nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d7674a5406
selinux-refpolicy/policy/modules/kernel/corecommands.fc

433 lines
25 KiB
Plaintext
Raw Normal View History

initial commit
2005-05-10 19:51:00 +00:00
#
# /dev
#
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/dev/MAKEDEV -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
#
# /emul
#
ifdef(`distro_redhat',`
/emul/ia32-linux/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/emul/ia32-linux/sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/emul/ia32-linux/usr(/.*)?/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
/emul/ia32-linux/usr(/.*)?/Bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/emul/ia32-linux/usr(/.*)?/sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/emul/ia32-linux/usr/libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
/etc/acpi/actions(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: several fc updates from dan.
2007-12-12 15:55:21 +00:00
/etc/apcupsd/apccontrol -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/changeme -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/commfailure -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/commok -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/masterconnect -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/mastertimeout -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/offbattery -- gen_context(system_u:object_r:bin_t,s0)
/etc/apcupsd/onbattery -- gen_context(system_u:object_r:bin_t,s0)
patch from dan Fri, 17 Mar 2006 15:22:53 -0500
2006-03-23 19:19:38 +00:00
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/etc/avahi/.*\.action -- gen_context(system_u:object_r:bin_t,s0)
add cipe, bug 1519.
2006-03-24 19:22:19 +00:00
/etc/cipe/ip-up.* -- gen_context(system_u:object_r:bin_t,s0)
/etc/cipe/ip-down.* -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/etc/ConsoleKit/run-seat\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/ConsoleKit/run-session\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: 2 patches from dan.
2008-12-02 22:40:49 +00:00
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/etc/cron.daily(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/cron.hourly(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/cron.weekly(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/cron.monthly(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: 11 patches from dan.
2007-10-29 18:35:32 +00:00
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/etc/dhcp/dhclient\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/etc/hotplug/.*agent -- gen_context(system_u:object_r:bin_t,s0)
/etc/hotplug/.*rc -- gen_context(system_u:object_r:bin_t,s0)
/etc/hotplug/hotplug\.functions -- gen_context(system_u:object_r:bin_t,s0)
/etc/hotplug\.d/default/default.* gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/etc/kde/env(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/kde/shutdown(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: corecommands patch from dan.
2009-03-05 14:43:03 +00:00
/etc/mail/make -- gen_context(system_u:object_r:bin_t,s0)
Mcelog update from Guido Trentalancia.
2012-08-08 12:44:07 +00:00
/etc/mcelog/.*-error-trigger -- gen_context(system_u:object_r:bin_t,s0)
/etc/mcelog/.*\.local -- gen_context(system_u:object_r:bin_t,s0)
ifdef(`distro_redhat',`
label /etc/mcelog/mcelog.setup correctly (for RHEL) I am seeing the following denials when mcelog.service is attempting to execute /etc/mcelog/mcelog.setup (on RHEL 7). It should be labeled bin_t. Sep 21 02:45:50 localhost audit: type=AVC msg=audit(1505961383.859:28): avc: denied { execute } for pid=626 comm="(og.setup)" name="mcelog.setup" dev="dm-0" ino=718731 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mcelog_etc_t:s0 tclass=file Sep 21 02:45:50 localhost audit: type=AVC msg=audit(1505961383.859:28): avc: denied { read open } for pid=626 comm="(og.setup)" path="/etc/mcelog/mcelog.setup" dev="dm-0" ino=718731 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mcelog_etc_t:s0 tclass=file Sep 21 02:45:50 localhost audit: type=AVC msg=audit(1505961383.859:28): avc: denied { execute_no_trans } for pid=626 comm="(og.setup)" path="/etc/mcelog/mcelog.setup" dev="dm-0" ino=718731 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mcelog_etc_t:s0 tclass=file Sep 21 02:45:50 localhost audit: type=SYSCALL msg=audit(1505961383.859:28): arch=c000003e syscall=59 success=yes exit=0 a0=55a0ddd00260 a1=55a0ddcd1be0 a2=55a0ddd02e90 a3=3 items=3 ppid=1 pid=626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mcelog.setup" exe="/usr/bin/bash" subj=system_u:system_r:init_t:s0 key=(null) Sep 21 02:45:50 localhost audit: type=EXECVE msg=audit(1505961383.859:28): argc=2 a0="/bin/sh" a1="/etc/mcelog/mcelog.setup" Sep 21 02:45:50 localhost audit: type=PATH msg=audit(1505961383.859:28): item=0 name="/etc/mcelog/mcelog.setup" inode=718731 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:mcelog_etc_t:s0 objtype=NORMAL Sep 21 02:45:50 localhost audit: type=AVC msg=audit(1505961383.862:29): avc: denied { ioctl } for pid=626 comm="mcelog.setup" path="/etc/mcelog/mcelog.setup" dev="dm-0" ino=718731 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mcelog_etc_t:s0 tclass=file Sep 21 02:45:50 localhost audit: type=SYSCALL msg=audit(1505961383.862:29): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffec57f28f0 a3=7ffec57f2690 items=0 ppid=1 pid=626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mcelog.setup" exe="/usr/bin/bash" subj=system_u:system_r:init_t:s0 key=(null) Sep 21 02:45:50 localhost audit: type=AVC msg=audit(1505961383.867:30): avc: denied { getattr } for pid=626 comm="mcelog.setup" path="/etc/mcelog/mcelog.setup" dev="dm-0" ino=718731 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mcelog_etc_t:s0 tclass=file Sep 21 02:45:50 localhost audit: type=SYSCALL msg=audit(1505961383.867:30): arch=c000003e syscall=5 success=yes exit=0 a0=ff a1=7ffec57f2890 a2=7ffec57f2890 a3=7ffec57f25a0 items=0 ppid=1 pid=626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mcelog.setup" exe="/usr/bin/bash" subj=system_u:system_r:init_t:s0 key=(null) Signed-off-by: Dave Sugar <dsugar@tresys.com>
2017-09-21 05:02:15 +00:00
/etc/mcelog/mcelog.setup -- gen_context(system_u:object_r:bin_t,s0)
Pull in additional kernel layer Fedora policy changes.
