selinux-refpolicy/policy/modules/system/modutils.fc
Christian Göttsche 09ed84b632 files/modutils: unify modules_object_t usage into files module
modutils.te:         50: (W): No explicit declaration for modules_object_t from module files.  You should access it via interface call or use a require block. (W-001)
modutils.te:         51: (W): No explicit declaration for modules_object_t from module files.  You should access it via interface call or use a require block. (W-001)
modutils.te:         52: (W): No explicit declaration for modules_object_t from module files.  You should access it via interface call or use a require block. (W-001)
modutils.te:         53: (W): No explicit declaration for modules_object_t from module files.  You should access it via interface call or use a require block. (W-001)
modutils.if:         15: (W): Definition of declared type modules_object_t not found in own module, but in module files (W-011)
modutils.if:         52: (W): Definition of declared type modules_object_t not found in own module, but in module files (W-011)
modutils.fc:         24: (S): Type modules_object_t is declared in module files, but used in file context here. (S-002)

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
2020-08-13 21:23:43 +02:00

34 lines
1.7 KiB
Plaintext

/etc/modules\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.d(/.*)? gen_context(system_u:object_r:modules_conf_t,s0)
ifdef(`distro_gentoo',`
# gentoo init scripts still manage this file
# even if devfs is off
/etc/modprobe\.devfs.* -- gen_context(system_u:object_r:modules_conf_t,s0)
')
ifdef(`init_systemd',`
/run/tmpfiles\.d/kmod\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
')
/usr/bin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/kmod -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/lib/modules/[^/]+/modules\..+ -- gen_context(system_u:object_r:modules_dep_t,s0)
/usr/lib/modules/modprobe\.conf -- gen_context(system_u:object_r:modules_conf_t,s0)
/usr/sbin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/sbin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)