nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
31f772cb7a
selinux-refpolicy/policy/modules/system/udev.fc

39 lines
1.5 KiB
Plaintext
Raw Normal View History

Reverse /dev/.udev/(/.*)? dir label fix. I realized the policy wasn't complete for handling udev_tbl_t dirs, and updating it wouldn't work because we couldn't make a filetrans on dirs, since all the dirs in /dev would become udev_tbl_t. i.e. this would have been required, but would make problems: dev_filetrans(udev_t, udev_tbl_t, dir);
2011-02-17 14:32:00 +00:00
/dev/\.udev(/.*)? -- gen_context(system_u:object_r:udev_tbl_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0)
/dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/dev\.d/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/hotplug\.d/default/udev.* -- gen_context(system_u:object_r:udev_helper_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Create new interface and type for managing /etc/udev/rules.d udev_var_run_t is used for managing files in /etc/udev/rules.d as well as other files, including udev pid files. This patch creates a type specifically for rules.d files, and an interface for managing them. It also gives access to this type to initrc_t so that rules can be properly populated during startup. This also fixes a problem on Gentoo where udev rules are NOT properly populated on startup. Signed-off-by: Chris Richards <gizmo@giz-works.com> Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-04-16 06:27:36 +00:00
/etc/udev/rules.d(/.*)? gen_context(system_u:object_r:udev_rules_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/udev/scripts/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
UDEV patch from Dan Walsh.
2009-11-25 14:44:14 +00:00
/lib/udev/udev-acl -- gen_context(system_u:object_r:udev_exec_t,s0)
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_debian',`
/lib/udev/create_static_nodes -- gen_context(system_u:object_r:udev_exec_t,s0)
')
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/sbin/udev -- gen_context(system_u:object_r:udev_exec_t,s0)
trunk: patch from Mike Edenfield to add udevadm fc entry.
2008-11-11 15:03:06 +00:00
/sbin/udevadm -- gen_context(system_u:object_r:udev_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/sbin/udevd -- gen_context(system_u:object_r:udev_exec_t,s0)
/sbin/udevsend -- gen_context(system_u:object_r:udev_exec_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/sbin/udevstart -- gen_context(system_u:object_r:udev_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/sbin/wait_for_sysfs -- gen_context(system_u:object_r:udev_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_redhat',`
/sbin/start_udev -- gen_context(system_u:object_r:udev_exec_t,s0)
')
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/bin/udevinfo -- gen_context(system_u:object_r:udev_exec_t,s0)
trunk: 6 patches from dan.
2009-03-19 17:56:10 +00:00
New location for udevd binary Recent udev installs its main binary in /usr/lib/systemd (called systemd-udevd). Update file contexts to support this. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-07-25 11:41:19 +00:00
/usr/lib/systemd/systemd-udevd -- gen_context(system_u:object_r:udev_exec_t,s0)
trunk: 6 patches from dan.
2009-03-19 17:56:10 +00:00
/var/run/PackageKit/udev(/.*)? gen_context(system_u:object_r:udev_var_run_t,s0)
Udev fc for /var/run/udev from Martin Orr. This is intended to label /run/udev, but I am assuming that everyone will use file_contexts.subs(_dist)? to substitute /var/run for /run, since there are currently no other fcs for /run in refpolicy. The label is udev_tbl_t instead of udev_var_run_t, because /run/udev contains the data which used to be in /dev/.udev.
2011-07-18 17:36:27 +00:00
/var/run/udev(/.*)? gen_context(system_u:object_r:udev_tbl_t,s0)
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_debian',`
/var/run/xen-hotplug -d gen_context(system_u:object_r:udev_var_run_t,s0)
')
Reference in New Issue Copy Permalink