rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
ded1efb9d8
selinux-policy/policy/modules/services/xserver.fc

142 lines
6.5 KiB
Plaintext
Raw Normal View History

merge xdm into xserver
2006-01-30 22:51:35 +00:00
#
# HOME_DIR
#
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
HOME_DIR/\.fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
HOME_DIR/\.fonts\.d(/.*)? gen_context(system_u:object_r:user_fonts_config_t,s0)
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
HOME_DIR/\.fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
HOME_DIR/\.fonts\.cache-.* -- gen_context(system_u:object_r:user_fonts_cache_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
HOME_DIR/\.DCOP.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
HOME_DIR/\.serverauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
HOME_DIR/\.xsession-errors.* -- gen_context(system_u:object_r:xdm_home_t,s0)
HOME_DIR/\.dmrc.* -- gen_context(system_u:object_r:xdm_home_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/root/\.serverauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
/root/\.Xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
/root/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
move xconsole to xserver mod
2006-04-06 19:27:41 +00:00
#
# /dev
#
/dev/xconsole -p gen_context(system_u:object_r:xconsole_device_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
#
# /etc
#
add xauth and iceauth to xserver
2006-01-20 19:36:54 +00:00
add xserver
2006-01-19 22:01:48 +00:00
/etc/init\.d/xfree86-common -- gen_context(system_u:object_r:xserver_exec_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/etc/gdm(/.*)? gen_context(system_u:object_r:xdm_etc_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/etc/kde3?/kdm/Xstartup -- gen_context(system_u:object_r:xsession_exec_t,s0)
/etc/kde3?/kdm/Xreset -- gen_context(system_u:object_r:xsession_exec_t,s0)
/etc/kde3?/kdm/Xsession -- gen_context(system_u:object_r:xsession_exec_t,s0)
/etc/kde3?/kdm/backgroundrc gen_context(system_u:object_r:xdm_var_run_t,s0)
/etc/X11/[wx]dm/Xreset.* -- gen_context(system_u:object_r:xsession_exec_t,s0)
add gdm Xsession fc
2006-07-26 20:33:23 +00:00
/etc/X11/[wxg]dm/Xsession -- gen_context(system_u:object_r:xsession_exec_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/etc/X11/wdm(/.*)? gen_context(system_u:object_r:xdm_rw_etc_t,s0)
/etc/X11/wdm/Xsetup.* -- gen_context(system_u:object_r:xsession_exec_t,s0)
/etc/X11/wdm/Xstartup.* -- gen_context(system_u:object_r:xsession_exec_t,s0)
/etc/X11/Xsession[^/]* -- gen_context(system_u:object_r:xsession_exec_t,s0)
#
# /opt
#
/opt/kde3/bin/kdm -- gen_context(system_u:object_r:xdm_exec_t,s0)
#
# /tmp
#
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/tmp/\.X0-lock -- gen_context(system_u:object_r:xdm_tmp_t,s0)
/tmp/\.X11-unix(/.*)? gen_context(system_u:object_r:xdm_tmp_t,s0)
/tmp/\.ICE-unix(/.*)? gen_context(system_u:object_r:xdm_tmp_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
merge xdm into xserver
2006-01-30 22:51:35 +00:00
#
# /usr
#
/usr/(s)?bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/usr/(s)?bin/lxdm -- gen_context(system_u:object_r:xdm_exec_t,s0)
/usr/(s)?bin/lxdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.
2007-10-15 17:50:07 +00:00
/usr/(s)?bin/[xgkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
trunk: add core xselinux support.
2008-04-01 20:23:23 +00:00
/usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/usr/bin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)
patch from dan Sun, 19 Feb 2006 08:16:18 -0500
2006-02-20 16:31:54 +00:00
/usr/bin/Xair -- gen_context(system_u:object_r:xserver_exec_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/usr/bin/Xephyr -- gen_context(system_u:object_r:xserver_exec_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/usr/bin/xauth -- gen_context(system_u:object_r:xauth_exec_t,s0)
patch from dan Wed, 01 Feb 2006 08:33:30 -0500
2006-02-06 22:47:46 +00:00
/usr/bin/Xorg -- gen_context(system_u:object_r:xserver_exec_t,s0)
fixes from thomas bleher Fri, 24 Mar 2006 13:25:54 +0100
2006-03-24 16:48:35 +00:00
ifdef(`distro_debian', `
/usr/sbin/gdm -- gen_context(system_u:object_r:xdm_exec_t,s0)
')
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/usr/lib(64)?/qt-.*/etc/settings(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
/usr/var/[xgkw]dm(/.*)? gen_context(system_u:object_r:xserver_log_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/usr/X11R6/bin/[xgkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
add xauth and iceauth to xserver
2006-01-20 19:36:54 +00:00
/usr/X11R6/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
trunk: add core xselinux support.
