selinux-refpolicy/strict/file_contexts/distros.fc
2005-04-29 17:45:15 +00:00

154 lines
9.3 KiB
Plaintext

ifdef(`distro_redhat', `
/usr/share/system-config-network(/netconfig)?/[^/]+\.py -- system_u:object_r:bin_t
/etc/sysconfig/networking/profiles/.*/resolv\.conf -- system_u:object_r:net_conf_t
/etc/sysconfig/network-scripts/.*resolv\.conf -- system_u:object_r:net_conf_t
/usr/share/rhn/rhn_applet/applet\.py -- system_u:object_r:bin_t
/usr/share/rhn/rhn_applet/eggtrayiconmodule\.so -- system_u:object_r:shlib_t
/usr/share/rhn/rhn_applet/needed-packages\.py -- system_u:object_r:bin_t
/usr/share/authconfig/authconfig-gtk\.py -- system_u:object_r:bin_t
/usr/share/hwbrowser/hwbrowser -- system_u:object_r:bin_t
/usr/share/system-config-httpd/system-config-httpd -- system_u:object_r:bin_t
/usr/share/system-config-services/system-config-services -- system_u:object_r:bin_t
/usr/share/system-logviewer/system-logviewer\.py -- system_u:object_r:bin_t
/usr/share/system-config-lvm/system-config-lvm.py -- system_u:object_r:bin_t
/usr/share/system-config-date/system-config-date\.py -- system_u:object_r:bin_t
/usr/share/system-config-display/system-config-display -- system_u:object_r:bin_t
/usr/share/system-config-keyboard/system-config-keyboard -- system_u:object_r:bin_t
/usr/share/system-config-language/system-config-language -- system_u:object_r:bin_t
/usr/share/system-config-mouse/system-config-mouse -- system_u:object_r:bin_t
/usr/share/system-config-netboot/system-config-netboot\.py -- system_u:object_r:bin_t
/usr/share/system-config-netboot/pxeos\.py -- system_u:object_r:bin_t
/usr/share/system-config-netboot/pxeboot\.py -- system_u:object_r:bin_t
/usr/share/system-config-nfs/system-config-nfs\.py -- system_u:object_r:bin_t
/usr/share/system-config-rootpassword/system-config-rootpassword -- system_u:object_r:bin_t
/usr/share/system-config-samba/system-config-samba\.py -- system_u:object_r:bin_t
/usr/share/system-config-securitylevel/system-config-securitylevel\.py -- system_u:object_r:bin_t
/usr/share/system-config-services/serviceconf\.py -- system_u:object_r:bin_t
/usr/share/system-config-soundcard/system-config-soundcard -- system_u:object_r:bin_t
/usr/share/system-config-users/system-config-users -- system_u:object_r:bin_t
/usr/share/switchdesk/switchdesk-gui\.py -- system_u:object_r:bin_t
/usr/share/system-config-network/neat-control\.py -- system_u:object_r:bin_t
/usr/share/system-config-nfs/nfs-export\.py -- system_u:object_r:bin_t
/usr/share/pydict/pydict\.py -- system_u:object_r:bin_t
/usr/share/cvs/contrib/rcs2log -- system_u:object_r:bin_t
/usr/share/pwlib/make/ptlib-config -- system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexdir -- system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexnam -- system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexupd -- system_u:object_r:bin_t
/usr/share/ssl/certs(/.*)? system_u:object_r:cert_t
/usr/share/ssl/private(/.*)? system_u:object_r:cert_t
/usr/share/ssl/misc(/.*)? system_u:object_r:bin_t
#
# /emul/ia32-linux/usr
#
/emul(/.*)? system_u:object_r:usr_t
/emul/ia32-linux/usr(/.*)?/lib(/.*)? system_u:object_r:lib_t
/emul/ia32-linux/usr(/.*)?/lib/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.jar -- system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.jsa -- system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/lib(/.*)?/ld-[^/]*\.so(\.[^/]*)* system_u:object_r:ld_so_t
/emul/ia32-linux/usr(/.*)?/bin(/.*)? system_u:object_r:bin_t
/emul/ia32-linux/usr(/.*)?/Bin(/.*)? system_u:object_r:bin_t
/emul/ia32-linux/usr(/.*)?/sbin(/.*)? system_u:object_r:sbin_t
/emul/ia32-linux/usr/libexec(/.*)? system_u:object_r:bin_t
# /emul/ia32-linux/lib
/emul/ia32-linux/lib(/.*)? system_u:object_r:lib_t
/emul/ia32-linux/lib/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
/emul/ia32-linux/lib(/.*)?/ld-[^/]*\.so(\.[^/]*)* -- system_u:object_r:ld_so_t
# /emul/ia32-linux/bin
/emul/ia32-linux/bin(/.*)? system_u:object_r:bin_t
# /emul/ia32-linux/sbin
/emul/ia32-linux/sbin(/.*)? system_u:object_r:sbin_t
ifdef(`dbusd.te', `', `
/var/run/dbus(/.*)? system_u:object_r:system_dbusd_var_run_t
')
# The following are libraries with text relocations in need of execmod permissions
# Some of them should be fixed and removed from this list
# Fedora Core packages: gstreamer-plugins, compat-libstdc++, Glide3, libdv
# HelixPlayer, SDL, xorg-x11, xorg-x11-libs, Hermes, valgrind, openoffice.org-libs
/usr/lib/gstreamer-.*/libgstffmpeg\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/gstreamer-.*/libgsthermescolorspace\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/gstreamer-.*/libgstmms\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libstdc\+\+\.so\.2\.7\.2\.8 -- system_u:object_r:texrel_shlib_t
