b55726771e
Now that we have file_contexts.subs_dist, translations that were put in the file context definition files can now be cleaned up. Differences from v1: - removes a few duplicate entries in the libraries.fc file, and - removes the contrib references Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
22 lines
1.1 KiB
Plaintext
22 lines
1.1 KiB
Plaintext
# Add programs here which should not be confined by SELinux
|
|
# e.g.:
|
|
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
|
|
/usr/bin/valgrind -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
|
|
/usr/lib/ia32el/ia32x_loader -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
/usr/lib/openoffice\.org.*/program/.+\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
|
|
/usr/local/RealPlayer/realplay\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
|
|
ifdef(`distro_debian',`
|
|
/usr/bin/gcj-dbtool-4\.1 -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
/usr/bin/gij-4\.1 -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
/usr/lib/openoffice/program/soffice\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
')
|
|
|
|
ifdef(`distro_gentoo',`
|
|
/usr/lib/openoffice/program/[^/]+\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
')
|