selinux-policy/refpolicy/policy/modules/system/files.fc

195 lines
5.6 KiB
Plaintext
Raw Normal View History

2005-05-10 19:51:00 +00:00
#
# /
#
/.* gen_context(system_u:object_r:default_t,s0)
/ -d gen_context(system_u:object_r:root_t,s0)
2005-05-10 19:51:00 +00:00
/\.journal <<none>>
2005-09-13 13:06:07 +00:00
ifdef(`distro_redhat',`
/\.autofsck -- gen_context(system_u:object_r:etc_runtime_t,s0)
/\.autorelabel -- gen_context(system_u:object_r:etc_runtime_t,s0)
/fastboot -- gen_context(system_u:object_r:etc_runtime_t,s0)
/forcefsck -- gen_context(system_u:object_r:etc_runtime_t,s0)
/fsckoptions -- gen_context(system_u:object_r:etc_runtime_t,s0)
/halt -- gen_context(system_u:object_r:etc_runtime_t,s0)
/poweroff -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-09-13 13:06:07 +00:00
')
2005-05-10 19:51:00 +00:00
#
# /boot
#
/boot/\.journal <<none>>
/boot/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/boot/lost\+found/.* <<none>>
2005-05-10 19:51:00 +00:00
#
# /etc
#
/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
/etc/\.fstab\.hal\..+ -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/asound\.state -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/blkid\.tab.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/fstab\.REVOKE -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/HOSTNAME -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/ioctl\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/issue -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/issue\.net -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/localtime -l gen_context(system_u:object_r:etc_t,s0)
/etc/mtab -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/motd -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/nohotplug -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/nologin.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-10-23 22:10:59 +00:00
/etc/cups/client\.conf -- gen_context(system_u:object_r:etc_t,s0)
/etc/init\.d/functions -- gen_context(system_u:object_r:etc_t,s0)
2005-09-13 13:06:07 +00:00
ifdef(`distro_suse',`
/etc/init\.d/\.depend.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-09-13 13:06:07 +00:00
')
2005-05-10 19:51:00 +00:00
/etc/ipsec\.d/examples(/.*)? gen_context(system_u:object_r:etc_t,s0)
2005-07-14 18:15:47 +00:00
/etc/network/ifstate -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-05-10 20:06:04 +00:00
/etc/ptal/ptal-printd-like -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-05-10 19:51:00 +00:00
/etc/rc\.d/init\.d/functions -- gen_context(system_u:object_r:etc_t,s0)
2005-05-10 19:51:00 +00:00
/etc/sysconfig/hwconf -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/sysconfig/iptables\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/sysconfig/firstboot -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-05-10 19:51:00 +00:00
ifdef(`distro_gentoo', `
/etc/profile\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/csh\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)
/etc/env\.d/.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
2005-05-10 19:51:00 +00:00
')
2005-06-08 22:32:43 +00:00
# HOME_ROOT expands to all valid home directory prefixes found in /etc/passwd
HOME_ROOT -d gen_context(system_u:object_r:home_root_t,s0)
2005-06-08 22:32:43 +00:00
HOME_ROOT/\.journal <<none>>
HOME_ROOT/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
HOME_ROOT/lost\+found/.* <<none>>
2005-06-08 22:32:43 +00:00
2005-05-10 19:51:00 +00:00
#
# /initrd
#
# initrd mount point, only used during boot
/initrd -d gen_context(system_u:object_r:root_t,s0)
