selinux-policy/policy/modules/kernel/files.fc


#
# /
#
/.*				gen_context(system_u:object_r:default_t,s0)
/			-d	gen_context(system_u:object_r:root_t,s0)
/\.journal			<<none>>
/initrd\.img.*		-l	gen_context(system_u:object_r:boot_t,s0)
/vmlinuz.*		-l	gen_context(system_u:object_r:boot_t,s0)

ifdef(`distro_redhat',`
/\.autofsck		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/\.autorelabel		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/\.suspended		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/fastboot 		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/forcefsck 		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/fsckoptions 		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/halt			--	gen_context(system_u:object_r:etc_runtime_t,s0)
/poweroff		--	gen_context(system_u:object_r:etc_runtime_t,s0)
')

ifdef(`distro_suse',`
/success			--	gen_context(system_u:object_r:etc_runtime_t,s0)
')

#
# /boot
#
/boot			-d	gen_context(system_u:object_r:boot_t,s0)
/boot/.*			gen_context(system_u:object_r:boot_t,s0)
/boot/\.journal			<<none>>
/boot/lost\+found	-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/boot/lost\+found/.*		<<none>>
/boot/System\.map(-.*)?	--	gen_context(system_u:object_r:system_map_t,s0)

#
# /emul
#
/emul			-d	gen_context(system_u:object_r:usr_t,s0)
/emul/.*			gen_context(system_u:object_r:usr_t,s0)

#
# /etc
#
/etc			-d	gen_context(system_u:object_r:etc_t,s0)
/etc/.*				gen_context(system_u:object_r:etc_t,s0)
/etc/\.fstab\.hal\..+	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/asound\.state	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/blkid(/.*)?		gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/fstab\.REVOKE	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/HOSTNAME		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/ioctl\.save		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/issue		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/issue\.net		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/localtime		-l	gen_context(system_u:object_r:etc_t,s0)
/etc/mtab		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/motd		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/nohotplug		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/nologin.*		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/smartd\.conf	--	gen_context(system_u:object_r:etc_runtime_t,s0)

/etc/cups/client\.conf	--	gen_context(system_u:object_r:etc_t,s0)


/etc/ipsec\.d/examples(/.*)?	gen_context(system_u:object_r:etc_t,s0)

/etc/network/ifstate	--	gen_context(system_u:object_r:etc_runtime_t,s0)

/etc/ptal/ptal-printd-like -- 	gen_context(system_u:object_r:etc_runtime_t,s0)

/etc/sysconfig/hwconf	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/sysconfig/iptables\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/sysconfig/firstboot --	gen_context(system_u:object_r:etc_runtime_t,s0)

ifdef(`distro_gentoo', `
/etc/profile\.env	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/csh\.env		--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/env\.d/.*		--	gen_context(system_u:object_r:etc_runtime_t,s0)
')

ifdef(`distro_redhat',`
/etc/rhgb(/.*)?		-d	gen_context(system_u:object_r:mnt_t,s0)
')

ifdef(`distro_suse',`
/etc/defkeymap\.map	--	gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/init\.d/\.depend.*	--	gen_context(system_u:object_r:etc_runtime_t,s0)
')

#
# HOME_ROOT
# expanded by genhomedircon
#
HOME_ROOT		-d	gen_context(system_u:object_r:home_root_t,s0-s15:c0.c255)
HOME_ROOT/\.journal		<<none>>
HOME_ROOT/lost\+found	-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
HOME_ROOT/lost\+found/.*		<<none>>

#
# /initrd
#
# initrd mount point, only used during boot
/initrd			-d	gen_context(system_u:object_r:root_t,s0)

#
# /lib(64)?
#
/lib/modules(/.*)?		gen_context(system_u:object_r:modules_object_t,s0)
/lib64/modules(/.*)?		gen_context(system_u:object_r:modules_object_t,s0)

#
# /lost+found
#
/lost\+found		-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/lost\+found/.*			<<none>>

#
# /media
#
# Mount points; do not relabel subdirectories, since
# we don't want to change any removable media by default.
/media(/[^/]*)?		-d	gen_context(system_u:object_r:mnt_t,s0)
/media/[^/]*/.*			<<none>>

#
# /misc
#
/misc			-d	gen_context(system_u:object_r:mnt_t,s0)

#
# /mnt
#
/mnt(/[^/]*)?		-d	gen_context(system_u:object_r:mnt_t,s0)
/mnt/[^/]*/.*			<<none>>

#
# /net
#
/net			-d	gen_context(system_u:object_r:mnt_t,s0)

#
# /opt
#
/opt			-d	gen_context(system_u:object_r:usr_t,s0)
/opt/.*				gen_context(system_u:object_r:usr_t,s0)

/opt/(.*/)?var/lib(64)?(/.*)?	gen_context(system_u:object_r:var_lib_t,s0)