/usr/lib/libg\+\+\.so\.2\.7\.2\.8 -- system_u:object_r:texrel_shlib_t
/usr/lib/libglide3\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/libdv\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/oggfformat\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/theorarend\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/vorbisrend\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/helix/codecs/colorcvt\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/helix/codecs/cvt1\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libSDL-.*\.so.* -- system_u:object_r:texrel_shlib_t
/usr/X11R6/lib/modules/dri/.*\.so -- system_u:object_r:texrel_shlib_t
/usr/X11R6/lib/libOSMesa\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/libHermes\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/libpthread\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgpreload_addrcheck\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgpreload_memcheck\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_addrcheck\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_cachegrind\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_callgrind\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_corecheck\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_helgrind\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_lackey\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_massif\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_memcheck\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vgskin_none\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ooo-.*/program/libicudata\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/ooo-.*/program/libsts645li\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ooo-.*/program/libvclplug_gen645li\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ooo-.*/program/libwrp645li\.so -- system_u:object_r:texrel_shlib_t
# Fedora Extras packages: ladspa, imlib2, ocaml
/usr/lib/ladspa/analogue_osc_1416\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/bandpass_a_iir_1893\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/bandpass_iir_1892\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/butterworth_1902\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/fm_osc_1415\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/gsm_1215\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/gverb_1216\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/hermes_filter_1200\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/highpass_iir_1890\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/lowpass_iir_1891\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/notch_iir_1894\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/pitch_scale_1193\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/pitch_scale_1194\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc1_1425\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc2_1426\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc3_1427\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc4_1882\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/se4_1883\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libImlib2\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/ocaml/stublibs/dllnums\.so -- system_u:object_r:texrel_shlib_t
# Livna.org packages: xmms-mp3, ffmpeg, xvidcore, xine-lib, gsm, lame
/usr/lib/xmms/Input/libmpg123\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libpostproc\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/libavformat-.*\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libavcodec-.*\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libxvidcore\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/xine/plugins/.*\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/libgsm\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/libmp3lame\.so.* -- system_u:object_r:texrel_shlib_t
# Flash plugin, Macromedia
HOME_DIR/.*/plugins/libflashplayer\.so.* -- system_u:object_r:texrel_shlib_t
/usr/lib/.*/plugins/libflashplayer\.so.* -- system_u:object_r:texrel_shlib_t
# Jai, Sun Microsystems (Jpackage SPRM)
/usr/lib/libmlib_jai\.so -- system_u:object_r:texrel_shlib_t
')
ifdef(`distro_suse', `
/var/lib/samba/bin/.+ system_u:object_r:bin_t
/var/lib/samba/bin/.*\.so(\.[^/]*)* -l system_u:object_r:lib_t
/usr/lib/samba/classic/.* -- system_u:object_r:bin_t
/usr/lib/samba/classic/[^/]*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
/success -- system_u:object_r:etc_runtime_t
/etc/defkeymap\.map -- system_u:object_r:etc_runtime_t
')