nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d48b57a5bd
selinux-refpolicy/policy/modules/admin
History
Chris PeBenito 0c41682fc4 cloudinit: Add permissions derived from sysadm. 
Allow a similar amount of admin capability to cloud-init as sysadm.  Also add
a tunable to allow non-security file management for fallback.

Signed-off-by: Chris PeBenito <Christopher.PeBenito@microsoft.com>
2024-02-22 09:13:38 -05:00
..
acct.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
acct.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
acct.te Drop module versioning. 2022-01-06 09:19:13 -05:00
aide.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
aide.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
aide.te domain: move kernel_read_crypto_sysctls to a common location 2022-09-14 17:03:04 -04:00
alsa.fc Allow alsa_t to create alsa_runtime_t file as well 2019-10-31 12:08:03 +01:00
alsa.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
alsa.te various: use mmap_manage_file_perms 2022-12-12 10:36:11 -05:00
amanda.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
amanda.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
amanda.te Drop module versioning. 2022-01-06 09:19:13 -05:00
amtu.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
amtu.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
amtu.te Drop module versioning. 2022-01-06 09:19:13 -05:00
anaconda.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
anaconda.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
anaconda.te Drop module versioning. 2022-01-06 09:19:13 -05:00
apt.fc apt, bootloader: Move lines. 2021-02-02 13:32:42 -05:00
apt.if various: use mmap_manage_file_perms 2022-12-12 10:36:11 -05:00
apt.te Drop module versioning. 2022-01-06 09:19:13 -05:00
backup.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
backup.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
backup.te Drop module versioning. 2022-01-06 09:19:13 -05:00
bacula.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
bacula.if Update callers for "pid" to "runtime" interface rename. 2020-06-28 16:03:45 -04:00
bacula.te Drop module versioning. 2022-01-06 09:19:13 -05:00
blueman.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
blueman.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
blueman.te Drop module versioning. 2022-01-06 09:19:13 -05:00
bootloader.fc bootloader: add rEFInd and systemd-boot 2020-04-25 13:15:46 +03:00
bootloader.if Fix interface descriptions when duplicate ones are found 2016-01-19 00:17:34 +01:00
bootloader.te bootloader, init, udev: misc minor fixes 2024-02-21 15:31:08 -05:00
brctl.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
brctl.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
brctl.te Drop module versioning. 2022-01-06 09:19:13 -05:00
certwatch.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
certwatch.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
certwatch.te Drop module versioning. 2022-01-06 09:19:13 -05:00
cfengine.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
cfengine.if Fix situations where require blocks in interfaces listed types not actually referenced by that interface 2020-01-24 08:18:55 -05:00
cfengine.te Drop module versioning. 2022-01-06 09:19:13 -05:00
chkrootkit.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
chkrootkit.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
chkrootkit.te Drop module versioning. 2022-01-06 09:19:13 -05:00
cloudinit.fc Add cloud-init. 2022-08-17 15:05:29 -04:00
cloudinit.if cloudinit: Add permissions derived from sysadm. 2024-02-22 09:13:38 -05:00
cloudinit.te cloudinit: Add permissions derived from sysadm. 2024-02-22 09:13:38 -05:00
consoletype.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
consoletype.if Make hide_broken_symptoms unconditional. 2022-02-16 12:04:21 -05:00
consoletype.te Drop module versioning. 2022-01-06 09:19:13 -05:00
dmesg.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
dmesg.if Admin layer xml fixes. 2010-08-05 08:46:44 -04:00
dmesg.te Drop module versioning. 2022-01-06 09:19:13 -05:00
dmidecode.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
dmidecode.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
dmidecode.te Drop module versioning. 2022-01-06 09:19:13 -05:00
