2005-07-05 20:59:51 +00:00
|
|
|
# Add programs here which should not be confined by SELinux
|
|
|
|
|
# e.g.:
|
2006-09-01 15:52:05 +00:00
|
|
|
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
2006-01-06 22:51:40 +00:00
|
|
|
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
|
2006-09-01 15:52:05 +00:00
|
|
|
/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
2006-06-07 17:43:10 +00:00
|
|
|
|
|
|
|
|
ifdef(`targeted_policy',`
|
2006-07-24 15:43:57 +00:00
|
|
|
/usr/lib/openoffice\.org.*/program/.+\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
2006-09-01 15:52:05 +00:00
|
|
|
/usr/bin/valgrind -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
2006-07-24 15:43:57 +00:00
|
|
|
/usr/local/RealPlay/realplay\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
2006-09-01 15:52:05 +00:00
|
|
|
/usr/lib/ia32el/ia32x_loader -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
2006-06-07 17:43:10 +00:00
|
|
|
')
|
