selinux-policy/policy/modules/system/userdomain.fc

HOME_DIR	-d	gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)
HOME_DIR	-l	gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)
HOME_DIR/.+		gen_context(system_u:object_r:user_home_t,s0)
/tmp/gconfd-USER -d	gen_context(system_u:object_r:user_tmp_t,s0)
/root(/.*)?	 	gen_context(system_u:object_r:admin_home_t,s0)
/root/\.cert(/.*)?	gen_context(system_u:object_r:home_cert_t,s0)
/root/\.debug(/.*)?	<<none>>
/dev/shm/pulse-shm.*	gen_context(system_u:object_r:user_tmpfs_t,s0)
/dev/shm/mono.*		gen_context(system_u:object_r:user_tmpfs_t,s0)
HOME_DIR/bin(/.*)?	gen_context(system_u:object_r:home_bin_t,s0)
HOME_DIR/local/bin(/.*)?	gen_context(system_u:object_r:home_bin_t,s0)
HOME_DIR/Audio(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
HOME_DIR/Music(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
HOME_DIR/\.cert(/.*)?	gen_context(system_u:object_r:home_cert_t,s0)
HOME_DIR/\.pki(/.*)?		gen_context(system_u:object_r:home_cert_t,s0)
HOME_DIR/\.gvfs(/.*)?	<<none>>
trunk: merge UBAC. 2008-11-05 16:10:46 +00:00			`HOME_DIR -d gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)`
UPdate for f14 policy 2010-08-26 13:41:21 +00:00			`HOME_DIR -l gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)`
trunk: merge UBAC. 2008-11-05 16:10:46 +00:00			`HOME_DIR/.+ gen_context(system_u:object_r:user_home_t,s0)`
			`/tmp/gconfd-USER -d gen_context(system_u:object_r:user_tmp_t,s0)`
UPdate for f14 policy 2010-08-26 13:41:21 +00:00			`/root(/.*)? gen_context(system_u:object_r:admin_home_t,s0)`
			`/root/\.cert(/.*)? gen_context(system_u:object_r:home_cert_t,s0)`
add labeling for /root/.debug 2010-09-14 19:29:18 +00:00			`/root/\.debug(/.*)? <<none>>`
UPdate for f14 policy 2010-08-26 13:41:21 +00:00			`/dev/shm/pulse-shm.* gen_context(system_u:object_r:user_tmpfs_t,s0)`
			`/dev/shm/mono.* gen_context(system_u:object_r:user_tmpfs_t,s0)`
			`HOME_DIR/bin(/.*)? gen_context(system_u:object_r:home_bin_t,s0)`
			`HOME_DIR/local/bin(/.*)? gen_context(system_u:object_r:home_bin_t,s0)`
Allow iptables to read shorewall tmp files Change chfn and passwd to use auth_use_pam so they can send dbus messages to fprintd label vlc as an execmem_exec_t Lots of fixes for mozilla_plugin to run google vidio chat Allow telepath_msn to execute ldconfig and its own tmp files Fix labels on hugepages Allow mdadm to read files on /dev Remove permissive domains and change back to unconfined Allow freshclam to execute shell and bin_t Allow devicekit_power to transition to dhcpc Add boolean to allow icecast to connect to any port 2010-09-07 20:23:09 +00:00			`HOME_DIR/Audio(/.*)? gen_context(system_u:object_r:audio_home_t,s0)`
UPdate for f14 policy 2010-08-26 13:41:21 +00:00			`HOME_DIR/Music(/.*)? gen_context(system_u:object_r:audio_home_t,s0)`
			`HOME_DIR/\.cert(/.*)? gen_context(system_u:object_r:home_cert_t,s0)`
			`HOME_DIR/\.pki(/.*)? gen_context(system_u:object_r:home_cert_t,s0)`
			`HOME_DIR/\.gvfs(/.*)? <<none>>`