nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add all types for this module

This commit is contained in:
Chris PeBenito 2005-04-19 20:45:24 +00:00
parent 4ddc1abd78
commit 3ba13bbf03
1 changed files with 46 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
refpolicy/policy/modules/system/authlogin.te
View File

@ -1,5 +1,51 @@
########################################
#
# Declarations
#
type chkpwd_exec_t;
domain_make_entrypoint_file(system_chkpwd_t,chkpwd_exec_t)
type faillog_t;
logging_make_log_file(faillog_t)
type lastlog_t; type lastlog_t;
logging_make_log_file(lastlog_t) logging_make_log_file(lastlog_t)
type login_exec_t;
files_make_file(login_exec_t)
type pam_t;
domain_make_domain(pam_t)
type pam_tmp_t;
files_make_file(pam_tmp_t)
type pam_var_console_t;
files_make_file(pam_var_console_t)
type pam_var_run_t;
files_make_file(pam_var_run_t)
type shadow_t;
files_make_file(shadow_t)
attribute can_read_shadow_passwords;
attribute can_write_shadow_passwords;
neverallow ~can_read_shadow_passwords shadow_t:file read;
neverallow ~can_write_shadow_passwords shadow_t:file write;
type utempter_t;
domain_make_domain(utempter_t)
type utempter_exec_t;
domain_make_entrypoint_file(utempter_t,utempter_exec_t)
type wtmp_t; type wtmp_t;
logging_make_log_file(wtmp_t) logging_make_log_file(wtmp_t)
########################################
#
# Local policy
#
authlogin_per_userdomain_template(system)
#dontaudit system_chkpwd_t { user_tty_type tty_device_t }:chr_file rw_file_perms;
#dontaudit system_chkpwd_t privfd:fd use;