69c742f11b
On systems such as Arch Linux, all programs which are usually located in /bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the other locations are symbolic links to this directory. With such a configuration, the file contexts which define types for files in /bin, /sbin and /usr/sbin need to be duplicated to provide definitions for /usr/bin/... As the "/bin vs. /usr/bin" part of the needed definitions has already been done with the "usr merge" patches, the next step consists in duplicating file contexts for /usr/sbin. This is what this patch does for all modules which are not in contrib. This is the second iteration of an idea I have previously posted on http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
35 lines
1.8 KiB
Plaintext
35 lines
1.8 KiB
Plaintext
/etc/modules\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
|
|
/etc/modprobe\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
|
|
/etc/modprobe\.d(/.*)? gen_context(system_u:object_r:modules_conf_t,s0)
|
|
|
|
ifdef(`distro_gentoo',`
|
|
# gentoo init scripts still manage this file
|
|
# even if devfs is off
|
|
/etc/modprobe.devfs.* -- gen_context(system_u:object_r:modules_conf_t,s0)
|
|
')
|
|
|
|
ifdef(`init_systemd',`
|
|
/run/tmpfiles\.d/kmod\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
|
|
')
|
|
|
|
/usr/bin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/kmod -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/bin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
|
|
/usr/lib/modules(/.*)? gen_context(system_u:object_r:modules_object_t,s0)
|
|
/usr/lib/modules/[^/]+/modules\..+ -- gen_context(system_u:object_r:modules_dep_t,s0)
|
|
/usr/lib/modules/modprobe\.conf -- gen_context(system_u:object_r:modules_conf_t,s0)
|
|
|
|
/usr/sbin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
|
|
/usr/sbin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)
|