2011-04-14 14:05:56 +00:00
/etc/mcelog/triggers(/.*)? gen_context(system_u:object_r:bin_t,s0)
Mcelog update from Guido Trentalancia.
2012-08-08 12:44:07 +00:00
')
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/etc/mgetty\+sendfax/new_fax -- gen_context(system_u:object_r:bin_t,s0)
trunk: corecommands patch from dan.
2009-03-05 14:43:03 +00:00
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/etc/netplug\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/etc/PackageKit/events(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/pki/tls/certs/make-dummy-cert -- gen_context(system_u:object_r:bin_t,s0)
/etc/pki/tls/misc(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/etc/pm/power\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
/etc/pm/sleep\.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/etc/ppp/ip-down\..* -- gen_context(system_u:object_r:bin_t,s0)
/etc/ppp/ip-up\..* -- gen_context(system_u:object_r:bin_t,s0)
/etc/ppp/ipv6-up\..* -- gen_context(system_u:object_r:bin_t,s0)
/etc/ppp/ipv6-down\..* -- gen_context(system_u:object_r:bin_t,s0)
add ppp
2005-10-14 20:00:07 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/etc/profile.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
/etc/racoon/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
patch from dan Fri, 17 Mar 2006 15:22:53 -0500
2006-03-23 19:19:38 +00:00
/etc/rc\.d/init\.d/functions -- gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
/etc/security/namespace.init -- gen_context(system_u:object_r:bin_t,s0)
patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.
2007-03-01 15:43:39 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/etc/sysconfig/crond -- gen_context(system_u:object_r:bin_t,s0)
/etc/sysconfig/init -- gen_context(system_u:object_r:bin_t,s0)
/etc/sysconfig/netconsole -- gen_context(system_u:object_r:bin_t,s0)
/etc/sysconfig/readonly-root -- gen_context(system_u:object_r:bin_t,s0)
trunk: corecommands patch from dan.
2009-03-05 14:43:03 +00:00
/etc/sysconfig/network-scripts/ifup.* gen_context(system_u:object_r:bin_t,s0)
/etc/sysconfig/network-scripts/ifdown.* gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/etc/sysconfig/network-scripts/net.* gen_context(system_u:object_r:bin_t,s0)
/etc/sysconfig/network-scripts/init.* gen_context(system_u:object_r:bin_t,s0)
missing matches
2005-11-10 16:53:50 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/etc/vmware-tools(/.*)? gen_context(system_u:object_r:bin_t,s0)
small fixes
2005-11-11 14:12:23 +00:00
/etc/X11/xdm/GiveConsole -- gen_context(system_u:object_r:bin_t,s0)
/etc/X11/xdm/TakeConsole -- gen_context(system_u:object_r:bin_t,s0)
/etc/X11/xdm/Xsetup_0 -- gen_context(system_u:object_r:bin_t,s0)
/etc/X11/xinit(/.*)? gen_context(system_u:object_r:bin_t,s0)
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
/etc/xen/qemu-ifup -- gen_context(system_u:object_r:bin_t,s0)
patch from dan Fri, 17 Mar 2006 15:22:53 -0500
2006-03-23 19:19:38 +00:00
/etc/xen/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
add mysql
2005-08-03 17:56:26 +00:00
ifdef(`distro_debian',`
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/etc/mysql/debian-start -- gen_context(system_u:object_r:bin_t,s0)
add mysql
2005-08-03 17:56:26 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /opt
#
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/opt/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/opt/(.*/)?libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/opt/(.*/)?sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
/opt/google/talkplugin(/.*)? gen_context(system_u:object_r:bin_t,s0)
/opt/gutenprint/cups/lib/filter(/.*)? gen_context(system_u:object_r:bin_t,s0)
/opt/OpenPrinting-Gutenprint/cups/lib/filter(/.*)? gen_context(system_u:object_r:bin_t,s0)
fixes for confined vmware sessions
2006-04-26 20:30:08 +00:00
ifdef(`distro_gentoo',`
testing fixes
2006-08-18 18:20:22 +00:00
/opt/RealPlayer/realplay(\.bin)? gen_context(system_u:object_r:bin_t,s0)
/opt/RealPlayer/postint(/.*)? gen_context(system_u:object_r:bin_t,s0)
patch to fix escaping of . in file contexts from james athey
2006-07-24 15:43:57 +00:00
/opt/vmware/workstation/lib/lib/wrapper-gtk24\.sh -- gen_context(system_u:object_r:bin_t,s0)
fixes for confined vmware sessions
