From b4c3f54eca39cff76284a56590661ae8f3cb90c1 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Tue, 31 May 2005 19:53:54 +0000
Subject: [PATCH] initial commit

---
 refpolicy/config/appconfig/dbus_contexts         |  6 ++++++
 refpolicy/config/appconfig/default_contexts      | 12 ++++++++++++
 refpolicy/config/appconfig/default_type          |  3 +++
 refpolicy/config/appconfig/failsafe_context      |  1 +
 refpolicy/config/appconfig/initrc_context        |  1 +
 refpolicy/config/appconfig/media                 |  3 +++
 refpolicy/config/appconfig/removable_context     |  1 +
 refpolicy/config/appconfig/root_default_contexts |  9 +++++++++
 refpolicy/config/appconfig/userhelper_context    |  1 +
 9 files changed, 37 insertions(+)
 create mode 100644 refpolicy/config/appconfig/dbus_contexts
 create mode 100644 refpolicy/config/appconfig/default_contexts
 create mode 100644 refpolicy/config/appconfig/default_type
 create mode 100644 refpolicy/config/appconfig/failsafe_context
 create mode 100644 refpolicy/config/appconfig/initrc_context
 create mode 100644 refpolicy/config/appconfig/media
 create mode 100644 refpolicy/config/appconfig/removable_context
 create mode 100644 refpolicy/config/appconfig/root_default_contexts
 create mode 100644 refpolicy/config/appconfig/userhelper_context

diff --git a/refpolicy/config/appconfig/dbus_contexts b/refpolicy/config/appconfig/dbus_contexts
new file mode 100644
index 00000000..116e684f
--- /dev/null
+++ b/refpolicy/config/appconfig/dbus_contexts
@@ -0,0 +1,6 @@
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+  <selinux>
+  </selinux>
+</busconfig>
diff --git a/refpolicy/config/appconfig/default_contexts b/refpolicy/config/appconfig/default_contexts
new file mode 100644
index 00000000..e778f506
--- /dev/null
+++ b/refpolicy/config/appconfig/default_contexts
@@ -0,0 +1,12 @@
+system_r:sulogin_t  sysadm_r:sysadm_t 
+system_r:local_login_t  staff_r:staff_t user_r:user_t sysadm_r:sysadm_t 
+system_r:remote_login_t user_r:user_t staff_r:staff_t
+system_r:sshd_t		user_r:user_t staff_r:staff_t sysadm_r:sysadm_t
+system_r:crond_t	user_r:user_crond_t staff_r:staff_crond_t sysadm_r:sysadm_crond_t system_r:system_crond_t mailman_r:user_crond_t
+system_r:xdm_t		staff_r:staff_t user_r:user_t sysadm_r:sysadm_t 
+staff_r:staff_su_t	staff_r:staff_t user_r:user_t sysadm_r:sysadm_t 
+sysadm_r:sysadm_su_t	staff_r:staff_t user_r:user_t sysadm_r:sysadm_t 
+user_r:user_su_t	staff_r:staff_t user_r:user_t sysadm_r:sysadm_t 
+sysadm_r:sysadm_sudo_t		sysadm_r:sysadm_t
+staff_r:staff_sudo_t		sysadm_r:sysadm_t staff_r:staff_t
+user_r:user_sudo_t		sysadm_r:sysadm_t user_r:user_t
diff --git a/refpolicy/config/appconfig/default_type b/refpolicy/config/appconfig/default_type
new file mode 100644
index 00000000..5212ca40
--- /dev/null
+++ b/refpolicy/config/appconfig/default_type
@@ -0,0 +1,3 @@
+sysadm_r:sysadm_t
+staff_r:staff_t
+user_r:user_t
diff --git a/refpolicy/config/appconfig/failsafe_context b/refpolicy/config/appconfig/failsafe_context
new file mode 100644
index 00000000..2f96c9fd
--- /dev/null
+++ b/refpolicy/config/appconfig/failsafe_context
@@ -0,0 +1 @@
+sysadm_r:sysadm_t
diff --git a/refpolicy/config/appconfig/initrc_context b/refpolicy/config/appconfig/initrc_context
new file mode 100644
index 00000000..7fcf70bd
--- /dev/null
+++ b/refpolicy/config/appconfig/initrc_context
@@ -0,0 +1 @@
+system_u:system_r:initrc_t
diff --git a/refpolicy/config/appconfig/media b/refpolicy/config/appconfig/media
new file mode 100644
index 00000000..de2a6527
--- /dev/null
+++ b/refpolicy/config/appconfig/media
@@ -0,0 +1,3 @@
+cdrom system_u:object_r:removable_device_t
+floppy system_u:object_r:removable_device_t
+disk system_u:object_r:fixed_disk_device_t
diff --git a/refpolicy/config/appconfig/removable_context b/refpolicy/config/appconfig/removable_context
new file mode 100644
index 00000000..d4921f03
--- /dev/null
+++ b/refpolicy/config/appconfig/removable_context
@@ -0,0 +1 @@
+system_u:object_r:removable_t
diff --git a/refpolicy/config/appconfig/root_default_contexts b/refpolicy/config/appconfig/root_default_contexts
new file mode 100644
index 00000000..acdcc08e
--- /dev/null
+++ b/refpolicy/config/appconfig/root_default_contexts
@@ -0,0 +1,9 @@
+system_r:local_login_t  sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
+system_r:crond_t	sysadm_r:sysadm_crond_t staff_r:staff_crond_t user_r:user_crond_t
+staff_r:staff_su_t	sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
+sysadm_r:sysadm_su_t	sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
+user_r:user_su_t	sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
+#
+# Uncomment if you want to automatically login as sysadm_r
+#
+#system_r:sshd_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
diff --git a/refpolicy/config/appconfig/userhelper_context b/refpolicy/config/appconfig/userhelper_context
new file mode 100644
index 00000000..081e93b4
--- /dev/null
+++ b/refpolicy/config/appconfig/userhelper_context
@@ -0,0 +1 @@
+system_u:sysadm_r:sysadm_t