selinux-refpolicy/policy/modules/system
Laurent Bigonville 0e1c64f3bb Allow unconfined users to transition to dpkg_t domain
dpkg is now using rpm_execcon()/setexecfilecon()-like function to
transition to the dpkg_script_t domain. This function will fail in
enforcing mode if the transition is not allowed.
2014-01-27 12:41:45 -05:00
..
application.fc
application.if
application.te
authlogin.fc authlogin: Sudo file context specification did not catch paths (squash me) 2013-09-26 09:25:27 -04:00
authlogin.if
authlogin.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
clock.fc
clock.if
clock.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
fstools.fc Rearrange ZFS fc entries. 2014-01-21 08:55:28 -05:00
fstools.if
fstools.te Module version bump for ZFS tools fc entries from Matthew Thode. 2014-01-21 08:55:37 -05:00
getty.fc
getty.if
getty.te
hostname.fc
hostname.if
hostname.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
hotplug.fc
hotplug.if
hotplug.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
init.fc
init.if Change behavior of init_run_daemon() 2014-01-16 14:42:00 -05:00
init.te Module version bump for direct initrc fixes from Dominick Grift. 2014-01-16 16:11:02 -05:00
ipsec.fc
ipsec.if
ipsec.te
iptables.fc
iptables.if
iptables.te Module version bump for patches from Dominick Grift. 2013-12-06 09:49:41 -05:00
libraries.fc Whitespace fix in libraries. 2013-12-06 08:48:04 -05:00
libraries.if
libraries.te Module version bump for patches from Dominick Grift. 2013-12-06 09:49:41 -05:00
locallogin.fc
locallogin.if
locallogin.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
logging.fc
logging.if
logging.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
lvm.fc udev-acl.ck lists /run/udev/tags/udev-acl udev blocks suspend, and compromises kernel 2013-09-27 16:35:28 -04:00
lvm.if
lvm.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
metadata.xml
miscfiles.fc
miscfiles.if
miscfiles.te
modutils.fc
modutils.if
modutils.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
mount.fc Rearrange ZFS fc entries. 2014-01-21 08:55:28 -05:00
mount.if
mount.te Module version bump for ZFS tools fc entries from Matthew Thode. 2014-01-21 08:55:37 -05:00
netlabel.fc
netlabel.if
netlabel.te
selinuxutil.fc Label /etc/selinux/([^/]*/)?modules(/.*)? as semanage_store_t 2014-01-16 16:12:44 -05:00
selinuxutil.if Label /etc/selinux/([^/]*/)?modules(/.*)? as semanage_store_t 2014-01-16 16:12:44 -05:00
selinuxutil.te Module version bump for module store labeling fixes from Laurent Bigonville. 2014-01-17 08:54:08 -05:00
setrans.fc
setrans.if
setrans.te Module version bump for second lot of patches from Dominick Grift. 2013-12-03 13:03:35 -05:00
sysnetwork.fc sysnetwork: Debian stores network interface configuration in /run/network (ifstate), That directory is created by the /etc/init.d/networking script. 2013-09-27 14:39:29 -04:00
sysnetwork.if hostname: do not audit attempts by hostname to read and write dhcpc udp sockets (looks like a leaked fd) 2013-09-27 15:13:19 -04:00
sysnetwork.te Module version bump for second lot of patches from Dominick Grift. 2013-12-03 13:03:35 -05:00
udev.fc udev: in debian udevadm is located in /bin/udevadm 2013-12-03 11:34:15 -05:00
udev.if
udev.te Update modules for file_t merge into unlabeled_t. 2014-01-16 11:24:25 -05:00
unconfined.fc
unconfined.if Unconfined domains have unconfined access to all of dbus rather than only system bus 2013-09-26 10:14:30 -04:00
unconfined.te Allow unconfined users to transition to dpkg_t domain 2014-01-27 12:41:45 -05:00
userdomain.fc
userdomain.if users: calls pulseaudio_role() for restricted xwindows users and staff_t/user_t 2013-12-06 08:48:09 -05:00
userdomain.te Module version bump for patches from Dominick Grift. 2013-12-06 09:49:41 -05:00