dphysswapfile.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
dphysswapfile.if remove deprecated from 20190201 2021-01-25 08:59:34 -05:00
dphysswapfile.te Drop module versioning. 2022-01-06 09:19:13 -05:00
dpkg.fc dpkg: allow dpkg frontends to acquire lock by labeling it correctly 2020-06-15 14:45:07 +02:00
dpkg.if Fix mismatches between object class and permission macro. 2020-04-20 15:46:33 -04:00
dpkg.te small ntp and dns changes (#703) 2023-09-25 11:01:12 -04:00
fakehwclock.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
fakehwclock.if remove deprecated from 20190201 2021-01-25 08:59:34 -05:00
fakehwclock.te Drop module versioning. 2022-01-06 09:19:13 -05:00
fapolicyd.fc fapolicyd: Initial SELinux policy 2022-09-15 20:42:56 -04:00
fapolicyd.if fix: issue #550 - compile failed when DIRECT_INITRC=y 2022-10-07 20:55:29 -04:00
fapolicyd.te fapolicyd: fagenrules chgrp's the compiled.rules 2022-10-07 20:55:29 -04:00
firstboot.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
firstboot.if selint: fix S-010 2020-08-28 17:39:09 +02:00
firstboot.te Drop module versioning. 2022-01-06 09:19:13 -05:00
hwloc.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
hwloc.if Update callers for "pid" to "runtime" interface rename. 2020-06-28 16:03:45 -04:00
hwloc.te Drop module versioning. 2022-01-06 09:19:13 -05:00
kdump.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
kdump.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
kdump.te kdump: Fixes from testing kdumpctl. 2024-02-21 16:45:39 -05:00
kismet.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
kismet.if This patch removes deprecated interfaces that were deprecated in the 20210203 2022-12-12 10:32:09 -05:00
kismet.te Drop module versioning. 2022-01-06 09:19:13 -05:00
logrotate.fc Realign logrotate.fc, remove an obvious comment 2018-10-13 13:39:18 -04:00
logrotate.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
logrotate.te Remove a vulnerability introduced by a logging interface 2023-09-11 15:25:25 +02:00
logwatch.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
logwatch.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
logwatch.te logwatch: fixes for logwatch 2022-09-18 00:38:25 +08:00
mcelog.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
mcelog.if Update callers for "pid" to "runtime" interface rename. 2020-06-28 16:03:45 -04:00
mcelog.te Drop module versioning. 2022-01-06 09:19:13 -05:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
mrtg.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
mrtg.if Update callers for "pid" to "runtime" interface rename. 2020-06-28 16:03:45 -04:00
mrtg.te Drop module versioning. 2022-01-06 09:19:13 -05:00
ncftool.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
ncftool.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
ncftool.te Drop module versioning. 2022-01-06 09:19:13 -05:00
netutils.fc netutils: fixes for iftop 2023-03-10 11:31:02 -05:00
netutils.if netutils: search parent. 2010-10-05 15:11:00 -04:00
netutils.te small network patches (#707) 2023-09-25 11:44:52 -04:00
passenger.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
passenger.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
passenger.te Drop module versioning. 2022-01-06 09:19:13 -05:00
portage.fc portage: add missing go/hg context in new distfiles location 2023-01-17 07:25:35 +01:00
portage.if Merge pull request #579 from montjoie/portage-misc 2023-03-10 14:58:38 -05:00
portage.te portage: add misc mising rules 2023-01-31 08:22:39 +01:00
prelink.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
prelink.if Make hide_broken_symptoms unconditional. 2022-02-16 12:04:21 -05:00
prelink.te Make hide_broken_symptoms unconditional. 2022-02-16 12:04:21 -05:00
puppet.fc puppet: Style fixes. 2022-02-18 13:25:04 -05:00
puppet.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
puppet.te domain: move kernel_read_crypto_sysctls to a common location 2022-09-14 17:03:04 -04:00
quota.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
quota.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
quota.te Drop module versioning. 2022-01-06 09:19:13 -05:00
rkhunter.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
