RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/kernel
History
Nicolas Iooss 9427fc3ce1 Label /usr/lib/getconf as bin_t 
On ArchLinux, glibc package installs /usr/bin/getconf as a hard link to a file
in /usr/lib/getconf/.  For example on a x86_64 machine:

    $ ls -i -l /usr/bin/getconf /usr/lib/getconf/XBS5_LP64_OFF64
    5900355 -rwxr-xr-x. 4 root root 22880 Feb 28 04:53 /usr/bin/getconf
    5900355 -rwxr-xr-x. 4 root root 22880 Feb 28 04:53 /usr/lib/getconf/XBS5_LP64_OFF64

Such configuration produces an instability when labeling the files with
"restorecon -Rv /":

    restorecon reset /usr/bin/getconf context unconfined_u:object_r:lib_t:s0->unconfined_u:object_r:bin_t:s0
    restorecon reset /usr/lib/getconf/XBS5_LP64_OFF64 context unconfined_u:object_r:bin_t:s0->unconfined_u:object_r:lib_t:s0

As /usr/lib/getconf directory only contains executable programs, this issue is
fixed by labeling this directory and its content "bin_t".
 		2014-04-21 10:15:51 -04:00
..
corecommands.fc Label /usr/lib/getconf as bin_t 2014-04-21 10:15:51 -04:00
corecommands.if Additional rearrangement in corecommands, along with module version bump. 2010-10-27 14:09:00 -04:00
corecommands.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
corenetwork.fc Start pulling in kernel layer pieces from Fedora. 2011-03-29 10:33:43 -04:00
corenetwork.if.in Corenetwork policy size optimization from Dan Walsh. 2011-08-26 09:03:25 -04:00
corenetwork.if.m4 trunk: Add support for network interfaces with access controlled by a Boolean from the CLIP project. 2009-01-15 20:31:06 +00:00
corenetwork.te.in Bump module versions for release. 2014-03-11 08:16:57 -04:00
corenetwork.te.m4 Fix corenetwork port declaration to choose either reserved or unreserved. 2011-10-04 15:31:08 -04:00
devices.fc Support /sys/devices/system/cpu/online 2014-04-04 16:07:43 -04:00
devices.if Dontaudit access on security_t file system at /sys/fs/selinux 2014-04-21 08:37:47 -04:00
devices.te Module version bump for /sys/fs/selinux support from Sven Vermeulen. 2014-04-21 09:01:08 -04:00
domain.fc
…
domain.if Start pulling in kernel layer pieces from Fedora. 2011-03-29 10:33:43 -04:00
domain.te Module version bump for 2 Gentoo patches from Sven Vermeulen. 2014-04-04 16:09:30 -04:00
files.fc Label /var/run/motd.dynamic as initrc_var_run_t 2013-01-23 07:08:06 -05:00
files.if kernel/files.if: Add files_dontaudit_list_var interface 2014-02-08 09:02:57 -05:00
files.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
filesystem.fc filesystem: label cgroup symlinks 2014-04-21 09:32:30 -04:00
filesystem.if Create new xattrfs attribute and fs_getattr_all_xattr_fs() interface 2014-04-11 09:08:19 -04:00
filesystem.te Module version bump for fixes from Laurent Bigonville. 2014-04-21 09:24:28 -04:00
kernel.fc
…
kernel.if Merge file_t into unlabeled_t, as they are security equivalent. 2014-01-16 11:19:00 -05:00
kernel.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
mcs.fc
…
mcs.if Move mcs_constrained() impementation. 2012-11-28 16:26:05 -05:00
mcs.te Bump module versions for release. 2013-04-24 16:14:52 -04:00
metadata.xml
…
mls.fc
…
mls.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
mls.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
selinux.fc
…
selinux.if Dontaudit access on security_t file system at /sys/fs/selinux 2014-04-21 08:37:47 -04:00
selinux.te Module version bump for /sys/fs/selinux support from Sven Vermeulen. 2014-04-21 09:01:08 -04:00
storage.fc Rearrange ZFS fc entries. 2014-01-21 08:55:28 -05:00
storage.if Support named file transition for fixed_disk_device_t 2013-08-26 08:51:20 -04:00
storage.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
terminal.fc Initial virtio console device 2013-09-26 10:27:29 -04:00
terminal.if Initial virtio console device 2013-09-26 10:27:29 -04:00
terminal.te Module version bump for 2 patch sets from Laurent Bigonville. 2014-04-11 11:21:03 -04:00
ubac.fc trunk: add missing ubac module. 2008-11-05 16:11:27 +00:00
ubac.if Improve the documentation of ubac_constrained(). 2010-03-02 11:28:44 -05:00
ubac.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00