selinux-policy/permissivedomains.te

policy_module(permissivedomains,20)

optional_policy(`
    gen_require(`
                type gssproxy_t;
        ')

        permissive gssproxy_t;
')

optional_policy(`
    gen_require(`
                type prosody_t;
        ')

        permissive prosody_t;
')

optional_policy(`
    gen_require(`
                type redis_t;
        ')

        permissive redis_t;
')

optional_policy(`
    gen_require(`
                type hypervkvp_t;
        ')

        permissive hypervkvp_t;
')

optional_policy(`
    gen_require(`
                type hypervvssd_t;
        ')

        permissive hypervvssd_t;
')


optional_policy(`
    gen_require(`
                type lsmd_t;
        ')

        permissive lsmd_t;
')
Add gssproxy policy 2013-05-31 21:24:35 +00:00			`policy_module(permissivedomains,20)`
Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy Conflicts: selinux-policy.spec 2013-01-15 16:54:07 +00:00
			optional_policy(`
			gen_require(`
Add gssproxy policy 2013-05-31 21:24:35 +00:00			`type gssproxy_t;`
Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy Conflicts: selinux-policy.spec 2013-01-15 16:54:07 +00:00			`')`

Add gssproxy policy 2013-05-31 21:24:35 +00:00			`permissive gssproxy_t;`
Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy Conflicts: selinux-policy.spec 2013-01-15 16:54:07 +00:00			`')`
Add prosody policy 2013-07-01 11:19:11 +00:00
			optional_policy(`
			gen_require(`
			`type prosody_t;`
			`')`

			`permissive prosody_t;`
			`')`
Cleanup related to init_domain()+inetd_domain fixes - Use just init_domain instead of init_daemon_domain in inetd_core_service_domain - svirt domains neeed to create kobject_uevint_sockets - Lots of new access required for sosreport - Allow tgtd_t to connect to isns ports - Allow init_t to transition to all inetd domains: - openct needs to be able to create netlink_object_uevent_sockets - Dontaudit leaks into ldconfig_t - Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls - Move kernel_stream_connect into all Xwindow using users - Dontaudit inherited lock files in ifconfig o dhcpc_t 2013-09-05 13:40:37 +00:00
			optional_policy(`
			gen_require(`
			`type redis_t;`
			`')`

			`permissive redis_t;`
			`')`

			optional_policy(`
			gen_require(`
			`type hypervkvp_t;`
			`')`

			`permissive hypervkvp_t;`
			`')`

Make hypervvssd_t as permissive domain 2013-10-03 22:16:45 +00:00			optional_policy(`
			gen_require(`
			`type hypervvssd_t;`
			`')`

			`permissive hypervvssd_t;`
			`')`



Cleanup related to init_domain()+inetd_domain fixes - Use just init_domain instead of init_daemon_domain in inetd_core_service_domain - svirt domains neeed to create kobject_uevint_sockets - Lots of new access required for sosreport - Allow tgtd_t to connect to isns ports - Allow init_t to transition to all inetd domains: - openct needs to be able to create netlink_object_uevent_sockets - Dontaudit leaks into ldconfig_t - Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls - Move kernel_stream_connect into all Xwindow using users - Dontaudit inherited lock files in ifconfig o dhcpc_t 2013-09-05 13:40:37 +00:00			optional_policy(`
			gen_require(`
			`type lsmd_t;`
			`')`

			`permissive lsmd_t;`
			`')`