RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system
History
Nicolas Iooss 1a3baa342c
Synchronize file patterns for /usr/bin/mount... and /usr/sbin/mount... 
mount.fc defines file contexts for /usr/bin/mount.*, /usr/bin/umount.*
and /usr/sbin/mount\.zfs. These patterns are not consistent for two
reasons:

- some distributions use /sbin/mount... for other file systems that zfs.
  For example Debian uses /sbin/mount.ntfs-3g
  (https://packages.debian.org/jessie/amd64/ntfs-3g/filelist)
- mount_exec_t type should only be applied to mount, umount, mount.$FS
  and umount.udisks2, not mountpoint.

Replace the file patterns with ones that do not match mountpoint and
match every mount and umount programs in /usr/bin and /usr/sbin.
 		2017-04-15 20:23:34 +02:00
..
application.fc
…
application.if
…
application.te
…
authlogin.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
authlogin.if auth: Move optional out of auth_use_pam_systemd() to callers. 2017-02-26 12:08:02 -05:00
authlogin.te authlogin: put interface properly inside optional 2017-02-28 19:55:27 -05:00
clock.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
clock.if
…
clock.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
fstools.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
fstools.if
…
fstools.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
getty.fc getty: overlook module 2017-02-27 19:21:39 +01:00
getty.if getty: overlook module 2017-02-27 19:21:39 +01:00
getty.te Module version bump for getty patch from cgzones. 2017-03-02 20:25:04 -05:00
hostname.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hostname.if
…
hostname.te Module version bump for hostname fix from cgzones. 2017-02-18 13:58:29 -05:00
hotplug.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hotplug.if
…
hotplug.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
init.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
init.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
init.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
ipsec.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
ipsec.if
…
ipsec.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
iptables.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
iptables.if
…
iptables.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
libraries.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
libraries.if
…
libraries.te Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
locallogin.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
locallogin.if
…
locallogin.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
logging.fc /var/run -> /run again 2017-03-25 12:56:03 -04:00
logging.if systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
logging.te systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
lvm.fc Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
lvm.if lvm: small adjustments 2017-03-12 10:32:02 +01:00
lvm.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
metadata.xml
…
miscfiles.fc
…
miscfiles.if systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
miscfiles.te systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
modutils.fc systemd-tmpfiles: refactor runtime configs 2017-02-27 19:32:20 +01:00
modutils.if modutils: adopt callers to new interfaces 2017-03-03 12:28:17 +01:00
modutils.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
mount.fc Synchronize file patterns for /usr/bin/mount... and /usr/sbin/mount... 2017-04-15 20:23:34 +02:00
mount.if remove trailing whitespaces 2016-12-06 13:45:13 +01:00
mount.te Sort capabilities permissions from Russell Coker. 2017-02-15 18:47:33 -05:00
netlabel.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
netlabel.if
…
netlabel.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
selinuxutil.fc selinuxutil: adjustments 2017-02-16 16:53:06 +01:00
selinuxutil.if selinuxutil: allow setfiles to read semanage store 2016-09-18 16:40:45 -04:00
selinuxutil.te Module version bumps for fixes from cgzones. 2017-03-05 10:48:42 -05:00
setrans.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
setrans.if
…
setrans.te Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
sysnetwork.fc /var/run -> /run again 2017-03-25 12:56:03 -04:00
sysnetwork.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
sysnetwork.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
systemd.fc Merge branch 'var_run' of git://github.com/cgzones/refpolicy 2017-03-25 13:03:32 -04:00
systemd.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
systemd.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
udev.fc Misc fc changes from Russell Coker. 2017-04-06 17:00:28 -04:00
udev.if another version of systemd cgroups hostnamed and logind 2017-03-25 13:45:37 -04:00
udev.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
unconfined.fc Apache OpenOffice module (base policy part) 2016-12-06 20:08:06 -05:00
unconfined.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
unconfined.te Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
userdomain.fc base: use new genhomedircon template for username 2016-12-27 10:34:04 -05:00
userdomain.if systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00
userdomain.te systemd-resolvd, sessions, and tmpfiles take2 2017-03-28 18:51:35 -04:00