#
# /proc
#
/proc			-d	<<none>>
/proc/.*			<<none>>

#
# /selinux
#
/selinux		-d	<<none>>
/selinux/.*			<<none>>

#
# /srv
#
/srv			-d	gen_context(system_u:object_r:var_t,s0)
/srv/.*				gen_context(system_u:object_r:var_t,s0)

#
# /sys
#
/sys			-d	<<none>>
/sys/.*				<<none>>

#
# /tmp
#
/tmp			-d	gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)
/tmp/.*				<<none>>
/tmp/\.journal			<<none>>

/tmp/lost\+found	-d		gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/tmp/lost\+found/.*		<<none>>

#
# /usr
#
/usr			-d	gen_context(system_u:object_r:usr_t,s0)
/usr/.*				gen_context(system_u:object_r:usr_t,s0)
/usr/\.journal			<<none>>

/usr/doc(/.*)?/lib(/.*)?		gen_context(system_u:object_r:usr_t,s0)

/usr/etc(/.*)?			gen_context(system_u:object_r:etc_t,s0)

/usr/inclu.e(/.*)?		gen_context(system_u:object_r:usr_t,s0)

/usr/local/\.journal		<<none>>

/usr/local/etc(/.*)?		gen_context(system_u:object_r:etc_t,s0)

/usr/local/lost\+found	-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/usr/local/lost\+found/.*	<<none>>

/usr/local/src(/.*)?		gen_context(system_u:object_r:src_t,s0)

/usr/lost\+found		-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/usr/lost\+found/.*		<<none>>

/usr/share(/.*)?/lib(64)?(/.*)?	gen_context(system_u:object_r:usr_t,s0)

/usr/src(/.*)?			gen_context(system_u:object_r:src_t,s0)
/usr/src/kernels/.+/lib(/.*)?	gen_context(system_u:object_r:usr_t,s0)

/usr/tmp			-d	gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)
/usr/tmp/.*			<<none>>

#
# /var
#
/var			-d	gen_context(system_u:object_r:var_t,s0)
/var/.*				gen_context(system_u:object_r:var_t,s0)
/var/\.journal			<<none>>

/var/db/.*\.db		--	gen_context(system_u:object_r:etc_t,s0)

/var/ftp/etc(/.*)?		gen_context(system_u:object_r:etc_t,s0)

/var/lib(/.*)?			gen_context(system_u:object_r:var_lib_t,s0)

/var/lib/nfs/rpc_pipefs(/.*)?	<<none>>

/var/lock(/.*)?			gen_context(system_u:object_r:var_lock_t,s0)

/var/lost\+found		-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/var/lost\+found/.*		<<none>>

/var/run			-d	gen_context(system_u:object_r:var_run_t,s0-s15:c0.c255)
/var/run/.*			gen_context(system_u:object_r:var_run_t,s0)
/var/run/.*\.*pid		<<none>>

/var/spool(/.*)?			gen_context(system_u:object_r:var_spool_t,s0)
/var/spool/postfix/etc(/.*)?	gen_context(system_u:object_r:etc_t,s0)

/var/tmp			-d	gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)
/var/tmp/.*			<<none>>
/var/tmp/lost\+found	-d	gen_context(system_u:object_r:lost_found_t,s15:c0.c255)
/var/tmp/lost\+found/.*		<<none>>
/var/tmp/vi\.recover	-d	gen_context(system_u:object_r:tmp_t,s0)
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /`
			`#`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/.* gen_context(system_u:object_r:default_t,s0)`
			`/ -d gen_context(system_u:object_r:root_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/\.journal <<none>>`
make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00			`/initrd\.img.* -l gen_context(system_u:object_r:boot_t,s0)`
			`/vmlinuz.* -l gen_context(system_u:object_r:boot_t,s0)`
add stuff from distros.fc 2005-11-03 18:08:36 +00:00
more merging of NSA CVS policy 2005-09-13 13:06:07 +00:00			ifdef(`distro_redhat',`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/\.autofsck -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/\.autorelabel -- gen_context(system_u:object_r:etc_runtime_t,s0)`
patch from dan Wed, 26 Jul 2006 14:42:46 -0400 2006-07-28 15:13:58 +00:00			`/\.suspended -- gen_context(system_u:object_r:etc_runtime_t,s0)`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/fastboot -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/forcefsck -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/fsckoptions -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/halt -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/poweroff -- gen_context(system_u:object_r:etc_runtime_t,s0)`
more merging of NSA CVS policy 2005-09-13 13:06:07 +00:00			`')`
initial commit 2005-05-10 19:51:00 +00:00
add stuff from distros.fc 2005-11-03 18:08:36 +00:00			ifdef(`distro_suse',`
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/success -- gen_context(system_u:object_r:etc_runtime_t,s0)`
add stuff from distros.fc 2005-11-03 18:08:36 +00:00			`')`

initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /boot`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/boot -d gen_context(system_u:object_r:boot_t,s0)`
			`/boot/.* gen_context(system_u:object_r:boot_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/boot/\.journal <<none>>`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/boot/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/boot/lost\+found/.* <<none>>`
make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00			`/boot/System\.map(-.*)? -- gen_context(system_u:object_r:system_map_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
add stuff from distros.fc 2005-11-03 18:08:36 +00:00			`#`
			`# /emul`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/emul -d gen_context(system_u:object_r:usr_t,s0)`
			`/emul/.* gen_context(system_u:object_r:usr_t,s0)`
add stuff from distros.fc 2005-11-03 18:08:36 +00:00
initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /etc`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/etc -d gen_context(system_u:object_r:etc_t,s0)`
			`/etc/.* gen_context(system_u:object_r:etc_t,s0)`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/\.fstab\.hal\..+ -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/asound\.state -- gen_context(system_u:object_r:etc_runtime_t,s0)`
patch from dan Fri, 17 Mar 2006 15:22:53 -0500 2006-03-23 19:19:38 +00:00			`/etc/blkid(/.*)? gen_context(system_u:object_r:etc_runtime_t,s0)`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/fstab\.REVOKE -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/HOSTNAME -- gen_context(system_u:object_r:etc_runtime_t,s0)`
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/etc/ioctl\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/issue -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/issue\.net -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/localtime -l gen_context(system_u:object_r:etc_t,s0)`
			`/etc/mtab -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/motd -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/nohotplug -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/nologin.* -- gen_context(system_u:object_r:etc_runtime_t,s0)`
add smartmon 2006-01-04 15:26:42 +00:00			`/etc/smartd\.conf -- gen_context(system_u:object_r:etc_runtime_t,s0)`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00
add cups 2005-10-23 22:10:59 +00:00			`/etc/cups/client\.conf -- gen_context(system_u:object_r:etc_t,s0)`

initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/ipsec\.d/examples(/.*)? gen_context(system_u:object_r:etc_t,s0)`
add ipsec 2005-07-14 18:15:47 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/network/ifstate -- gen_context(system_u:object_r:etc_runtime_t,s0)`
leftover from netutils 2005-05-10 20:06:04 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/ptal/ptal-printd-like -- gen_context(system_u:object_r:etc_runtime_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/sysconfig/hwconf -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/sysconfig/iptables\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/sysconfig/firstboot -- gen_context(system_u:object_r:etc_runtime_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
			ifdef(`distro_gentoo', `
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/etc/profile\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/csh\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/env\.d/.* -- gen_context(system_u:object_r:etc_runtime_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`')`

add stuff from distros.fc 2005-11-03 18:08:36 +00:00			ifdef(`distro_redhat',`
			`/etc/rhgb(/.*)? -d gen_context(system_u:object_r:mnt_t,s0)`
			`')`

			ifdef(`distro_suse',`
			`/etc/defkeymap\.map -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`/etc/init\.d/\.depend.* -- gen_context(system_u:object_r:etc_runtime_t,s0)`
			`')`

			`#`
			`# HOME_ROOT`
			`# expanded by genhomedircon`
			`#`
patch from dan Fri, 17 Mar 2006 15:22:53 -0500 2006-03-23 19:19:38 +00:00			`HOME_ROOT -d gen_context(system_u:object_r:home_root_t,s0-s15:c0.c255)`
genhomedircon entries 2005-06-08 22:32:43 +00:00			`HOME_ROOT/\.journal <<none>>`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`HOME_ROOT/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
			`HOME_ROOT/lost\+found/.* <<none>>`
genhomedircon entries 2005-06-08 22:32:43 +00:00
initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /initrd`
			`#`
			`# initrd mount point, only used during boot`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/initrd -d gen_context(system_u:object_r:root_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00			`#`
			`# /lib(64)?`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/lib/modules(/.*)? gen_context(system_u:object_r:modules_object_t,s0)`
			`/lib64/modules(/.*)? gen_context(system_u:object_r:modules_object_t,s0)`
make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00
initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /lost+found`
			`#`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/lost\+found/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /media`
			`#`
			`# Mount points; do not relabel subdirectories, since`
			`# we don't want to change any removable media by default.`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/media(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/media/[^/]/. <<none>>`

