selinux-policy/refpolicy/policy/modules/system/unconfined.te

118 lines
2.4 KiB
Plaintext
Raw Normal View History

2005-07-05 20:59:51 +00:00
policy_module(unconfined,1.0)
########################################
#
# Declarations
#
# real declaration moved to mls until
# range_transition works in loadable modules
gen_require(`
type unconfined_t;
')
2005-07-05 20:59:51 +00:00
type unconfined_exec_t;
init_system_domain(unconfined_t,unconfined_exec_t)
role system_r types unconfined_t;
########################################
#
# Local policy
#
2005-07-06 20:28:29 +00:00
unconfined_domain_template(unconfined_t)
2005-07-08 20:44:57 +00:00
2005-07-05 20:59:51 +00:00
logging_send_syslog_msg(unconfined_t)
2005-07-06 20:28:29 +00:00
ifdef(`targeted_policy',`
allow unconfined_t self:system syslog_read;
# Define some type aliases to help with compatibility with
# macros and domains from the "strict" policy.
2005-10-21 17:55:15 +00:00
typealias unconfined_t alias { secadm_t sysadm_t };
2005-07-06 20:28:29 +00:00
2005-07-08 20:44:57 +00:00
init_domtrans_script(unconfined_t)
libs_domtrans_ldconfig(unconfined_t)
logging_domtrans_auditctl(unconfined_t)
seutil_domtrans_restorecon(unconfined_t)
2005-07-06 20:28:29 +00:00
userdom_unconfined(unconfined_t)
2005-10-25 19:03:15 +00:00
userdom_priveleged_home_dir_manager(unconfined_t)
optional_policy(`amanda.te',`
amanda_domtrans_recover(unconfined_t)
')
2005-10-31 22:19:16 +00:00
optional_policy(`apache.te',`
apache_domtrans_helper(unconfined_t)
')
2005-10-27 15:16:42 +00:00
optional_policy(`bind.te',`
bind_domtrans_ndc(unconfined_t)
')
optional_policy(`bluetooth.te',`
bluetooth_domtrans_helper(unconfined_t)
')
optional_policy(`dmidecode.te',`
dmidecode_domtrans(unconfined_t)
')
optional_policy(`firstboot.te',`
firstboot_domtrans(unconfined_t)
2005-10-26 16:00:13 +00:00
')
optional_policy(`lpd.te',`
lpd_domtrans_checkpc(unconfined_t)
')
2005-10-25 19:03:15 +00:00
optional_policy(`modutils.te',`
modutils_domtrans_depmod(unconfined_t)
modutils_domtrans_insmod(unconfined_t)
modutils_domtrans_update_mods(unconfined_t)
')
2005-07-06 20:28:29 +00:00
2005-10-27 15:16:42 +00:00
optional_policy(`netutils.te',`
netutils_domtrans(unconfined_t)
netutils_domtrans_ping(unconfined_t)
netutils_domtrans_traceroute(unconfined_t)
')
optional_policy(`portmap.te',`
portmap_domtrans_helper(unconfined_t)
')
2005-10-25 00:00:50 +00:00
optional_policy(`postfix.te',`
postfix_domtrans_map(unconfined_t)
')
2005-10-26 13:51:33 +00:00
optional_policy(`rpm.te',`
rpm_domtrans(unconfined_t)
')
2005-10-24 21:33:46 +00:00
optional_policy(`samba.te',`
samba_domtrans_net(unconfined_t)
samba_domtrans_winbind_helper(unconfined_t)
2005-10-24 21:33:46 +00:00
')
2005-10-24 12:38:45 +00:00
optional_policy(`su.te',`
su_per_userdomain_template(sysadm,unconfined_t,system_r)
')
2005-10-27 14:52:37 +00:00
optional_policy(`webalizer.te',`
webalizer_domtrans(unconfined_t)
')
2005-07-06 20:28:29 +00:00
ifdef(`TODO',`
ifdef(`use_mcs',`
rw_dir_create_file(sysadm_su_t, home_dir_type)
')
2005-07-06 20:28:29 +00:00
') dnl end TODO
2005-10-24 22:08:13 +00:00
typeattribute unconfined_t direct_run_init;
2005-07-06 20:28:29 +00:00
')