78276fc43b
Semodule stopped using this many years ago. The policy_module() macro will continue to support an optional second parameter as version. If it is not specified, a default value of 1 is set. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
55 lines
1021 B
Plaintext
55 lines
1021 B
Plaintext
policy_module(anaconda)
|
|
|
|
gen_require(`
|
|
class passwd all_passwd_perms;
|
|
')
|
|
|
|
########################################
|
|
#
|
|
# Declarations
|
|
#
|
|
|
|
type anaconda_t;
|
|
type anaconda_exec_t;
|
|
domain_type(anaconda_t)
|
|
domain_entry_file(anaconda_t, anaconda_exec_t)
|
|
domain_obj_id_change_exemption(anaconda_t)
|
|
role system_r types anaconda_t;
|
|
|
|
########################################
|
|
#
|
|
# Local policy
|
|
#
|
|
|
|
allow anaconda_t self:process execmem;
|
|
allow anaconda_t self:passwd { rootok passwd chfn chsh };
|
|
|
|
kernel_domtrans_to(anaconda_t, anaconda_exec_t)
|
|
|
|
init_domtrans_script(anaconda_t)
|
|
|
|
logging_send_syslog_msg(anaconda_t)
|
|
|
|
modutils_domtrans(anaconda_t)
|
|
|
|
seutil_domtrans_semanage(anaconda_t)
|
|
|
|
userdom_user_home_dir_filetrans_user_home_content(anaconda_t, { dir file lnk_file fifo_file sock_file })
|
|
|
|
optional_policy(`
|
|
rpm_domtrans(anaconda_t)
|
|
rpm_domtrans_script(anaconda_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
ssh_domtrans_keygen(anaconda_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
udev_domtrans(anaconda_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
unconfined_domain_noaudit(anaconda_t)
|
|
')
|