nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system/init.fc

77 lines
2.6 KiB
Plaintext
Raw Normal View History

initial commit
2005-05-10 19:51:00 +00:00
#
# /etc
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/init\.d/.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/rc -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/rc\.d/rc\.[^/]+ -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/rc\.d/init\.d/.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
Init patch from Dan Walsh.
2010-03-18 14:19:49 +00:00
/etc/sysconfig/network-scripts/ifup-ipsec -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/etc/X11/prefdm -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
ifdef(`distro_gentoo',`
/etc/vmware/init\.d/vmware -- gen_context(system_u:object_r:initrc_exec_t,s0)
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
2007-10-05 18:00:55 +00:00
/etc/x11/startDM\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
more strict testing fixes
2006-08-23 19:36:04 +00:00
')
initial commit
2005-05-10 19:51:00 +00:00
#
# /dev
#
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/dev/initctl -p gen_context(system_u:object_r:initctl_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /sbin
#
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
2006-02-16 19:32:13 +00:00
/sbin/init(ng)? -- gen_context(system_u:object_r:init_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_gentoo', `
add dcc, bug 1522
2006-05-04 17:44:26 +00:00
/sbin/rc -- gen_context(system_u:object_r:initrc_exec_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/sbin/runscript -- gen_context(system_u:object_r:initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/sbin/runscript\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.
2006-01-16 18:30:14 +00:00
/sbin/runsvcscript\.sh -- gen_context(system_u:object_r:initrc_exec_t,s0)
/sbin/svcinit -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')
#
# /usr
#
trunk: add sepostgresql policy from kaigai kohei.
2008-06-10 15:33:18 +00:00
/usr/bin/sepg_ctl -- gen_context(system_u:object_r:initrc_exec_t,s0)
add dcc, bug 1522
2006-05-04 17:44:26 +00:00
/usr/libexec/dcc/start-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/libexec/dcc/stop-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/sbin/apachectl -- gen_context(system_u:object_r:initrc_exec_t,s0)
/usr/sbin/open_init_pty -- gen_context(system_u:object_r:initrc_exec_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
#
# /var
#
ifdef(`distro_gentoo', `
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/lib/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.
2006-01-16 18:30:14 +00:00
/var/run/svscan\.pid -- gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/run/utmp -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/runlevel\.dir gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/random-seed -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/setmixer_flag -- gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
ifdef(`distro_suse', `
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/var/run/bootsplashctl -p gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/keymap -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/numlock-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/setleds-on -- gen_context(system_u:object_r:initrc_var_run_t,s0)
/var/run/sysconfig(/.*)? gen_context(system_u:object_r:initrc_var_run_t,s0)
initial commit
2005-05-10 19:51:00 +00:00
')
Fix OpenRC status dir labeling for Gentoo Current policy sets /lib(32|64)?/rc/init.d to lib_t. This causes problems for DHCP among other things, as the initrc domain does not have permissions to perform some operations. Changing to initrc_state_t (the labeling used for /var/lib/init.d by the older baselayout-1) resolves some of these issues. Signed-off-by: Chris Richards <gizmo@giz-works.com>
2010-11-28 08:44:05 +00:00
#
# /lib
#
ifdef(`distro_gentoo', `
/lib/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/lib32/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
/lib64/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
')