selinux-refpolicy/refpolicy/policy/modules/system/unconfined.te

58 lines
1.1 KiB
Plaintext

policy_module(unconfined,1.0)
########################################
#
# Declarations
#
# real declaration moved to mls until
# range_transition works in loadable modules
gen_require(`
type unconfined_t;
')
type unconfined_exec_t;
init_system_domain(unconfined_t,unconfined_exec_t)
role system_r types unconfined_t;
########################################
#
# Local policy
#
unconfined_domain_template(unconfined_t)
logging_send_syslog_msg(unconfined_t)
ifdef(`targeted_policy',`
allow unconfined_t self:system syslog_read;
# Define some type aliases to help with compatibility with
# macros and domains from the "strict" policy.
typealias unconfined_t alias { secadm_t sysadm_t };
init_domtrans_script(unconfined_t)
userdom_unconfined(unconfined_t)
optional_policy(`postfix.te',`
postfix_domtrans_map(unconfined_t)
')
optional_policy(`samba.te',`
samba_domtrans_net(unconfined_t)
')
optional_policy(`su.te',`
su_per_userdomain_template(sysadm,unconfined_t,system_r)
')
ifdef(`TODO',`
ifdef(`use_mcs',`
rw_dir_create_file(sysadm_su_t, home_dir_type)
')
') dnl end TODO
typeattribute unconfined_t direct_run_init;
')