init: upstream fcontexts from gentoo policy

Signed-off-by: Jason Zaman <jason@perfinion.com>
This commit is contained in:
Jason Zaman 2020-11-16 19:46:27 -08:00 committed by Chris PeBenito
parent c9880f52d5
commit 6dd6823280
1 changed files with 7 additions and 1 deletions

View File

@ -44,8 +44,11 @@ ifdef(`distro_gentoo',`
/usr/sbin/upstart -- gen_context(system_u:object_r:init_exec_t,s0)
ifdef(`distro_gentoo', `
/usr/lib/rc/cache(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/usr/lib/rc/console(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/usr/lib/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/usr/sbin/rc -- gen_context(system_u:object_r:rc_exec_t,s0)
/usr/sbin/rc -- gen_context(system_u:object_r:rc_exec_t,s0)
/usr/sbin/openrc -- gen_context(system_u:object_r:rc_exec_t,s0)
/usr/sbin/openrc-init -- gen_context(system_u:object_r:init_exec_t,s0)
/usr/sbin/openrc-shutdown -- gen_context(system_u:object_r:init_exec_t,s0)
')
@ -79,6 +82,9 @@ ifdef(`distro_debian',`
ifdef(`distro_gentoo', `
/var/lib/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/var/lib/ip6?tables(/.*)? gen_context(system_u:object_r:initrc_tmp_t,s0)
/run/openrc(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/run/svscan\.pid -- gen_context(system_u:object_r:initrc_runtime_t,s0)
')