2006-04-26 20:30:08 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /usr
#
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
2006-04-17 17:54:57 +00:00
/usr/(.*/)?Bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Add "/usr/(.*/)?bin(/.*)?" pattern back Commit 2e7553db639b ("Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.") removed from corecommands.fc: /usr/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0) Consequently files like /usr/x86_64-w64-mingw32/bin/objdump get labeled as usr_t: $ matchpathcon /usr/x86_64-w64-mingw32/bin/objdump /usr/x86_64-w64-mingw32/bin/objdump system_u:object_r:usr_t Make such files labeled as bin_t again.
2017-08-17 06:22:35 +00:00
/usr/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/d?ash -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/bin/bash -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/bin/bash2 -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
/usr/bin/fish -- gen_context(system_u:object_r:shell_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/insmod_ksymoops_clean -- gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/ksh.* -- gen_context(system_u:object_r:shell_exec_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/mkfs\.cramfs -- gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/mksh -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/bin/mountpoint -- gen_context(system_u:object_r:bin_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/nologin -- gen_context(system_u:object_r:shell_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/sash -- gen_context(system_u:object_r:shell_exec_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: two small updates from dan.
2008-06-18 13:15:25 +00:00
/usr/bin/scponly -- gen_context(system_u:object_r:shell_exec_t,s0)
Support systems with a single /usr/bin directory On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
2017-04-15 18:49:07 +00:00
/usr/bin/scponlyc -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/bin/smrsh -- gen_context(system_u:object_r:shell_exec_t,s0)
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
/usr/bin/tcsh -- gen_context(system_u:object_r:shell_exec_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/bin/yash -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/bin/zsh.* -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: two small updates from dan.
2008-06-18 13:15:25 +00:00
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/lib/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Misc fc changes from Russell Coker.
2017-04-06 20:59:47 +00:00
/usr/lib/postfix/configure-instance\.sh -- gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
/usr/(.*/)?sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/lib/(.*/)?sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Label some user session DBus services as bin_t
2016-03-19 09:30:42 +00:00
/usr/lib/at-spi2-core(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecmd: avahi-daemon executes /usr/lib/avahi/avahi-daemon-check-dns.sh Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2013-09-24 13:40:24 +00:00
/usr/lib/avahi/avahi-daemon-check-dns\.sh -- gen_context(system_u:object_r:bin_t,s0)
minor nspawn, dnsmasq, and mon patches Label some shell scripts from bridge-utils correctly. Maybe have ifdef distro_debian around this, not sure what upstream is doing. systemd_nspawn_t needs to manage the /etc/localtime symlink if you have a labeled chroot. Another dontaudit for mon_local_test_t to stop it spamming the logs. Support a .d directory for dnsmasq config files.
2017-09-17 15:07:41 +00:00
/usr/lib/bridge-utils/.*\.sh -- gen_context(system_u:object_r:bin_t,s0)
fixes for sorting
2005-11-09 18:29:03 +00:00
/usr/lib/ccache/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands: label dhcpcd hook scripts bin_t dhcpcd executes scripts in /usr/lib/dhcpcd/: avc: denied { execute_no_trans } for pid=608 comm="dhcpcd" path="/usr/lib/dhcpcd/dhcpcd-run-hooks" dev="vda1" ino=406981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:lib_t tclass=file permissive=1
2017-08-12 09:51:01 +00:00
/usr/lib/dhcpcd/dhcpcd-hooks(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/dhcpcd/dhcpcd-run-hooks -- gen_context(system_u:object_r:bin_t,s0)
Misc fc changes from Russell Coker.