2005-05-10 19:51:00 +00:00
#
# /lost+found
#
/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/lost\+found/.* <<none>>
2005-05-10 19:51:00 +00:00
#
# /media
#
# Mount points; do not relabel subdirectories, since
# we don't want to change any removable media by default.
/media(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)
2005-05-10 19:51:00 +00:00
/media/[^/]*/.* <<none>>
#
# /mnt
#
/mnt(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)
2005-05-10 19:51:00 +00:00
/mnt/[^/]*/.* <<none>>
#
# /opt
#
/opt(/.*)? gen_context(system_u:object_r:usr_t,s0)
2005-05-10 19:51:00 +00:00
2005-10-27 18:32:16 +00:00
/opt(/.*)?/var/lib(64)?(/.*)? gen_context(system_u:object_r:var_lib_t,s0)
2005-05-10 19:51:00 +00:00
#
# /proc
#
/proc(/.*)? <<none>>
#
# /selinux
#
/selinux(/.*)? <<none>>
2005-09-16 19:36:10 +00:00
#
# /srv
#
/srv(/.*)? gen_context(system_u:object_r:var_t,s0)
2005-09-16 19:36:10 +00:00
2005-05-10 19:51:00 +00:00
#
# /sys
#
/sys(/.*)? <<none>>
#
# /tmp
#
/tmp -d gen_context(system_u:object_r:tmp_t,s0)
2005-05-10 19:51:00 +00:00
/tmp/.* <<none>>
/tmp/\.journal <<none>>
/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/tmp/lost\+found/.* <<none>>
2005-05-10 19:51:00 +00:00
#
# /usr
#
/usr(/.*)? gen_context(system_u:object_r:usr_t,s0)
2005-05-10 19:51:00 +00:00
/usr/\.journal <<none>>
/usr/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
2005-05-10 19:51:00 +00:00
/usr/inclu.e(/.*)? gen_context(system_u:object_r:usr_t,s0)
2005-05-10 19:51:00 +00:00
/usr/local/\.journal <<none>>
2005-05-27 20:29:17 +00:00
/usr/local/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
2005-05-27 20:29:17 +00:00
/usr/local/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/usr/local/lost\+found/.* <<none>>
2005-05-10 19:51:00 +00:00
/usr/local/src(/.*)? gen_context(system_u:object_r:src_t,s0)
2005-05-27 20:29:17 +00:00
/usr/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/usr/lost\+found/.* <<none>>
/usr/share(/.*)?/lib(64)?(/.*)? gen_context(system_u:object_r:usr_t,s0)
2005-05-10 19:51:00 +00:00
/usr/src(/.*)? gen_context(system_u:object_r:src_t,s0)
2005-05-10 19:51:00 +00:00
/usr/tmp -d gen_context(system_u:object_r:tmp_t,s0)
2005-05-10 19:51:00 +00:00
/usr/tmp/.* <<none>>
#
# /var
#
/var(/.*)? gen_context(system_u:object_r:var_t,s0)
2005-05-10 19:51:00 +00:00
/var/\.journal <<none>>
/var/db/.*\.db -- gen_context(system_u:object_r:etc_t,s0)
2005-05-10 19:51:00 +00:00
/var/ftp/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
2005-05-10 19:51:00 +00:00
/var/lib(/.*)? gen_context(system_u:object_r:var_lib_t,s0)
2005-05-10 19:51:00 +00:00
2005-05-27 20:29:17 +00:00
/var/lib/nfs/rpc_pipefs(/.*)? <<none>>
2005-05-10 19:51:00 +00:00
/var/lock(/.*)? gen_context(system_u:object_r:var_lock_t,s0)
2005-05-10 19:51:00 +00:00
/var/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/var/lost\+found/.* <<none>>
2005-05-27 20:29:17 +00:00
/var/run(/.*)? gen_context(system_u:object_r:var_run_t,s0)
2005-05-10 19:51:00 +00:00
/var/run/.*\.*pid <<none>>
/var/spool(/.*)? gen_context(system_u:object_r:var_spool_t,s0)
2005-05-10 19:51:00 +00:00
/var/tmp -d gen_context(system_u:object_r:tmp_t,s0)
2005-05-10 19:51:00 +00:00
/var/tmp/.* <<none>>
/var/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,s0)
2005-09-16 19:36:10 +00:00
/var/tmp/lost\+found/.* <<none>>
/var/tmp/vi\.recover -d gen_context(system_u:object_r:tmp_t,s0)