nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4d8e9ffcb3
selinux-refpolicy/policy/modules/system
History
Harry Ciao 4d8e9ffcb3 Make mount_t able to request loading kernel module. 
Make the mount domain able to request kernel to load a kernel module.
Otherwise the binfmt_misc kernel module won't be properly loaded
during system booting up.

type=1400 audit(1292850971.104:4): avc:  denied  { module_request } for  pid=87 comm="mount" kmod="devtmpfs" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system

type=1400 audit(1292851024.844:13): avc:  denied  { module_request } for  pid=409 comm="mount" kmod="binfmt_misc" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system

Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
2011-01-10 10:20:21 -05:00
..
application.fc
application.if Improve the documentation of application_domain(). 2010-03-03 10:37:58 -05:00
application.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
authlogin.fc Authlogin patch from Dan Walsh. 2010-03-18 08:59:25 -04:00
authlogin.if Implement miscfiles_cert_type(). 2010-09-10 11:05:46 -04:00
authlogin.te Implement miscfiles_cert_type(). 2010-09-10 11:05:46 -04:00
clock.fc
clock.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
clock.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
daemontools.fc
daemontools.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
daemontools.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
fstools.fc Fstools patch from Dan Walsh. 2010-03-09 14:32:17 -05:00
fstools.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
fstools.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
getty.fc trunk: 6 patches from the fedora policy, cherry picked by david hardeman. 2008-08-14 14:19:50 +00:00
getty.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
getty.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
hostname.fc
hostname.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
hostname.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
hotplug.fc
hotplug.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
hotplug.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
init.fc Rearrange distro blocks in init.fc 2010-12-15 14:48:43 -05:00
init.if Fixes for samhain init_system_domain() usage. 2010-12-16 09:03:51 -05:00
init.te Fixes for samhain init_system_domain() usage. 2010-12-16 09:03:51 -05:00
ipsec.fc Ipsec patch from Dan Walsh. 2010-03-17 13:52:07 -04:00
ipsec.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
ipsec.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
iptables.fc Iptables and modutils patches from Dan Walsh. 2009-12-01 09:23:11 -05:00
iptables.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
iptables.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
iscsi.fc Iscsi and tgtd patches from Dan Walsh. 2010-03-09 15:17:16 -05:00
iscsi.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
iscsi.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
libraries.fc Libraries patch from Dan Walsh. 2010-03-19 14:21:23 -04:00
libraries.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
libraries.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
locallogin.fc
locallogin.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
locallogin.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
logging.fc Change /dev/log fc to MLS system high. 2010-11-05 13:13:21 -04:00
logging.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
logging.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
lvm.fc trunk: 5 patches from dan. 2009-05-06 14:26:20 +00:00
lvm.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
lvm.te Remove duplicate/redundant rules, from Russell Coker. 2010-07-07 08:41:20 -04:00
metadata.xml
miscfiles.fc Additional miscfiles tweaks. 2010-11-17 09:30:44 -05:00
miscfiles.if system_miscfiles patch from Dan Walsh 2010-11-17 09:30:44 -05:00
miscfiles.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
modutils.fc Iptables and modutils patches from Dan Walsh. 2009-12-01 09:23:11 -05:00
modutils.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
modutils.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
mount.fc
mount.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
mount.te Make mount_t able to request loading kernel module. 2011-01-10 10:20:21 -05:00
netlabel.fc
netlabel.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
netlabel.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
pcmcia.fc
pcmcia.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
pcmcia.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
raid.fc RAID patch from Dan Walsh. 2009-11-25 11:17:19 -05:00
raid.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
raid.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
selinuxutil.fc
selinuxutil.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
selinuxutil.te Module version bump and changelog for semanage update from Harry Ciao. 2011-01-10 09:21:11 -05:00
setrans.fc trunk: init script for setrans. 2008-09-18 18:20:31 +00:00
setrans.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
setrans.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
sysnetwork.fc Sysnetwork patch from Dan Walsh. 2010-03-18 15:40:04 -04:00
sysnetwork.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
sysnetwork.te Remove duplicate/redundant rules, from Russell Coker. 2010-07-07 08:41:20 -04:00
udev.fc Create new interface and type for managing /etc/udev/rules.d 2010-05-18 10:20:55 -04:00
udev.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
udev.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
unconfined.fc Qemu patch from Dan Walsh. 2010-02-19 10:15:19 -05:00
unconfined.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
unconfined.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
userdomain.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
userdomain.if Reorder samhain call in userdomain. 2010-12-15 11:02:29 -05:00
userdomain.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
xen.fc Fstools and Xen patches from Dan Walsh. 2009-11-25 10:27:31 -05:00
xen.if System layer xml fixes. 2010-08-05 09:25:55 -04:00
xen.te Remove duplicate/redundant rules, from Russell Coker. 2010-07-07 08:41:20 -04:00