2017-04-06 20:59:47 +00:00
/usr/lib/dovecot/.+ gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/usr/lib/fence(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/lib/pgsql/test/regress/.*\.sh -- gen_context(system_u:object_r:bin_t,s0)
fixes for sorting
2005-11-09 18:29:03 +00:00
/usr/lib/qt.*/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/usr/lib/wicd/monitor\.py -- gen_context(system_u:object_r:bin_t, s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/apt/methods.+ -- gen_context(system_u:object_r:bin_t,s0)
corecommands: add consolekit fcontexts
2017-05-07 17:44:58 +00:00
/usr/lib/ConsoleKit/.* -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/ConsoleKit/run-seat.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/ConsoleKit/run-session.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/ConsoleKit/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/courier(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/cups(/.*)? gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/cyrus/.* -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/cyrus-imapd/.* -- gen_context(system_u:object_r:bin_t,s0)
Label some user session DBus services as bin_t
2016-03-19 09:30:42 +00:00
/usr/lib/dconf/dconf-service -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/dpkg/.+ -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/emacsen-common/.* gen_context(system_u:object_r:bin_t,s0)
Label some user session DBus services as bin_t
2016-03-19 09:30:42 +00:00
/usr/lib/evince/evinced -- gen_context(system_u:object_r:bin_t,s0)
Label /usr/lib/getconf as bin_t On ArchLinux, glibc package installs /usr/bin/getconf as a hard link to a file in /usr/lib/getconf/. For example on a x86_64 machine: $ ls -i -l /usr/bin/getconf /usr/lib/getconf/XBS5_LP64_OFF64 5900355 -rwxr-xr-x. 4 root root 22880 Feb 28 04:53 /usr/bin/getconf 5900355 -rwxr-xr-x. 4 root root 22880 Feb 28 04:53 /usr/lib/getconf/XBS5_LP64_OFF64 Such configuration produces an instability when labeling the files with "restorecon -Rv /": restorecon reset /usr/bin/getconf context unconfined_u:object_r:lib_t:s0->unconfined_u:object_r:bin_t:s0 restorecon reset /usr/lib/getconf/XBS5_LP64_OFF64 context unconfined_u:object_r:bin_t:s0->unconfined_u:object_r:lib_t:s0 As /usr/lib/getconf directory only contains executable programs, this issue is fixed by labeling this directory and its content "bin_t".
2014-04-14 21:15:07 +00:00
/usr/lib/getconf(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/gimp/.*/plug-ins(/.*)? gen_context(system_u:object_r:bin_t,s0)
Properly label git-shell and other git commands for Debian
2014-03-03 22:59:24 +00:00
/usr/lib/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/lib/git-core(/.*) -- gen_context(system_u:object_r:bin_t,s0)
Label executables under /usr/lib/gnome-settings-daemon/ as bin_t On Debian, part of gnome-settings-daemon is installed in that directory
2013-01-14 13:29:04 +00:00
/usr/lib/gnome-settings-daemon/.* -- gen_context(system_u:object_r:bin_t,s0)
Do not label /usr/lib/gvfs/libgvfscommon.so as bin_t On Arch Linux, /usr/lib/gvfs directory contains both executable files (gvfsd, gvfs-udisks2-volume-monitor...) and libraries (libgvfscommon.so and libgvfsdaemon.so). As all executable files are prefixed with "gfvs", so use this to distinguish them with the libraries. This fixes the following AVC denials, reported from geoclue service using a library wrongly labelled bin_t: avc: denied { read } for pid=14872 comm="geoclue" name="libgvfscommon.so" dev="dm-0" ino=3152594 scontext=system_u:system_r:geoclue_t tcontext=system_u:object_r:bin_t tclass=file permissive=1 avc: denied { open } for pid=14872 comm="geoclue" path="/usr/lib/gvfs/libgvfscommon.so" dev="dm-0" ino=3152594 scontext=system_u:system_r:geoclue_t tcontext=system_u:object_r:bin_t tclass=file permissive=1 avc: denied { execute } for pid=14872 comm="geoclue" path="/usr/lib/gvfs/libgvfscommon.so" dev="dm-0" ino=3152594 scontext=system_u:system_r:geoclue_t tcontext=system_u:object_r:bin_t tclass=file permissive=1
2016-03-19 09:30:42 +00:00
/usr/lib/gvfs/gvfs.* -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/ipsec/.* -- gen_context(system_u:object_r:bin_t,s0)
Debian locations of gvfs and kde4 libexec binaries in /usr/lib
2012-10-15 21:31:42 +00:00
/usr/lib/kde4/libexec/.* -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/mailman/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/mailman/mail(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/mediawiki/math/texvc.* gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/misc/sftp-server -- gen_context(system_u:object_r:bin_t,s0)
tiny mon patch When you merged the mon patch you removed the ability for mon_t to execute lib_t files. The following patch re-enables the ability to execute alert scripts.
