selinux-refpolicy/policy/modules/kernel
Kenton Groombridge 82461e6172 files, init: allow init to remount filesystems mounted on /boot
The context= mount option can be used to label, for example, a DOS
filesystem mounted on boot to be boot_t instead of dosfs_t. Explicitly
allow init (systemd) to remount boot_t filesystems so that options like
ProtectSystem=full work properly.

Signed-off-by: Kenton Groombridge <me@concord.sh>
2022-03-23 10:57:57 -04:00
..
corecommands.fc corecommands: add entry for Busybox shell 2020-09-21 16:25:09 +02:00
corecommands.if remove deprecated from 20190201 2021-01-25 08:59:34 -05:00
corecommands.te Drop module versioning. 2022-01-06 09:19:13 -05:00
corenetwork.fc
corenetwork.if.in Fix several misspellings 2020-08-13 14:08:58 +02:00
corenetwork.if.m4 Allow systemd-networkd to handle ICMP and DHCP packets 2020-04-22 15:46:56 +03:00
corenetwork.te.in matrixd-synapse policy V3 2022-02-18 13:29:17 -05:00
corenetwork.te.m4 work on SELint issues 2020-08-13 21:23:43 +02:00
devices.fc devices.fc: Added missing Xen character files. 2021-07-06 15:52:27 +01:00
devices.if devices: add interfaces to remount sysfs and device filesystems 2022-01-21 15:03:21 -05:00
devices.te various: make various types a mountpoint for containers 2022-01-21 15:03:35 -05:00
domain.fc
domain.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
domain.te Make hide_broken_symptoms unconditional. 2022-02-16 12:04:21 -05:00
files.fc Remove modules for programs that are deprecated or no longer supported. 2021-01-14 17:14:30 -05:00
files.if files, init: allow init to remount filesystems mounted on /boot 2022-03-23 10:57:57 -04:00
files.te Drop module versioning. 2022-01-06 09:19:13 -05:00
filesystem.fc filesystem: pathcon for matching tracefs mount 2020-05-27 11:51:36 +02:00
filesystem.if filesystem: add supporting FUSEFS interfaces 2022-01-24 11:07:02 -05:00
filesystem.te various: make various types a mountpoint for containers 2022-01-21 15:03:35 -05:00
kernel.fc
kernel.if kernel: add filetrans interface for unlabeled dirs 2022-01-24 11:07:45 -05:00
kernel.te various: make various types a mountpoint for containers 2022-01-21 15:03:35 -05:00
mcs.fc
mcs.if various: deprecate mcs override interfaces 2021-11-09 13:55:26 -05:00
mcs.te Drop module versioning. 2022-01-06 09:19:13 -05:00
metadata.xml
mls.fc
mls.if remove deprecated from 20190201 2021-01-25 08:59:34 -05:00
mls.te Drop module versioning. 2022-01-06 09:19:13 -05:00
selinux.fc
selinux.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
selinux.te Drop module versioning. 2022-01-06 09:19:13 -05:00
storage.fc devices, storage: Add fc entries for mtd char devices and ndctl devices. 2019-07-16 16:38:43 -04:00
storage.if Fix several misspellings 2020-08-13 14:08:58 +02:00
storage.te various: make various types a mountpoint for containers 2022-01-21 15:03:35 -05:00
terminal.fc Remove old exception 2020-02-23 17:52:54 +01:00
terminal.if Remove modules for programs that are deprecated or no longer supported. 2021-01-14 17:14:30 -05:00
terminal.te various: make various types a mountpoint for containers 2022-01-21 15:03:35 -05:00
ubac.fc
ubac.if
ubac.te Drop module versioning. 2022-01-06 09:19:13 -05:00