selinux-policy/policy/modules/kernel/corecommands.te


policy_module(corecommands,1.5.3)

########################################
#
# Declarations
#

#
# Types with the exec_type attribute are executable files.
#
attribute exec_type;

#
# bin_t is the type of files in the system bin directories.
#
type bin_t;
corecmd_executable_file(bin_t)

#
# sbin_t is the type of files in the system sbin directories.
#
type sbin_t;
corecmd_executable_file(sbin_t)

#
# ls_exec_t is the type of the ls program.
#
type ls_exec_t;
corecmd_executable_file(ls_exec_t)

#
# shell_exec_t is the type of user shells such as /bin/bash.
#
type shell_exec_t;
corecmd_executable_file(shell_exec_t)

type chroot_exec_t;
corecmd_executable_file(chroot_exec_t)
add copyright statement 2005-04-20 19:07:16 +00:00
patch from Dan for sudo: sudo should be able to getattr on all executables not just bin_t/sbin_t. Confined executeables run from sudo need this. sudo_exec_t needs to be marked as exec_type so prelink will work correctly. sudo semanage should work 2007-03-19 16:32:44 +00:00			`policy_module(corecommands,1.5.3)`
add module statement macro and entrypoint executable attribute to replicate can_exec($1,exec_type) 2005-04-26 17:00:25 +00:00
more work on current modules 2005-06-30 18:54:08 +00:00			`########################################`
			`#`
			`# Declarations`
			`#`

add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`#`
			`# Types with the exec_type attribute are executable files.`
			`#`
			`attribute exec_type;`

initial commit 2005-04-14 20:18:17 +00:00			`#`
			`# bin_t is the type of files in the system bin directories.`
			`#`
			`type bin_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(bin_t)`
initial commit 2005-04-14 20:18:17 +00:00
			`#`
			`# sbin_t is the type of files in the system sbin directories.`
			`#`
			`type sbin_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(sbin_t)`
initial commit 2005-04-14 20:18:17 +00:00
			`#`
			`# ls_exec_t is the type of the ls program.`
			`#`
rules picked up from sediff 2005-05-04 21:44:51 +00:00			`type ls_exec_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(ls_exec_t)`
another pile o fixes 2005-10-26 18:07:20 +00:00
initial commit 2005-04-14 20:18:17 +00:00			`#`
			`# shell_exec_t is the type of user shells such as /bin/bash.`
			`#`
			`type shell_exec_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(shell_exec_t)`
initial commit 2005-04-14 20:18:17 +00:00
			`type chroot_exec_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(chroot_exec_t)`