2017-02-14 09:22:14 +00:00
/usr/lib/mon/alert.d(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/nagios/plugins(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/netsaint/plugins(/.*)? gen_context(system_u:object_r:bin_t,s0)
Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/ On ArchLinux the directory name of Network Manager in /usr/lib is written in lowercase but not the files in /usr/bin, /var/lib, etc. While at it, remove a useless backslash before a minus character.
2014-08-23 11:35:45 +00:00
/usr/lib/NetworkManager/nm-.* -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/networkmanager/nm-.* -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/news/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/nspluginwrapper/np.* gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/lib/nut/.* -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/portage/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/pm-utils(/.*)? gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/lib/readahead(/.*)? gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/rpm/rpmd -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rpm/rpmk -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rpm/rpmq -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rpm/rpmv -- gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/lib/security/pam_krb5/pam_krb5_storetmp -- gen_context(system_u:object_r:bin_t,s0)
Misc fc changes from Russell Coker.
2017-04-06 20:59:47 +00:00
/usr/lib/selinux/hll/pp -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/sftp-server -- gen_context(system_u:object_r:bin_t,s0)
Label OpenSSH files correctly on Arch Linux On Arch Linux, OpenSSH installs these binary files in /usr/lib/ssh: * sftp-server (labeled with ssh_keysign_exec_t type in refpolicy) * ssh-askpass (symlink to x11-ssh-askpass) * ssh-keysign * ssh-pkcs11-helper * x11-ssh-askpass (from x11-ssh-askpass package) Label all these files but sftp-server as bin_t.
2015-12-20 15:28:49 +00:00
/usr/lib/ssh(/.*)? gen_context(system_u:object_r:bin_t,s0)
Label /usr/lib/sudo/sesh as shell_exec_t
2014-01-30 19:52:37 +00:00
/usr/lib/sudo/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
On Debian, systemd binaries are installed in / not /usr On Debian, systemd binaries are installed in / not /usr, add an equivalence for this.
2014-11-09 09:36:56 +00:00
/usr/lib/systemd/systemd.* -- gen_context(system_u:object_r:bin_t,s0)
Implement core systemd policy. Significant contributions from the Tresys CLIP team. Other changes from Laurent Bigonville.
2015-10-23 14:16:59 +00:00
/usr/lib/systemd/system-generators(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/systemd/user-generators(/.*)? gen_context(system_u:object_r:bin_t,s0)
Move tumblerd fc entry
2014-06-30 19:28:51 +00:00
/usr/lib/tumbler-1/tumblerd -- gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/lib/udev/[^/]* -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/udev/scsi_id -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/upstart(/.*)? gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/vte/gnome-pty-helper -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/xfce4/exo-1/exo-compose-mail-1 -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/xfce4/exo-1/exo-helper-1 -- gen_context(system_u:object_r:bin_t,s0)
xfce4-notifyd is an executable
2014-11-22 21:16:37 +00:00
/usr/lib/xfce4/notifyd/xfce4-notifyd -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/xfce4/panel/migrate -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/xfce4/panel/wrapper -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/xfce4/session/balou-export-theme -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/xfce4/session/balou-install-theme -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/xfce4/session/xfsm-shutdown-helper -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/xfce4/xfconf/xfconfd -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/xfce4/xfwm4/helper-dialog -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
Move bin_t fc from couchdb to corecommands.
2014-02-08 14:42:43 +00:00
/usr/lib/couchdb/erlang/lib/couch-[0-9.]+/priv/couchspawnkillable -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/debug/bin(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/debug/sbin(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/debug/usr/bin(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/debug/usr/sbin(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
Add some labels for SELinux tools path in Debian
2016-03-25 21:35:17 +00:00
/usr/lib/selinux/hll(/.*)? gen_context(system_u:object_r:bin_t,s0)
Simplify .fc in light of file_contexts.subs_dist Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-05-07 18:36:06 +00:00
/usr/lib/[^/]*thunderbird[^/]*/thunderbird -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/[^/]*thunderbird[^/]*/thunderbird-bin -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/[^/]*thunderbird[^/]*/open-browser\.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/[^/]*/run-mozilla\.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/[^/]*/mozilla-xremote-client -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/thunderbird.*/mozilla-xremote-client -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
/usr/libexec/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/libexec/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: two small updates from dan.
2008-06-18 13:15:25 +00:00
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/libexec/openssh/sftp-server -- gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
usrmerge FC fixes from Russell Coker.
2017-02-07 23:51:58 +00:00
/usr/local/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/local/sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: 2 patches from dan.
