2da36b7d71
This won't match subdirectories of /usr/lib, but that shouldn't be a problem, since we have "allow domain lib_t ..." anyway. We can't match on "/usr/(.*/)?man(/.*)?", since that'd result in a few false positives; in particular, the files /usr/share/xmlto/format/docbook/man /usr/share/bash-completion/completions/man |
||
---|---|---|
.. | ||
flask | ||
modules | ||
support | ||
constraints | ||
context_defaults | ||
global_booleans | ||
global_tunables | ||
mcs | ||
mls | ||
policy_capabilities | ||
users |