2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /
|
|
|
|
|
#
|
2005-10-06 19:33:06 +00:00
|
|
|
/.* gen_context(system_u:object_r:default_t,s0)
|
|
|
|
|
/ -d gen_context(system_u:object_r:root_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/\.journal <<none>>
|
2006-03-02 23:41:11 +00:00
|
|
|
/initrd\.img.* -l gen_context(system_u:object_r:boot_t,s0)
|
|
|
|
|
/vmlinuz.* -l gen_context(system_u:object_r:boot_t,s0)
|
2005-11-03 18:08:36 +00:00
|
|
|
|
2005-09-13 13:06:07 +00:00
|
|
|
ifdef(`distro_redhat',`
|
2005-10-06 19:33:06 +00:00
|
|
|
/\.autofsck -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/\.autorelabel -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2006-07-28 15:13:58 +00:00
|
|
|
/\.suspended -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/fastboot -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/forcefsck -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/fsckoptions -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/halt -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/poweroff -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-09-13 13:06:07 +00:00
|
|
|
')
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-11-03 18:08:36 +00:00
|
|
|
ifdef(`distro_suse',`
|
2006-09-25 18:53:06 +00:00
|
|
|
/success -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-11-03 18:08:36 +00:00
|
|
|
')
|
|
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /boot
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/boot -d gen_context(system_u:object_r:boot_t,s0)
|
|
|
|
|
/boot/.* gen_context(system_u:object_r:boot_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/boot/\.journal <<none>>
|
2008-12-02 22:40:49 +00:00
|
|
|
/boot/efi(/.*)?/System\.map(-.*)? -- gen_context(system_u:object_r:system_map_t,s0)
|
2006-10-04 17:25:34 +00:00
|
|
|
/boot/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/boot/lost\+found/.* <<none>>
|
2006-03-02 23:41:11 +00:00
|
|
|
/boot/System\.map(-.*)? -- gen_context(system_u:object_r:system_map_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-11-03 18:08:36 +00:00
|
|
|
#
|
|
|
|
|
# /emul
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/emul -d gen_context(system_u:object_r:usr_t,s0)
|
|
|
|
|
/emul/.* gen_context(system_u:object_r:usr_t,s0)
|
2005-11-03 18:08:36 +00:00
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /etc
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/etc -d gen_context(system_u:object_r:etc_t,s0)
|
|
|
|
|
/etc/.* gen_context(system_u:object_r:etc_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/\.fstab\.hal\..+ -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2006-03-23 19:19:38 +00:00
|
|
|
/etc/blkid(/.*)? gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/fstab\.REVOKE -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/HOSTNAME -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2006-09-25 18:53:06 +00:00
|
|
|
/etc/ioctl\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/issue -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/issue\.net -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/localtime -l gen_context(system_u:object_r:etc_t,s0)
|
|
|
|
|
/etc/mtab -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2007-06-20 19:47:10 +00:00
|
|
|
/etc/mtab\.fuselock -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/motd -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/nohotplug -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/nologin.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2007-10-05 18:00:55 +00:00
|
|
|
/etc/reader\.conf -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2006-09-25 18:53:06 +00:00
|
|
|
/etc/smartd\.conf.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
|
2005-10-23 22:10:59 +00:00
|
|
|
/etc/cups/client\.conf -- gen_context(system_u:object_r:etc_t,s0)
|
|
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/ipsec\.d/examples(/.*)? gen_context(system_u:object_r:etc_t,s0)
|
2005-07-14 18:15:47 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/network/ifstate -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-05-10 20:06:04 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/ptal/ptal-printd-like -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/sysconfig/hwconf -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/sysconfig/iptables\.save -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/sysconfig/firstboot -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
ifdef(`distro_gentoo', `
|
2005-10-06 19:33:06 +00:00
|
|
|
/etc/profile\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/csh\.env -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/env\.d/.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
')
|
|
|
|
|
|
2005-11-03 18:08:36 +00:00
|
|
|
ifdef(`distro_redhat',`
|
|
|
|
|
/etc/rhgb(/.*)? -d gen_context(system_u:object_r:mnt_t,s0)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
ifdef(`distro_suse',`
|
|
|
|
|
/etc/defkeymap\.map -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
/etc/init\.d/\.depend.* -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# HOME_ROOT
|
|
|
|
|
# expanded by genhomedircon
|
|
|
|
|
#
|
2006-10-04 17:25:34 +00:00
|
|
|
HOME_ROOT -d gen_context(system_u:object_r:home_root_t,s0-mls_systemhigh)
|
2005-06-08 22:32:43 +00:00
|
|
|
HOME_ROOT/\.journal <<none>>
|
2006-10-04 17:25:34 +00:00
|
|
|
HOME_ROOT/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2006-01-06 22:51:40 +00:00
|
|
|
HOME_ROOT/lost\+found/.* <<none>>
|
2005-06-08 22:32:43 +00:00
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /initrd
|
|
|
|
|
#
|
|
|
|
|
# initrd mount point, only used during boot
|
2005-10-06 19:33:06 +00:00
|
|
|
/initrd -d gen_context(system_u:object_r:root_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-03-02 23:41:11 +00:00