2008-04-01 20:23:23 +00:00
/usr/X11R6/bin/X -- gen_context(system_u:object_r:xserver_exec_t,s0)
trunk: whitespace fix changing multiple spaces into tabs.
2008-12-03 18:33:19 +00:00
/usr/X11R6/bin/xauth -- gen_context(system_u:object_r:xauth_exec_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
/usr/X11R6/bin/XFree86 -- gen_context(system_u:object_r:xserver_exec_t,s0)
/usr/X11R6/bin/Xipaq -- gen_context(system_u:object_r:xserver_exec_t,s0)
/usr/X11R6/bin/Xorg -- gen_context(system_u:object_r:xserver_exec_t,s0)
/usr/X11R6/bin/Xwrapper -- gen_context(system_u:object_r:xserver_exec_t,s0)
/usr/X11R6/lib/X11/xkb -d gen_context(system_u:object_r:xkb_var_lib_t,s0)
/usr/X11R6/lib/X11/xkb/.* -- gen_context(system_u:object_r:xkb_var_lib_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
#
# /var
#
add xserver
2006-01-19 22:01:48 +00:00
/var/[xgk]dm(/.*)? gen_context(system_u:object_r:xserver_log_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/lib/[gxkw]dm(/.*)? gen_context(system_u:object_r:xdm_var_lib_t,s0)
/var/lib/lxdm(/.*)? gen_context(system_u:object_r:xdm_var_lib_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
/var/lib/xkb(/.*)? gen_context(system_u:object_r:xkb_var_lib_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/lib/xorg(/.*)? gen_context(system_u:object_r:xserver_var_lib_t,s0)
/var/cache/gdm(/.*)? gen_context(system_u:object_r:xdm_var_lib_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/log/gdm(/.*)? gen_context(system_u:object_r:xdm_log_t,s0)
Allow firewallgui to sys_rawio which seems to be required to setup masqerading Allow all domains to search through default_t directories, in order to find differnet labels. For example people serring up /foo/bar to be share via samba. Add label for /var/log/slim.log
2010-09-25 10:23:04 +00:00
/var/log/slim\.log.* -- gen_context(system_u:object_r:xdm_log_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/log/lxdm\.log.* -- gen_context(system_u:object_r:xdm_log_t,s0)
/var/log/[kw]dm\.log.* -- gen_context(system_u:object_r:xserver_log_t,s0)
add xserver
2006-01-19 22:01:48 +00:00
/var/log/XFree86.* -- gen_context(system_u:object_r:xserver_log_t,s0)
/var/log/Xorg.* -- gen_context(system_u:object_r:xserver_log_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/log/nvidia-installer\.log.* -- gen_context(system_u:object_r:xserver_log_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/spool/gdm(/.*)? gen_context(system_u:object_r:xdm_spool_t,s0)
/var/run/slim(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/kdm(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/gdm(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/gdm_socket -s gen_context(system_u:object_r:xdm_var_run_t,s0)
fixes for gentoo
2006-05-19 13:14:37 +00:00
/var/run/[gx]dm\.pid -- gen_context(system_u:object_r:xdm_var_run_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/run/lxdm\.pid -- gen_context(system_u:object_r:xdm_var_run_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
/var/run/xdmctl(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/run/xauth(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/slim.* -- gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/lxdm\.auth -- gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/lxdm(/*.)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/video.rom -- gen_context(system_u:object_r:xserver_var_run_t,s0)
/var/run/xorg(/.*)? gen_context(system_u:object_r:xserver_var_run_t,s0)
merge xdm into xserver
2006-01-30 22:51:35 +00:00
ifdef(`distro_suse',`
/var/lib/pam_devperm/:0 -- gen_context(system_u:object_r:xdm_var_lib_t,s0)
')
UPdate for f14 policy
2010-08-26 13:41:21 +00:00
/var/lib/nxserver/home/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
/var/lib/nxserver/home/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
/var/lib/pqsql/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
/var/lib/pqsql/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
Reference in New Issue Copy Permalink