rkhunter.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
rkhunter.te Drop module versioning. 2022-01-06 09:19:13 -05:00
rpm.fc cloudinit: Add permissions derived from sysadm. 2024-02-22 09:13:38 -05:00
rpm.if rpm: fixes for dnf 2023-11-16 21:58:18 +08:00
rpm.te cloudinit: Add permissions derived from sysadm. 2024-02-22 09:13:38 -05:00
samhain.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
samhain.if This patch removes deprecated interfaces that were deprecated in the 20210203 2022-12-12 10:32:09 -05:00
samhain.te various: remove various mcs ranged transitions 2022-01-06 20:58:28 -05:00
sblim.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
sblim.if This patch removes deprecated interfaces that were deprecated in the 20210203 2022-12-12 10:32:09 -05:00
sblim.te Drop module versioning. 2022-01-06 09:19:13 -05:00
shorewall.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
shorewall.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
shorewall.te Drop module versioning. 2022-01-06 09:19:13 -05:00
shutdown.fc Fix the shutdown policy in order to make use of 2023-09-12 19:27:51 +02:00
shutdown.if shutdown: add tunable to control user exec domain access 2021-10-13 19:08:42 -04:00
shutdown.te Fix the shutdown policy in order to make use of 2023-09-12 19:27:51 +02:00
sosreport.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
sosreport.if policy: interfaces: doc: indent param blocks consistently 2021-07-02 12:19:25 +03:00
sosreport.te Drop module versioning. 2022-01-06 09:19:13 -05:00
su.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
su.if su: various fixes 2024-01-10 13:49:26 -05:00
su.te Drop module versioning. 2022-01-06 09:19:13 -05:00
sudo.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
sudo.if cloud-init: Allow use of sudo in runcmd. 2024-02-21 16:45:39 -05:00
sudo.te Drop module versioning. 2022-01-06 09:19:13 -05:00
sxid.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
sxid.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
sxid.te Drop module versioning. 2022-01-06 09:19:13 -05:00
tboot.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tboot.if Fix situations where require blocks in interfaces listed types not actually referenced by that interface 2020-01-24 08:18:55 -05:00
tboot.te Drop module versioning. 2022-01-06 09:19:13 -05:00
tmpreaper.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tmpreaper.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tmpreaper.te Drop module versioning. 2022-01-06 09:19:13 -05:00
tripwire.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tripwire.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tripwire.te Drop module versioning. 2022-01-06 09:19:13 -05:00
tzdata.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tzdata.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
tzdata.te Drop module versioning. 2022-01-06 09:19:13 -05:00
updfstab.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
updfstab.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
updfstab.te Drop module versioning. 2022-01-06 09:19:13 -05:00
usbguard.fc usbguard: add file context for usbguard in /usr/bin 2022-10-08 15:31:48 -04:00
usbguard.if Update callers for "pid" to "runtime" interface rename. 2020-06-28 16:03:45 -04:00
usbguard.te domain: move kernel_read_crypto_sysctls to a common location 2022-09-14 17:03:04 -04:00
usbmodules.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
usbmodules.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
usbmodules.te Drop module versioning. 2022-01-06 09:19:13 -05:00
usermanage.fc usermanage: add file context for chpasswd in /usr/bin 2022-10-08 15:31:46 -04:00
usermanage.if usermanage: Handle symlinks in /usr/share/cracklib. 2024-02-21 16:45:39 -05:00
usermanage.te cloudinit: Add permissions derived from sysadm. 2024-02-22 09:13:38 -05:00
vbetool.fc Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
vbetool.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
vbetool.te Drop module versioning. 2022-01-06 09:19:13 -05:00
vpn.fc Rename *_var_run_t types to *_runtime_t. 2019-09-30 20:02:43 -04:00
vpn.if Move all files out of the old contrib directory. 2018-06-23 10:38:58 -04:00
vpn.te Merge pull request #454 from jpds/rwnetlinksocketperms-typo 2022-01-11 15:04:31 -05:00