RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-30 07:16:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
7bb9172b67
selinux-refpolicy/policy/modules/system
History
Nicolas Iooss 7bb9172b67
Allow restorecond to read customizable_types 
When trying to remove files_read_non_auth_files(restorecond_t), the
following AVC denial occurs:

    type=AVC msg=audit(1550921968.443:654): avc:  denied  { open } for
    pid=281 comm="restorecond"
    path="/etc/selinux/refpolicy/contexts/customizable_types" dev="vda1"
    ino=928006 scontext=system_u:system_r:restorecond_t
    tcontext=system_u:object_r:default_context_t tclass=file
    permissive=1

    type=AVC msg=audit(1550921968.443:654): avc:  denied  { read } for
    pid=281 comm="restorecond" name="customizable_types" dev="vda1"
    ino=928006 scontext=system_u:system_r:restorecond_t
    tcontext=system_u:object_r:default_context_t tclass=file
    permissive=1

As /etc/selinux/${SELINUXTYPE}/contexts/customizable_types is needed by
restorecond, allow this access.
2019-02-23 21:14:10 +01:00
..
application.fc
application.if
application.te
authlogin.fc Move the use of var_log_t from authlogin.fc to logging.fc 2018-04-12 18:44:50 -04:00
authlogin.if pam_faillock creates files in /run/faillock 2019-01-06 13:57:18 -05:00
authlogin.te logging, miscfiles, authlogin: Module version bump. 2019-02-20 19:38:55 -08:00
clock.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
clock.if
clock.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
daemontools.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
daemontools.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
daemontools.te Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
fstools.fc fstools: label e2mmpstatus as fsadm_exec_t 2018-08-04 08:50:06 -04:00
fstools.if dphysswapfile: add interfaces and sysadm access 2017-09-14 17:19:55 -04:00
fstools.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
getty.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
getty.if getty: overlook module 2017-02-27 19:21:39 +01:00
getty.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
hostname.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hostname.if
hostname.te Bump module versions for release. 2018-01-14 14:08:09 -05:00
hotplug.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
hotplug.if
hotplug.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
init.fc Move use of systemd_unit_t from systemd.fc to init.fc 2018-04-12 18:44:50 -04:00
init.if init: Drop unnecessary userspace class dependence in init_read_generic_units_symlinks(). 2019-01-23 18:35:00 -05:00
init.te init, systemd, cdrecord: Module version bump. 2019-02-19 19:31:04 -08:00
ipsec.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
ipsec.if Add systemd units for core refpolicy services. 2015-10-23 10:17:46 -04:00
ipsec.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
iptables.fc iptables: fcontexts for 1.8.0 2018-07-10 17:25:11 -04:00
iptables.if Add interface to start/stop iptables service 2019-01-12 14:32:00 -05:00
iptables.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
iscsi.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
iscsi.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
iscsi.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
libraries.fc libraries: Add fc entry for musl's ld.so config 2017-11-14 18:32:46 -05:00
libraries.if Add new mmap permission set and pattern support macros. 2017-12-13 18:58:34 -05:00
libraries.te Bump module versions for release. 2018-01-14 14:08:09 -05:00
locallogin.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
locallogin.if Fix interface descriptions when duplicate ones are found 2016-01-19 00:17:34 +01:00
locallogin.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
logging.fc label journald configuraiton files syslog_conf_t 2019-01-16 18:11:43 -05:00
logging.if Add interface to get status of rsyslog service 2019-02-20 19:28:45 -08:00
logging.te logging, miscfiles, authlogin: Module version bump. 2019-02-20 19:38:55 -08:00
lvm.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
lvm.if lvm: small adjustments 2017-03-12 10:32:02 +01:00
lvm.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
metadata.xml
miscfiles.fc miscfiles: Label /usr/share/texmf*/fonts/ as fonts_t 2018-10-14 13:50:27 -04:00
miscfiles.if New interface to dontaudit access to cert_t 2019-02-20 19:28:45 -08:00
miscfiles.te logging, miscfiles, authlogin: Module version bump. 2019-02-20 19:38:55 -08:00
modutils.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
modutils.if modutils: libkmod mmap()s modules.dep and *.ko's 2017-09-11 20:31:23 -04:00
modutils.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
mount.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
mount.if Remove deprecated interfaces older than one year old. 2017-08-06 17:03:17 -04:00
mount.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
netlabel.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
netlabel.if
netlabel.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
pcmcia.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
pcmcia.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
pcmcia.te Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
raid.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
raid.if misc interfaces 2019-01-05 13:36:20 -05:00
raid.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
selinuxutil.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
selinuxutil.if selinuxutil: Add map permissions neccessary for semanage 2017-09-11 20:31:23 -04:00
selinuxutil.te Allow restorecond to read customizable_types 2019-02-23 21:14:10 +01:00
setrans.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
setrans.if Remove unused translate permission in context userspace class. 2018-10-13 13:39:18 -04:00
setrans.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
sysnetwork.fc Modify type for /etc/hostname 2019-01-16 18:13:41 -05:00
sysnetwork.if sysnetwork: Move optional block in sysnet_dns_name_resolve(). 2019-01-05 13:42:11 -05:00
sysnetwork.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
systemd.fc Separate domain for systemd-modules-load 2019-02-09 09:01:05 -05:00
systemd.if systemd: Move interface implementation. 2019-01-20 16:36:36 -05:00
systemd.te init, systemd, cdrecord: Module version bump. 2019-02-19 19:31:04 -08:00
udev.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
udev.if Add interface udev_run_domain 2018-11-09 19:04:22 -05:00
udev.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
unconfined.fc Apache OpenOffice module (base policy part) 2016-12-06 20:08:06 -05:00
unconfined.if unconfined: add a note about DBUS 2019-01-14 17:02:56 +01:00
unconfined.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
userdomain.fc Move use of user_devpts_t from terminal.fc to userdomain.fc 2018-04-12 18:44:50 -04:00
userdomain.if userdomain: introduce userdom_user_home_dir_filetrans_user_cert 2019-01-23 18:40:57 -05:00
userdomain.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
xdg.fc freedesktop location support 2018-06-10 13:23:01 -04:00
xdg.if xdg: Introduce xdg_search_cache_dirs 2018-06-24 19:11:14 -04:00
xdg.te Bump module versions for release. 2018-07-01 11:02:33 -04:00
xen.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
xen.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
xen.te Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00