selinux-refpolicy/refpolicy/policy/modules/system/selinuxutil.te

50 lines
1.1 KiB
Plaintext

# Copyright (C) 2005 Tresys Technology, LLC
#
# selinux_config_t is the type applied to
# /etc/selinux/config
#
type selinux_config_t;
files_make_file(selinux_config_t)
#
# policy_config_t is the type of /etc/security/selinux/*
# the security server policy configuration.
#
type policy_config_t;
files_make_file(policy_config_t)
attribute can_write_binary_policy;
attribute can_relabelto_binary_policy;
neverallow ~can_relabelto_binary_policy policy_config_t:file relabelto;
neverallow ~can_write_binary_policy policy_config_t:file { write append };
#
# policy_src_t is the type of the policy source
# files.
#
type policy_src_t;
files_make_file(policy_src_t)
#
# default_context_t is the type applied to
# /etc/selinux/*/contexts/*
#
type default_context_t;
files_make_file(default_context_t)
#
# file_context_t is the type applied to
# /etc/selinux/*/contexts/files
#
type file_context_t;
files_make_file(file_context_t)
type load_policy_t;
domain_make_domain(load_policy_t)
type load_policy_exec_t;
domain_make_entrypoint_file(load_policy_t,load_policy_exec_t)
selinux_read_binary_policy(load_policy_t)