Sugar, David 4f8d21ea71 Add interface to allow relabeling of iso 9660 filesystems. ... I have a case where I'm labeling media with my own types to control access. But that is requiring that I relabel from iso9660_t to my own type. This interface allows that relabel. type=AVC msg=audit(1551621984.372:919): avc: denied { relabelfrom } for pid=9717 comm="mount" scontext=staff_u:staff_r:mymedia_sudo_t:s0-s0:c0.c1023 tcontext=system_u:object_r:iso9660_t:s0 tclass=filesystem permissive=0 Signed-off-by: Dave Sugar <dsugar@tresys.com>		2019-03-07 19:02:57 -05:00
..
corecommands.fc	more misc stuff	2019-02-01 14:16:57 -05:00
corecommands.if	Add new mmap permission set and pattern support macros.	2017-12-13 18:58:34 -05:00
corecommands.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
corenetwork.fc	Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.	2017-02-04 15:19:35 -05:00
corenetwork.if.in	Remove undeclared identifiers from interfaces	2018-04-12 18:44:50 -04:00
corenetwork.if.m4	refpolicy: Infiniband pkeys and endports	2017-05-24 19:23:18 -04:00
corenetwork.te.in	corenetwork: Module version bump.	2019-02-17 21:11:43 -05:00
corenetwork.te.m4	refpolicy: Infiniband pkeys and endports	2017-05-24 19:23:18 -04:00
devices.fc	vhost: Add /dev/vhost-scsi device of type vhost_device_t.	2018-07-15 16:43:45 -04:00
devices.if	devices: introduce dev_dontaudit_read_sysfs	2019-01-23 18:40:57 -05:00
devices.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
domain.fc	…
domain.if	Add new mmap permission set and pattern support macros.	2017-12-13 18:58:34 -05:00
domain.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
files.fc	Move the use of initrc_var_run_t from files.fc to init.fc	2018-04-12 18:44:50 -04:00
files.if	files: introduce files_dontaudit_read_etc_files	2019-01-23 18:40:57 -05:00
files.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
filesystem.fc	Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.	2017-02-04 15:19:35 -05:00
filesystem.if	Add interface to allow relabeling of iso 9660 filesystems.	2019-03-07 19:02:57 -05:00
filesystem.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
kernel.fc	…
kernel.if	kernel: introduce kernel_dontaudit_read_kernel_sysctl	2019-01-23 18:40:57 -05:00
kernel.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
mcs.fc	…
mcs.if	…
mcs.te	…
metadata.xml	…
mls.fc	…
mls.if	Remove unused translate permission in context userspace class.	2018-10-13 13:39:18 -04:00
mls.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
selinux.fc	…
selinux.if	selinux: compute_access_vector requires creating netlink_selinux_sockets	2018-07-10 17:25:11 -04:00
selinux.te	Bump module versions for release.	2019-02-01 15:03:42 -05:00
storage.fc	storage: Add fcontexts for NVMe disks	2017-12-13 18:19:29 -05:00
storage.if	…
storage.te	Bump module versions for release.	2018-01-14 14:08:09 -05:00
terminal.fc	Move use of user_devpts_t from terminal.fc to userdomain.fc	2018-04-12 18:44:50 -04:00
terminal.if	terminal: Rename term_create_devpts.	2017-09-11 20:03:58 -04:00
terminal.te	Bump module versions for release.	2018-07-01 11:02:33 -04:00
ubac.fc	…
ubac.if	…
ubac.te	…