selinux-refpolicy/policy/modules/system/modutils.fc
cgzones 7d376d7e4d transition file contexts to /run
Remove file context aliases and update file context paths to use the /run filesystem path.
Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321
Lock files are still seated at /var/lock
2016-12-17 18:32:39 +01:00

27 lines
1.2 KiB
Plaintext

/bin/kmod -- gen_context(system_u:object_r:kmod_exec_t,s0)
/etc/modules\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.conf.* -- gen_context(system_u:object_r:modules_conf_t,s0)
/etc/modprobe\.d(/.*)? gen_context(system_u:object_r:modules_conf_t,s0)
ifdef(`distro_gentoo',`
# gentoo init scripts still manage this file
# even if devfs is off
/etc/modprobe.devfs.* -- gen_context(system_u:object_r:modules_conf_t,s0)
')
/lib/modules/[^/]+/modules\..+ -- gen_context(system_u:object_r:modules_dep_t,s0)
/lib/modules/modprobe\.conf -- gen_context(system_u:object_r:modules_conf_t,s0)
/sbin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/generate-modprobe\.conf -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/insmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/modprobe.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/modules-update -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/rmmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)
/sbin/update-modules -- gen_context(system_u:object_r:kmod_exec_t,s0)
/usr/bin/kmod -- gen_context(system_u:object_r:kmod_exec_t,s0)
/run/tmpfiles.d(/.*)? gen_context(system_u:object_r:kmod_var_run_t,s0)