2008-12-02 22:40:49 +00:00
/usr/local/Brother(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/local/Printer(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/usr/local/linuxprinter/filters(/.*)? gen_context(system_u:object_r:bin_t,s0)
add ipsec
2005-07-14 18:15:47 +00:00
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
2016-12-27 16:06:54 +00:00
/usr/sbin/insmod_ksymoops_clean -- gen_context(system_u:object_r:bin_t,s0)
/usr/sbin/mkfs\.cramfs -- gen_context(system_u:object_r:bin_t,s0)
/usr/sbin/nologin -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: two small updates from dan.
2008-06-18 13:15:25 +00:00
/usr/sbin/scponlyc -- gen_context(system_u:object_r:shell_exec_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/sbin/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
trunk: two small updates from dan.
2008-06-18 13:15:25 +00:00
/usr/sbin/smrsh -- gen_context(system_u:object_r:shell_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
Misc fc changes from Russell Coker.
2017-04-06 20:59:47 +00:00
/usr/share/mdadm/checkarray -- gen_context(system_u:object_r:bin_t,s0)
usrmerge FC fixes from Russell Coker.
2017-02-07 23:51:58 +00:00
/usr/share/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
/usr/share/ajaxterm/ajaxterm.py.* -- gen_context(system_u:object_r:bin_t,s0)
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/usr/share/ajaxterm/qweb.py.* -- gen_context(system_u:object_r:bin_t,s0)
shell scripts in the apr build dir
2006-06-09 13:47:58 +00:00
/usr/share/apr-0/build/[^/]+\.sh -- gen_context(system_u:object_r:bin_t,s0)
another script in the apr build dir
2006-06-09 13:49:22 +00:00
/usr/share/apr-0/build/libtool -- gen_context(system_u:object_r:bin_t,s0)
Mark APR build scripts as bin_t I don't know why those are in /usr/share/build-1/ instead of /usr/share/apr-0/build/ here, but it doesn't appear to be Gentoo-specific.
2015-08-08 11:50:28 +00:00
/usr/share/build-1/[^/]+\.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/build-1/libtool -- gen_context(system_u:object_r:bin_t,s0)
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
/usr/share/dayplanner/dayplanner -- gen_context(system_u:object_r:bin_t,s0)
add apt and dpkg from erich schubert
2006-03-08 18:43:05 +00:00
/usr/share/debconf/.+ -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/usr/share/denyhosts/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/share/denyhosts/plugins(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands: label some binaries as bin_t
2017-01-06 14:15:41 +00:00
/usr/share/dput/execute-dput -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/usr/share/cluster/.*\.sh gen_context(system_u:object_r:bin_t,s0)
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/usr/share/cluster/ocf-shellfuncs -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/usr/share/cluster/svclib_nfslock -- gen_context(system_u:object_r:bin_t,s0)
Enable rcs2log location for all distributions Currently, the /usr/share/cvs/contrib/rcs2log is only labeled as bin_t for redhat distributions. Moving this to the general one as it is also in use on other distributions Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2014-05-29 17:24:48 +00:00
/usr/share/cvs/contrib/rcs2log -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/usr/share/e16/misc(/.*)? gen_context(system_u:object_r:bin_t,s0)
Label gedit plugins properly on Arch Linux
2016-03-19 09:30:42 +00:00
/usr/share/gedit/plugins/externaltools/tools(/.*)? gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/usr/share/gedit-2/plugins/externaltools/tools(/.*)? gen_context(system_u:object_r:bin_t,s0)
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/usr/share/gitolite/hooks/common/update -- gen_context(system_u:object_r:bin_t,s0)
corecommands patch from Dan Walsh: "Lots of bin_t files"
2010-10-22 20:19:46 +00:00
/usr/share/gitolite/hooks/gitolite-admin/post-update -- gen_context(system_u:object_r:bin_t,s0)
corecommands: Add fc escaping for previous patch.
2017-04-19 01:51:52 +00:00
/usr/share/gnome-sound-recorder/org\.gnome\.SoundRecorder -- gen_context(system_u:object_r:bin_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/share/gnucash/finance-quote-check -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/gnucash/finance-quote-helper -- gen_context(system_u:object_r:bin_t,s0)
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
/usr/share/hal/device-manager/hal-device-manager -- gen_context(system_u:object_r:bin_t,s0)
patch from dan.
2006-01-11 15:28:14 +00:00
/usr/share/hal/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands: label Arch Linux pacman's scripts as bin_t On Arch Linux, the package manager uses hooks which execute scripts in /usr/share/libalpm/scripts.
2017-09-06 20:44:17 +00:00
/usr/share/libalpm/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/mc/extfs/.* -- gen_context(system_u:object_r:bin_t,s0)
trunk: corecommands patch from dan.
2009-03-05 14:43:03 +00:00
/usr/share/Modules/init(/.*)? gen_context(system_u:object_r:bin_t,s0)
corecommands: Add fc escaping for previous patch.
