/%{USERID}/
attribute user_runtime_content_type;
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_home_dir_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
fs_associate_tmpfs(user_home_dir_t)
files_type(user_home_dir_t)
files_mountpoint(user_home_dir_t)
files_associate_tmp(user_home_dir_t)
files_poly(user_home_dir_t)
files_poly_member(user_home_dir_t)
files_poly_parent(user_home_dir_t)
ubac_constrained(user_home_dir_t)
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_home_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
userdom_user_home_content(user_home_t)
fs_associate_tmpfs(user_home_t)
files_associate_tmp(user_home_t)
files_poly_parent(user_home_t)
files_mountpoint(user_home_t)
userdomain: introduce the user certificate file context (was miscfiles: introduce the user certificate file context) Introduce a new file context for user certificates (user_cert_t) located in home directories. Introduce new auxiliary interfaces to read and manage such files files and directories. Thanks to Christopher PeBenito for the useful suggestions that led to this improved version of the patch. Compared to the previous version, this patch adds the ability to search the user home directories in the new interfaces. Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
2016-09-08 16:38:37 +00:00
type user_cert_t;
userdom_user_home_content(user_cert_t)
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_devpts_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
dev_node(user_devpts_t)
files_type(user_devpts_t)
ubac_constrained(user_devpts_t)
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_tmp_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
files_tmp_file(user_tmp_t)
userdom_user_home_content(user_tmp_t)
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_tmpfs_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
files_tmpfs_file(user_tmpfs_t)
userdom_user_home_content(user_tmpfs_t)
Remove old aliases. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-09-11 00:52:54 +00:00
type user_tty_device_t;
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
dev_node(user_tty_device_t)
ubac_constrained(user_tty_device_t)
userdomain: Introduce types for /run/user These are the types for /run/user, analogous to /home's home_root_t and home_dir_t.
2016-06-01 16:08:54 +00:00
type user_runtime_root_t;
fs_associate_tmpfs(user_runtime_root_t)
files_mountpoint(user_runtime_root_t)
files_poly_parent(user_runtime_root_t)
type user_runtime_t;
fs_associate_tmpfs(user_runtime_t)
files_type(user_runtime_t)
files_mountpoint(user_runtime_t)
files_associate_tmp(user_runtime_t)
files_poly(user_runtime_t)
files_poly_member(user_runtime_t)
files_poly_parent(user_runtime_t)
ubac_constrained(user_runtime_t)
Make an attribute for objects in /run/user/%{USERID}/* Setup attribute user_runtime_content_type in userdomain for files in /run/user/%{USERID}/* interfaces to associate this attribute with types and interfaces to delete types with this attribute. Signed-off-by: Dave Sugar <dsugar@tresys.com>
2017-12-12 02:15:18 +00:00
userdom_user_runtime_content(user_runtime_t)