49 lines
1.2 KiB
Plaintext
49 lines
1.2 KiB
Plaintext
|
#DESC Anaconda - Red Hat Installation program
|
||
|
|
#
|
||
|
|
# Authors: Dan Walsh <dwalsh@redhat.com>
|
||
|
|
#
|
||
|
|
#
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the anaconda_t domain.
|
||
|
|
#
|
||
|
|
# anaconda_t is the domain of the installation program
|
||
|
|
#
|
||
|
|
type anaconda_t, admin, etc_writer, fs_domain, privmem, auth_write, domain, privlog, privowner, privmodule, sysctl_kernel_writer;
|
||
|
|
role system_r types anaconda_t;
|
||
|
|
unconfined_domain(anaconda_t)
|
||
|
|
|
||
|
|
role system_r types ldconfig_t;
|
||
|
|
domain_auto_trans(anaconda_t, ldconfig_exec_t, ldconfig_t)
|
||
|
|
|
||
|
|
# Run other rc scripts in the anaconda_t domain.
|
||
|
|
domain_auto_trans(anaconda_t, initrc_exec_t, initrc_t)
|
||
|
|
|
||
|
|
ifdef(`dmesg.te', `
|
||
|
|
domain_auto_trans(anaconda_t, dmesg_exec_t, dmesg_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
ifdef(`distro_redhat', `
|
||
|
|
file_type_auto_trans(anaconda_t, boot_t, boot_runtime_t, file)
|
||
|
|
')
|
||
|
|
|
||
|
|
ifdef(`rpm.te', `
|
||
|
|
# Access /var/lib/rpm.
|
||
|
|
domain_auto_trans(anaconda_t, rpm_exec_t, rpm_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
file_type_auto_trans(anaconda_t, var_log_t, var_log_ksyms_t, file)
|
||
|
|
|
||
|
|
ifdef(`udev.te', `
|
||
|
|
domain_auto_trans(anaconda_t, udev_exec_t, udev_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
ifdef(`ssh-agent.te', `
|
||
|
|
role system_r types sysadm_ssh_agent_t;
|
||
|
|
domain_auto_trans(anaconda_t, ssh_agent_exec_t, sysadm_ssh_agent_t)
|
||
|
|
')
|
||
|
|
ifdef(`passwd.te', `
|
||
|
|
domain_auto_trans(anaconda_t , admin_passwd_exec_t, sysadm_passwd_t)
|
||
|
|
')
|