2017-04-19 01:51:52 +00:00
/usr/share/org.gnome.Weather/org\.gnome\.Weather\.Application -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/org.gnome.Weather/org\.gnome\.Weather\.BackgroundService -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/printconf/util/print\.py -- gen_context(system_u:object_r:bin_t,s0)
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
/usr/share/PackageKit/pk-upgrade-distro\.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/PackageKit/helpers(/.*)? gen_context(system_u:object_r:bin_t,s0)
Misc fc changes from Russell Coker.
2017-04-06 20:59:47 +00:00
/usr/share/reportbug/handle_bugscript -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/usr/share/sandbox/sandboxX.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/sectool/.*\.py -- gen_context(system_u:object_r:bin_t,s0)
patch from dan Thu, 23 Feb 2006 14:26:05 -0500
2006-02-27 16:23:39 +00:00
/usr/share/selinux/devel/policygentool -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/usr/share/smolt/client(/.*)? gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/usr/share/shorewall/compiler\.pl -- gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
/usr/share/shorewall/configpath -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/shorewall-perl(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/share/shorewall-shell(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
/usr/share/shorewall-lite(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
/usr/share/shorewall6-lite(/.*)? gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/usr/share/spamassassin/sa-update\.cron gen_context(system_u:object_r:bin_t,s0)
Label system-config-printer applet properly on Arch Linux It is used by system-config-printer, as shown by these AVC denials: avc: denied { execute } for pid=1061 comm="system-config-p" name="applet.py" dev="dm-0" ino=9568316 scontext=sysadm_u:sysadm_r:sysadm_t tcontext=system_u:object_r:usr_t tclass=file permissive=1 avc: denied { execute_no_trans } for pid=1061 comm="system-config-p" path="/usr/share/system-config-printer/applet.py" dev="dm-0" ino=9568316 scontext=sysadm_u:sysadm_r:sysadm_t tcontext=system_u:object_r:usr_t tclass=file permissive=1
2016-03-19 09:30:42 +00:00
/usr/share/system-config-printer/applet\.py -- gen_context(system_u:object_r:bin_t,s0)
corecommands: label some binaries as bin_t
2017-01-06 14:15:41 +00:00
/usr/share/texlive/texmf-dist/scripts/checkcites/checkcites\.lua -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texlive/texmf-dist/scripts/checklistings/checklistings\.sh -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texlive/texmf-dist/scripts/fontools/autoinst -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texlive/texmf-dist/scripts/match_parens/match_parens -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texlive/texmf-dist/scripts/yplan/yplan -- gen_context(system_u:object_r:bin_t,s0)
Label TexLive scripts bin_t These scripts can be run by users.
2016-03-19 09:30:42 +00:00
/usr/share/texmf-dist/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/turboprint/lib(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2010-03-05 15:51:39 +00:00
/usr/share/vhostmd/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
login fixes and pieces of xserver
2006-01-19 21:04:33 +00:00
/usr/X11R6/lib(64)?/X11/xkb/xkbcomp -- gen_context(system_u:object_r:bin_t,s0)
fixes for sorting
2005-11-09 18:29:03 +00:00
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
ifdef(`distro_debian',`
Add Debian locations for GDM 3
2012-09-10 16:11:13 +00:00
/usr/lib/gdm3/.* -- gen_context(system_u:object_r:bin_t,s0)
Add Debian location for udisks helpers
2012-09-10 16:11:14 +00:00
/usr/lib/udisks/.* -- gen_context(system_u:object_r:bin_t,s0)
Further strict systemd fixes from Russell Coker.
2017-04-21 00:00:34 +00:00
/usr/share/bug/.* -- gen_context(system_u:object_r:bin_t,s0)
Debian file locations patch from Russell Coker.
2011-11-16 20:29:18 +00:00
')
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
ifdef(`distro_gentoo', `
/usr/.*-.*-linux-gnu/gcc-bin/.*(/.*)? gen_context(system_u:object_r:bin_t,s0)
add qmail
2006-04-05 15:32:38 +00:00
/usr/.*-.*-linux-gnu/binutils-bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
2017-02-04 20:19:35 +00:00
/usr/lib/rcscripts/addons(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rcscripts/sh(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rcscripts/net\.modules\.d/helpers\.d/dhclient-.* -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/rcscripts/net\.modules\.d/helpers\.d/udhcpc-.* -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
')
ifdef(`distro_redhat', `
trunk: 11 patches from dan.
