This commit is contained in:
Chris PeBenito 2005-06-01 14:17:43 +00:00
parent 1293184998
commit e32d52ba47
9 changed files with 35 additions and 1 deletions

View File

@ -1,5 +1,4 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="dmesg" layer="keyservices"> ## <module name="dmesg" layer="keyservices">
## <summary>Policy for dmesg.</summary> ## <summary>Policy for dmesg.</summary>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="storage" layer="kernel">
## <summary>Policy for filesystems.</summary>
######################################## ########################################
# #
@ -1196,3 +1198,5 @@ class lnk_file getattr;
class fifo_file getattr; class fifo_file getattr;
class sock_file getattr; class sock_file getattr;
') ')
## </module>

View File

@ -1,4 +1,9 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="kernel" layer="kernel">
## <summary>
## Policy for kernel threads, security interface (selinuxfs),
## proc filesystem, sysfs filesystem, and usb device filesystem.
## </summary>
######################################## ########################################
# #
@ -1319,3 +1324,5 @@ define(`kernel_read_directory_from_depend',`
type kernel_t; type kernel_t;
class dir { getattr search read }; class dir { getattr search read };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="clock" layer="keyservices">
## <summary>Policy for reading and setting the hardware clock.</summary>
######################################## ########################################
## <interface name="clock_transition"> ## <interface name="clock_transition">
@ -89,3 +91,5 @@ define(`clock_modify_drift_records_depend',`
type adjtime_t; type adjtime_t;
class file { getattr read write ioctl lock append }; class file { getattr read write ioctl lock append };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="init" layer="system">
## <summary>System initialization programs (init and init scripts).</summary>
######################################## ########################################
# #
@ -476,3 +478,5 @@ define(`init_script_ignore_modify_runtime_data_depend',`
type initrc_var_run_t; type initrc_var_run_t;
class file { getattr read write append }; class file { getattr read write append };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="iptables" layer="system">
## <summary>Policy for iptables.</summary>
######################################## ########################################
## <interface name="iptables_transition"> ## <interface name="iptables_transition">
@ -81,3 +83,5 @@ define(`iptables_execute_depend',`
type iptables_t, iptables_exec_t; type iptables_t, iptables_exec_t;
class file { getattr read execute execute_no_trans }; class file { getattr read execute execute_no_trans };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="logging" layer="system">
## <summary>Policy for the kernel message logger and system logging daemon.</summary>
####################################### #######################################
# #
@ -181,3 +183,5 @@ type var_log_t;
class dir { getattr search read }; class dir { getattr search read };
class file { getattr read write append }; class file { getattr read write append };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="mount" layer="system">
## <summary>Policy for mount.</summary>
######################################## ########################################
## <interface name="mount_transition"> ## <interface name="mount_transition">
@ -89,3 +91,5 @@ define(`mount_send_nfs_client_request_depend',`
type mount_t; type mount_t;
class udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown }; class udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };
') ')
## </module>

View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="sysnetwork" layer="system">
## <summary>Policy for network configuration: ifconfig and dhcp client.</summary>
######################################## ########################################
# #
@ -100,3 +102,5 @@ define(`sysnetwork_read_network_config_depend',`
type net_conf_t; type net_conf_t;
class file { getattr read }; class file { getattr read };
') ')
## </module>