|
|
|
#
|
|
|
|
|
# /lib(64)?
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/lib/modules(/.*)? gen_context(system_u:object_r:modules_object_t,s0)
|
|
|
|
|
/lib64/modules(/.*)? gen_context(system_u:object_r:modules_object_t,s0)
|
2006-03-02 23:41:11 +00:00
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /lost+found
|
|
|
|
|
#
|
2006-10-04 17:25:34 +00:00
|
|
|
/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/lost\+found/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /media
|
|
|
|
|
#
|
|
|
|
|
# Mount points; do not relabel subdirectories, since
|
|
|
|
|
# we don't want to change any removable media by default.
|
2006-09-04 18:22:12 +00:00
|
|
|
/media(/[^/]*) -l gen_context(system_u:object_r:mnt_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/media(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/media/[^/]*/.* <<none>>
|
2006-10-31 21:01:48 +00:00
|
|
|
/media/\.hal-.* -- gen_context(system_u:object_r:mnt_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-01-25 15:53:35 +00:00
|
|
|
#
|
|
|
|
|
# /misc
|
|
|
|
|
#
|
|
|
|
|
/misc -d gen_context(system_u:object_r:mnt_t,s0)
|
|
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /mnt
|
|
|
|
|
#
|
2006-09-04 18:22:12 +00:00
|
|
|
/mnt(/[^/]*) -l gen_context(system_u:object_r:mnt_t,s0)
|
2005-10-06 19:33:06 +00:00
|
|
|
/mnt(/[^/]*)? -d gen_context(system_u:object_r:mnt_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/mnt/[^/]*/.* <<none>>
|
|
|
|
|
|
2006-01-27 20:13:08 +00:00
|
|
|
#
|
|
|
|
|
# /net
|
|
|
|
|
#
|
|
|
|
|
/net -d gen_context(system_u:object_r:mnt_t,s0)
|
|
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /opt
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/opt -d gen_context(system_u:object_r:usr_t,s0)
|
|
|
|
|
/opt/.* gen_context(system_u:object_r:usr_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-04-17 17:54:57 +00:00
|
|
|
/opt/(.*/)?var/lib(64)?(/.*)? gen_context(system_u:object_r:var_lib_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /proc
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/proc -d <<none>>
|
|
|
|
|
/proc/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /selinux
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/selinux -d <<none>>
|
|
|
|
|
/selinux/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-09-16 19:36:10 +00:00
|
|
|
#
|
|
|
|
|
# /srv
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/srv -d gen_context(system_u:object_r:var_t,s0)
|
|
|
|
|
/srv/.* gen_context(system_u:object_r:var_t,s0)
|
2005-09-16 19:36:10 +00:00
|
|
|
|
2005-05-10 19:51:00 +00:00
|
|
|
#
|
|
|
|
|
# /sys
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/sys -d <<none>>
|
|
|
|
|
/sys/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /tmp
|
|
|
|
|
#
|
2006-10-04 17:25:34 +00:00
|
|
|
/tmp -d gen_context(system_u:object_r:tmp_t,s0-mls_systemhigh)
|
2005-05-10 19:51:00 +00:00
|
|
|
/tmp/.* <<none>>
|
|
|
|
|
/tmp/\.journal <<none>>
|
|
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/tmp/lost\+found/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /usr
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/usr -d gen_context(system_u:object_r:usr_t,s0)
|
|
|
|
|
/usr/.* gen_context(system_u:object_r:usr_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/usr/\.journal <<none>>
|
|
|
|
|
|
2006-02-13 22:05:08 +00:00
|
|
|
/usr/doc(/.*)?/lib(/.*)? gen_context(system_u:object_r:usr_t,s0)
|
|