2007-10-29 18:35:32 +00:00
/etc/gdm/XKeepsCrashing[^/]* -- gen_context(system_u:object_r:bin_t,s0)
/etc/gdm/[^/]+ -d gen_context(system_u:object_r:bin_t,s0)
/etc/gdm/[^/]+/.* gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/lib/.*/program(/.*)? gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/usr/lib/bluetooth(/.*)? -- gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
/usr/lib/vmware-tools/(s)?bin32(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/lib/vmware-tools/(s)?bin64(/.*)? gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/authconfig/authconfig-gtk\.py -- gen_context(system_u:object_r:bin_t,s0)
more of patch from dan Thu, 20 Apr 2006 14:06:03 -0400
2006-04-26 15:22:33 +00:00
/usr/share/authconfig/authconfig-tui\.py -- gen_context(system_u:object_r:bin_t,s0)
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
2007-10-05 18:00:55 +00:00
/usr/share/authconfig/authconfig\.py -- gen_context(system_u:object_r:bin_t,s0)
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
/usr/share/clamav/clamd-gen -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/clamav/freshclam-sleep -- gen_context(system_u:object_r:bin_t,s0)
trunk: corecommands patch from dan.
2009-03-05 14:43:03 +00:00
/usr/share/createrepo(/.*)? gen_context(system_u:object_r:bin_t,s0)
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
/usr/share/fedora-usermgmt/wrapper -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/hplip/[^/]* -- gen_context(system_u:object_r:bin_t,s0)
more of patch from dan Thu, 20 Apr 2006 14:06:03 -0400
2006-04-26 15:22:33 +00:00
/usr/share/hwbrowser/hwbrowser -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/pwlib/make/ptlib-config -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/pydict/pydict\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/rhn/rhn_applet/applet\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/rhn/rhn_applet/needed-packages\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/ssl/misc(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/share/switchdesk/switchdesk-gui\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-date/system-config-date\.py -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh.
2009-11-23 18:47:36 +00:00
/usr/share/system-config-selinux/polgen\.py -- gen_context(system_u:object_r:bin_t,s0)
5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes
2007-04-11 17:56:03 +00:00
/usr/share/system-config-selinux/system-config-selinux\.py -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/system-config-display/system-config-display -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-httpd/system-config-httpd -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-keyboard/system-config-keyboard -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-language/system-config-language -- gen_context(system_u:object_r:bin_t,s0)
patch to fix escaping of . in file contexts from james athey
2006-07-24 15:43:57 +00:00
/usr/share/system-config-lvm/system-config-lvm\.py -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/system-config-mouse/system-config-mouse -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-netboot/system-config-netboot\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-netboot/pxeos\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-netboot/pxeboot\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-network(/netconfig)?/[^/]+\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-network/neat-control\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-nfs/nfs-export\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-nfs/system-config-nfs\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-rootpassword/system-config-rootpassword -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-samba/system-config-samba\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-securitylevel/system-config-securitylevel\.py -- gen_context(system_u:object_r:bin_t,s0)
Corecommands patch from Dan Walsh. Lots of new places to stick bin_t files
2010-06-07 13:04:08 +00:00
/usr/share/system-config-services/gui\.py -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/system-config-services/serviceconf\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-services/system-config-services -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-soundcard/system-config-soundcard -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-users/system-config-users -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-logviewer/system-logviewer\.py -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texmf/web2c/mktexdir -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texmf/web2c/mktexnam -- gen_context(system_u:object_r:bin_t,s0)
/usr/share/texmf/web2c/mktexupd -- gen_context(system_u:object_r:bin_t,s0)
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/usr/share/texmf/texconfig/tcfmgr -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
')
ifdef(`distro_suse', `
/usr/lib/cron/run-crons -- gen_context(system_u:object_r:bin_t,s0)
/usr/lib/samba/classic/.* -- gen_context(system_u:object_r:bin_t,s0)
Whitespace fixes from fc.subs changes.
2012-05-10 14:33:54 +00:00
/usr/lib/ssh/.* -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/share/apache2/[^/]* -- gen_context(system_u:object_r:bin_t,s0)
add most of apache
2005-09-29 20:59:00 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/var/mailman/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/var/ftp/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
more merging from 1.27.1-15
2005-10-14 17:55:40 +00:00
Additional rearrangement in corecommands, along with module version bump.
2010-10-27 18:09:00 +00:00
/var/lib/asterisk/agi-bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
chkrootkit: add interfaces and sysadm permit v2: - add bin_t fc to corecommands
2017-06-09 13:37:16 +00:00
/usr/lib/chkrootkit/.* -- gen_context(system_u:object_r:bin_t,s0)
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
/usr/lib/yp/.+ -- gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
/var/qmail/bin -d gen_context(system_u:object_r:bin_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/var/qmail/bin(/.*)? gen_context(system_u:object_r:bin_t,s0)
/var/qmail/rc -- gen_context(system_u:object_r:bin_t,s0)
add qmail
2006-04-05 15:32:38 +00:00
add stuff from distros.fc
2005-11-03 18:08:36 +00:00
ifdef(`distro_suse',`
/var/lib/samba/bin/.+ gen_context(system_u:object_r:bin_t,s0)
')
Reference in New Issue Copy Permalink