RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

bind: add a few fc specs for unbound 

unbound-checkconf is the unbound bind-checkconf equivalent
unbound-control is the unbound bind ndc equivalent

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
This commit is contained in:
Dominick Grift 2020-09-09 12:00:26 +02:00 committed by Chris PeBenito
parent dcf7ae9f48
commit 93113bce78
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/bind.fc
View File

@ -19,6 +19,8 @@
/usr/bin/named-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0) /usr/bin/named-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0)
/usr/bin/r?ndc -- gen_context(system_u:object_r:ndc_exec_t,s0) /usr/bin/r?ndc -- gen_context(system_u:object_r:ndc_exec_t,s0)
/usr/bin/unbound -- gen_context(system_u:object_r:named_exec_t,s0) /usr/bin/unbound -- gen_context(system_u:object_r:named_exec_t,s0)
/usr/bin/unbound-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0)
/usr/bin/unbound-control -- gen_context(system_u:object_r:ndc_exec_t,s0)
/usr/lib/systemd/system/named.*\.service -- gen_context(system_u:object_r:named_unit_t,s0) /usr/lib/systemd/system/named.*\.service -- gen_context(system_u:object_r:named_unit_t,s0)
/usr/lib/systemd/system/unbound.*\.service -- gen_context(system_u:object_r:named_unit_t,s0) /usr/lib/systemd/system/unbound.*\.service -- gen_context(system_u:object_r:named_unit_t,s0)
@ -28,6 +30,8 @@
/usr/sbin/named-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0) /usr/sbin/named-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0)
/usr/sbin/r?ndc -- gen_context(system_u:object_r:ndc_exec_t,s0) /usr/sbin/r?ndc -- gen_context(system_u:object_r:ndc_exec_t,s0)
/usr/sbin/unbound -- gen_context(system_u:object_r:named_exec_t,s0) /usr/sbin/unbound -- gen_context(system_u:object_r:named_exec_t,s0)
/usr/sbin/unbound-checkconf -- gen_context(system_u:object_r:named_checkconf_exec_t,s0)
/usr/sbin/unbound-control -- gen_context(system_u:object_r:ndc_exec_t,s0)
/var/bind(/.*)? gen_context(system_u:object_r:named_cache_t,s0) /var/bind(/.*)? gen_context(system_u:object_r:named_cache_t,s0)
/var/bind/pri(/.*)? gen_context(system_u:object_r:named_zone_t,s0) /var/bind/pri(/.*)? gen_context(system_u:object_r:named_zone_t,s0)