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/usr/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/usr/inclu.e(/.*)? gen_context(system_u:object_r:usr_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
|
|
|
|
/usr/local/\.journal <<none>>
|
2005-05-27 20:29:17 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/usr/local/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
|
2005-05-27 20:29:17 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/usr/local/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/usr/local/lost\+found/.* <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/usr/local/src(/.*)? gen_context(system_u:object_r:src_t,s0)
|
2005-05-27 20:29:17 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/usr/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/usr/lost\+found/.* <<none>>
|
|
|
|
|
|
2007-10-29 18:35:32 +00:00
|
|
|
/usr/share/doc(/.*)?/README.* gen_context(system_u:object_r:usr_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/usr/src(/.*)? gen_context(system_u:object_r:src_t,s0)
|
2006-04-17 17:54:57 +00:00
|
|
|
/usr/src/kernels/.+/lib(/.*)? gen_context(system_u:object_r:usr_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/usr/tmp -d gen_context(system_u:object_r:tmp_t,s0-mls_systemhigh)
|
2005-05-10 19:51:00 +00:00
|
|
|
/usr/tmp/.* <<none>>
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# /var
|
|
|
|
|
#
|
2006-04-17 17:54:57 +00:00
|
|
|
/var -d gen_context(system_u:object_r:var_t,s0)
|
|
|
|
|
/var/.* gen_context(system_u:object_r:var_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/var/\.journal <<none>>
|
|
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/var/db/.*\.db -- gen_context(system_u:object_r:etc_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/var/ftp/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/var/lib(/.*)? gen_context(system_u:object_r:var_lib_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-05-27 20:29:17 +00:00
|
|
|
/var/lib/nfs/rpc_pipefs(/.*)? <<none>>
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2005-10-06 19:33:06 +00:00
|
|
|
/var/lock(/.*)? gen_context(system_u:object_r:var_lock_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/var/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/var/lost\+found/.* <<none>>
|
2005-05-27 20:29:17 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/var/run -d gen_context(system_u:object_r:var_run_t,s0-mls_systemhigh)
|
2006-01-06 22:51:40 +00:00
|
|
|
/var/run/.* gen_context(system_u:object_r:var_run_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
/var/run/.*\.*pid <<none>>
|
|
|
|
|
|
2006-02-02 20:41:12 +00:00
|
|
|
/var/spool(/.*)? gen_context(system_u:object_r:var_spool_t,s0)
|
|
|
|
|
/var/spool/postfix/etc(/.*)? gen_context(system_u:object_r:etc_t,s0)
|
2005-05-10 19:51:00 +00:00
|
|
|
|
2006-10-04 17:25:34 +00:00
|
|
|
/var/tmp -d gen_context(system_u:object_r:tmp_t,s0-mls_systemhigh)
|
2005-05-10 19:51:00 +00:00
|
|
|
/var/tmp/.* <<none>>
|
2006-10-04 17:25:34 +00:00
|
|
|
/var/tmp/lost\+found -d gen_context(system_u:object_r:lost_found_t,mls_systemhigh)
|
2005-09-16 19:36:10 +00:00
|
|
|
/var/tmp/lost\+found/.* <<none>>
|
2005-10-06 19:33:06 +00:00
|
|
|
/var/tmp/vi\.recover -d gen_context(system_u:object_r:tmp_t,s0)
|
2007-08-21 19:03:34 +00:00
|
|
|
|
|
|
|
|
ifdef(`distro_debian',`
|
|
|
|
|
/var/run/motd -- gen_context(system_u:object_r:etc_runtime_t,s0)
|
|
|
|
|
')
|
