Nicolas Iooss 4bf3dfaeb2 Allow kdevtmpfs to unlink fixed disk devices ... When a device gets removed, for example with "cryptsetup close", kdevtmpfs (a kernel thread) removes its entry from devtmpfs filesystem: avc: denied { unlink } for pid=48 comm="kdevtmpfs" name="dm-4" dev="devtmpfs" ino=144111 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file Allow this access on systems using systemd.		2016-03-19 11:12:28 +01:00
..
corecommands.fc	Merge branch 'systemd-1' of git://github.com/bigon/refpolicy into bigon-systemd-1	2016-01-06 09:13:47 -05:00
corecommands.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
corecommands.te	Module version bump for syslog and systemd changes from Laurent Bigonville	2016-01-06 09:22:11 -05:00
corenetwork.fc	Start pulling in kernel layer pieces from Fedora.	2011-03-29 10:33:43 -04:00
corenetwork.if.in	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
corenetwork.if.m4	Fix typos in comments from corenetwork module	2016-01-19 00:17:05 +01:00
corenetwork.te.in	Module version bump for patches from Nicolas Iooss and Grant Ridder.	2016-02-02 09:35:30 -05:00
corenetwork.te.m4	Fix corenetwork port declaration to choose either reserved or unreserved.	2011-10-04 15:31:08 -04:00
devices.fc	adds vfio device support to base policy	2015-09-15 08:17:31 -04:00
devices.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
devices.te	Bump module versions for release.	2015-12-08 09:53:02 -05:00
domain.fc	remove extra level of directory	2006-07-12 20:32:27 +00:00
domain.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
domain.te	Add neverallow for mac_override capability. It is not used by SELinux.	2016-01-06 09:09:36 -05:00
files.fc	Label (/var)?/tmp/systemd-private-.../tmp like /tmp	2014-08-26 08:22:53 -04:00
files.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
files.te	Bump module versions for release.	2015-12-08 09:53:02 -05:00
filesystem.fc	filesystem: label cgroup symlinks	2014-04-21 09:32:30 -04:00
filesystem.if	Add interface to allow reading files in efivarfs - contains Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables)	2016-02-03 13:33:43 +01:00
filesystem.te	Module version bump for efivarfs patches from Dan Walsh, Vit Mojzis, and Laurent Bigonville	2016-02-03 08:49:39 -05:00
kernel.fc	Add fc for /sys/kernel/debug as debugfs_t	2015-05-06 09:49:40 -04:00
kernel.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
kernel.te	Allow kdevtmpfs to unlink fixed disk devices	2016-03-19 11:12:28 +01:00
mcs.fc	remove extra level of directory	2006-07-12 20:32:27 +00:00
mcs.if	Move mcs_constrained() impementation.	2012-11-28 16:26:05 -05:00
mcs.te	Bump module versions for release.	2013-04-24 16:14:52 -04:00
metadata.xml	remove extra level of directory	2006-07-12 20:32:27 +00:00
mls.fc	remove extra level of directory	2006-07-12 20:32:27 +00:00
mls.if	trunk: whitespace fixes	2009-06-26 14:40:13 +00:00
mls.te	Whitespace change: drop unnecessary blank line at the start of .te files.	2010-06-10 08:16:35 -04:00
selinux.fc	remove extra level of directory	2006-07-12 20:32:27 +00:00
selinux.if	Revise selinux module interfaces for perms protected by neverallows.	2015-11-04 15:10:29 -05:00
selinux.te	Bump module versions for release.	2015-12-08 09:53:02 -05:00
storage.fc	File contexts for zram	2014-06-25 10:34:45 -04:00
storage.if	Fix interface descriptions when duplicate ones are found	2016-01-19 00:17:34 +01:00
storage.te	Bump module versions for release.	2014-12-03 13:37:38 -05:00
terminal.fc	Initial virtio console device	2013-09-26 10:27:29 -04:00
terminal.if	Implement core systemd policy.	2015-10-23 10:16:59 -04:00
terminal.te	Bump module versions for release.	2015-12-08 09:53:02 -05:00
ubac.fc	trunk: add missing ubac module.	2008-11-05 16:11:27 +00:00
ubac.if	Improve the documentation of ubac_constrained().	2010-03-02 11:28:44 -05:00
ubac.te	Whitespace change: drop unnecessary blank line at the start of .te files.	2010-06-10 08:16:35 -04:00