patch from dan 2006-01-25 15:53:35 +00:00			`#`
			`# /misc`
			`#`
			`/misc -d gen_context(system_u:object_r:mnt_t,s0)`

initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /mnt`
			`#`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/mnt(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/mnt/[^/]/. <<none>>`

patch from dan Fri, 27 Jan 2006 01:37:19 -0500 2006-01-27 20:13:08 +00:00			`#`
			`# /net`
			`#`
			`/net -d gen_context(system_u:object_r:mnt_t,s0)`

initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /opt`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/opt -d gen_context(system_u:object_r:usr_t,s0)`
			`/opt/.* gen_context(system_u:object_r:usr_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/opt/(./)?var/lib(64)?(/.)? gen_context(system_u:object_r:var_lib_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /proc`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/proc -d <<none>>`
			`/proc/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /selinux`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/selinux -d <<none>>`
			`/selinux/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
more upstream merging 2005-09-16 19:36:10 +00:00			`#`
			`# /srv`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/srv -d gen_context(system_u:object_r:var_t,s0)`
			`/srv/.* gen_context(system_u:object_r:var_t,s0)`
more upstream merging 2005-09-16 19:36:10 +00:00
initial commit 2005-05-10 19:51:00 +00:00			`#`
			`# /sys`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/sys -d <<none>>`
			`/sys/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /tmp`
			`#`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/tmp -d gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)`
initial commit 2005-05-10 19:51:00 +00:00			`/tmp/.* <<none>>`
			`/tmp/\.journal <<none>>`

fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/tmp/lost\+found/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
			`#`
			`# /usr`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/usr -d gen_context(system_u:object_r:usr_t,s0)`
			`/usr/.* gen_context(system_u:object_r:usr_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/usr/\.journal <<none>>`

patch from dan Thu, 09 Feb 2006 13:39:41 -0500 2006-02-13 22:05:08 +00:00			`/usr/doc(/.)?/lib(/.)? gen_context(system_u:object_r:usr_t,s0)`

rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/inclu.e(/.*)? gen_context(system_u:object_r:usr_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
			`/usr/local/\.journal <<none>>`
fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/local/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)`
fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/usr/local/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/usr/local/lost\+found/.* <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/local/src(/.*)? gen_context(system_u:object_r:src_t,s0)`
fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/usr/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/usr/lost\+found/.* <<none>>`

rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/share(/.)?/lib(64)?(/.)? gen_context(system_u:object_r:usr_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/usr/src(/.*)? gen_context(system_u:object_r:src_t,s0)`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/usr/src/kernels/.+/lib(/.*)? gen_context(system_u:object_r:usr_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/usr/tmp -d gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)`
initial commit 2005-05-10 19:51:00 +00:00			`/usr/tmp/.* <<none>>`

			`#`
			`# /var`
			`#`
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00			`/var -d gen_context(system_u:object_r:var_t,s0)`
			`/var/.* gen_context(system_u:object_r:var_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/var/\.journal <<none>>`

rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/var/db/.*\.db -- gen_context(system_u:object_r:etc_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/var/ftp/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/var/lib(/.*)? gen_context(system_u:object_r:var_lib_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00			`/var/lib/nfs/rpc_pipefs(/.*)? <<none>>`
initial commit 2005-05-10 19:51:00 +00:00
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/var/lock(/.*)? gen_context(system_u:object_r:var_lock_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/var/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/var/lost\+found/.* <<none>>`
fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/var/run -d gen_context(system_u:object_r:var_run_t,s0-s15:c0.c255)`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/var/run/.* gen_context(system_u:object_r:var_run_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00			`/var/run/.\.pid <<none>>`

fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/var/spool(/.*)? gen_context(system_u:object_r:var_spool_t,s0)`
			`/var/spool/postfix/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)`
initial commit 2005-05-10 19:51:00 +00:00
fix optional in fc, move contexts to their proper modules 2006-02-02 20:41:12 +00:00			`/var/tmp -d gen_context(system_u:object_r:tmp_t,s0-s15:c0.c255)`
initial commit 2005-05-10 19:51:00 +00:00			`/var/tmp/.* <<none>>`
part of dan's mega patch 2006-01-06 22:51:40 +00:00			`/var/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,s15:c0.c255)`
more upstream merging 2005-09-16 19:36:10 +00:00			`/var/tmp/lost\+found/.* <<none>>`
rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00			`/var/tmp/vi\.recover -d gen_context(system_u:object_r:tmp_t,s0)`