RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system
History
Guido Trentalancia 02b4ee1f81 locallogin: fix the sulogin submodule (emergency shell!) 
This patch fixes the policy for sulogin. It is very important
because without this patch, sulogin cannot work properly and
it should be considered that it is used as an emergency shell
when there are serious consistency errors in the system, so it
constitutes the only way to recover the system in such
circumstances.

Nowadays, sulogin never uses PAM (at least not the official one
from util-linux), so obsolete, confusing and buggy policy has
been removed.

Extensive testing carried out while creating this patch indicates
that there aren't other permissions needed to successfully run
sulogin.

This second version should apply cleanly to the latest git tree.

Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
 		2017-04-26 06:15:02 -04:00
..
application.fc
…
application.if
…
application.te
…
authlogin.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
authlogin.if auth: Move optional out of auth_use_pam_systemd() to callers. 2017-02-26 12:08:02 -05:00
authlogin.te authlogin: put interface properly inside optional 2017-02-28 19:55:27 -05:00
clock.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
clock.if
…
clock.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
fstools.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
fstools.if Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
fstools.te Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
getty.fc getty: overlook module 2017-02-27 19:21:39 +01:00
getty.if getty: overlook module 2017-02-27 19:21:39 +01:00
getty.te Module version bump for getty patch from cgzones. 2017-03-02 20:25:04 -05:00
hostname.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hostname.if
…
hostname.te Module version bump for hostname fix from cgzones. 2017-02-18 13:58:29 -05:00
hotplug.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hotplug.if
…
hotplug.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
init.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
init.if Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
init.te Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
ipsec.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
ipsec.if Add systemd units for core refpolicy services. 2015-10-23 10:17:46 -04:00
ipsec.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
iptables.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
iptables.if kmod, lvm, brctl patches from Russell Coker 2017-04-18 21:17:36 -04:00
iptables.te kmod, lvm, brctl patches from Russell Coker 2017-04-18 21:17:36 -04:00
libraries.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
libraries.if
…
libraries.te Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
locallogin.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
locallogin.if Fix interface descriptions when duplicate ones are found 2016-01-19 00:17:34 +01:00
locallogin.te locallogin: fix the sulogin submodule (emergency shell!) 2017-04-26 06:15:02 -04:00
logging.fc /var/run -> /run again 2017-03-25 12:56:03 -04:00
logging.if systemd init from Russell Coker 2017-04-16 19:08:40 -04:00
logging.te systemd init from Russell Coker 2017-04-16 19:08:40 -04:00
lvm.fc Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
lvm.if lvm: small adjustments 2017-03-12 10:32:02 +01:00
lvm.te kmod, lvm, brctl patches from Russell Coker 2017-04-18 21:17:36 -04:00
metadata.xml
…
miscfiles.fc Label /etc/locale.alias as locale_t on Debian 2014-04-21 09:02:26 -04:00
miscfiles.if systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
miscfiles.te systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
modutils.fc systemd-tmpfiles: refactor runtime configs 2017-02-27 19:32:20 +01:00
modutils.if Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
modutils.te Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
mount.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
mount.if bootloader from Russell Coker. 2017-04-18 20:56:59 -04:00
mount.te devicekit, mount, xserver, and selinuxutil from Russell Coker 2017-04-18 21:28:16 -04:00
netlabel.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
netlabel.if
…
netlabel.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
selinuxutil.fc selinuxutil: adjustments 2017-02-16 16:53:06 +01:00
selinuxutil.if selinuxutil: allow setfiles to read semanage store 2016-09-18 16:40:45 -04:00
selinuxutil.te devicekit, mount, xserver, and selinuxutil from Russell Coker 2017-04-18 21:28:16 -04:00
setrans.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
setrans.if Add systemd units for core refpolicy services. 2015-10-23 10:17:46 -04:00
setrans.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
sysnetwork.fc /var/run -> /run again 2017-03-25 12:56:03 -04:00
sysnetwork.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
sysnetwork.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
systemd.fc Merge branch 'var_run' of git://github.com/cgzones/refpolicy 2017-03-25 13:03:32 -04:00
systemd.if more systemd stuff from Russell Coker 2017-04-16 19:48:04 -04:00
systemd.te more systemd stuff from Russell Coker 2017-04-16 19:48:04 -04:00
udev.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
udev.if misc daemons from Russell Coker. 2017-04-18 20:38:13 -04:00
udev.te misc daemons from Russell Coker. 2017-04-18 20:38:13 -04:00
unconfined.fc Apache OpenOffice module (base policy part) 2016-12-06 20:08:06 -05:00
unconfined.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
unconfined.te some userdomain patches from Russell Coker 2017-04-18 21:41:45 -04:00
userdomain.fc base: use new genhomedircon template for username 2016-12-27 10:34:04 -05:00
userdomain.if Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00
userdomain.te Further strict systemd fixes from Russell Coker. 2017-04-20 20:00:34 -04:00