nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6e3c5476ca
selinux-refpolicy/policy/modules/system/ipsec.fc

61 lines
3.4 KiB
Plaintext
Raw Normal View History

IPSEC patch from Dan Walsh.
2009-11-24 19:09:10 +00:00
/etc/rc\.d/init\.d/ipsec -- gen_context(system_u:object_r:ipsec_initrc_exec_t,s0)
/etc/rc\.d/init\.d/racoon -- gen_context(system_u:object_r:ipsec_initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/ipsec\.secrets -- gen_context(system_u:object_r:ipsec_key_file_t,s0)
/etc/ipsec\.conf -- gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/racoon/psk\.txt -- gen_context(system_u:object_r:ipsec_key_file_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/racoon(/.*)? gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/racoon/certs(/.*)? gen_context(system_u:object_r:ipsec_key_file_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/ipsec\.d(/.*)? gen_context(system_u:object_r:ipsec_key_file_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/etc/strongswan\.conf -- gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/strongswan\.d(/.*)? gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/swanctl/(.*)? gen_context(system_u:object_r:ipsec_key_file_t,s0)
/etc/swanctl -d gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/swanctl/swanctl.conf -- gen_context(system_u:object_r:ipsec_conf_file_t,s0)
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
/sbin/setkey -- gen_context(system_u:object_r:setkey_exec_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/ipsec/_plutoload -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
/usr/lib/ipsec/_plutorun -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/ipsec/eroute -- gen_context(system_u:object_r:ipsec_exec_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/ipsec/klipsdebug -- gen_context(system_u:object_r:ipsec_exec_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/ipsec/pluto -- gen_context(system_u:object_r:ipsec_exec_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/ipsec/spi -- gen_context(system_u:object_r:ipsec_exec_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/libexec/ipsec/_copyright -- gen_context(system_u:object_r:ipsec_exec_t,s0)
trunk: 3 patches from dan.
2009-04-03 14:14:43 +00:00
/usr/libexec/ipsec/_plutoload -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
/usr/libexec/ipsec/_plutorun -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/libexec/ipsec/_updown -- gen_context(system_u:object_r:ipsec_exec_t,s0)
/usr/libexec/ipsec/charon -- gen_context(system_u:object_r:ipsec_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/libexec/ipsec/eroute -- gen_context(system_u:object_r:ipsec_exec_t,s0)
/usr/libexec/ipsec/klipsdebug -- gen_context(system_u:object_r:ipsec_exec_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/libexec/ipsec/lookip -- gen_context(system_u:object_r:ipsec_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/libexec/ipsec/pluto -- gen_context(system_u:object_r:ipsec_exec_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/libexec/ipsec/scepclient -- gen_context(system_u:object_r:ipsec_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/libexec/ipsec/spi -- gen_context(system_u:object_r:ipsec_exec_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/libexec/ipsec/starter -- gen_context(system_u:object_r:ipsec_supervisor_exec_t,s0)
/usr/libexec/ipsec/stroke -- gen_context(system_u:object_r:ipsec_exec_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/usr/libexec/nm-openswan-service -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
trunk: 3 patches from dan.
2009-04-03 14:14:43 +00:00
/usr/sbin/ipsec -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
/usr/sbin/racoon -- gen_context(system_u:object_r:racoon_exec_t,s0)
/usr/sbin/setkey -- gen_context(system_u:object_r:setkey_exec_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/usr/sbin/swanctl -- gen_context(system_u:object_r:ipsec_mgmt_exec_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
Add /var/lib/racoon as runtime directory for ipsec
2014-11-22 21:16:41 +00:00
/var/lib/racoon(/.*)? gen_context(system_u:object_r:ipsec_var_run_t,s0)
Pull in some changes from Fedora policy system layer.
2011-04-14 15:36:56 +00:00
/var/lock/subsys/ipsec -- gen_context(system_u:object_r:ipsec_mgmt_lock_t,s0)
Ipsec patch from Dan Walsh.
2010-03-17 17:52:07 +00:00
/var/log/pluto\.log -- gen_context(system_u:object_r:ipsec_log_t,s0)
more merging from 1.27.1-15
2005-10-14 17:55:40 +00:00
/var/racoon(/.*)? gen_context(system_u:object_r:ipsec_var_run_t,s0)
system/ipsec: Add policy for StrongSwan Adds an ipsec_supervisor_t domain for StrongSwan's starter. Thanks to Matthias Dahl for most of the work on this.
2015-10-11 10:37:56 +00:00
/var/run/charon\.(.*)? -- gen_context(system_u:object_r:ipsec_var_run_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/run/pluto(/.*)? gen_context(system_u:object_r:ipsec_var_run_t,s0)
Ipsec patch from Dan Walsh.
2010-03-17 17:52:07 +00:00
/var/run/racoon\.pid -- gen_context(system_u:object_r:ipsec_var_run_t,s0)
Reference in New Issue Copy Permalink