domains not needed for execute interface
This commit is contained in:
parent
85bd7f1ffa
commit
fc83dba9a0
@ -28,7 +28,7 @@ allow $1 checkpolicy_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_checkpolicy_execute_depend',`
|
define(`selinux_checkpolicy_execute_depend',`
|
||||||
type checkpolicy_t, checkpolicy_exec_t;
|
type checkpolicy_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -60,7 +60,7 @@ allow $1 load_policy_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_load_policy_execute_depend',`
|
define(`selinux_load_policy_execute_depend',`
|
||||||
type load_policy_t, load_policy_exec_t;
|
type load_policy_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -91,7 +91,7 @@ dontaudit $1 newrole_t:process { noatsecure siginh rlimitinh };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_newrole_transition_depend',`
|
define(`selinux_newrole_transition_depend',`
|
||||||
type newrole_t, newrole_exec_t;
|
type newrole_exec_t;
|
||||||
class file { getattr read execute };
|
class file { getattr read execute };
|
||||||
class process { transition noatsecure siginh rlimitinh };
|
class process { transition noatsecure siginh rlimitinh };
|
||||||
')
|
')
|
||||||
@ -137,7 +137,7 @@ dontaudit $1 restorecon_t:process { noatsecure siginh rlimitinh };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_restorecon_transition_depend',`
|
define(`selinux_restorecon_transition_depend',`
|
||||||
type restorecon_t, restorecon_exec_t;
|
type restorecon_exec_t;
|
||||||
class file { getattr read execute };
|
class file { getattr read execute };
|
||||||
class process { transition noatsecure siginh rlimitinh };
|
class process { transition noatsecure siginh rlimitinh };
|
||||||
')
|
')
|
||||||
@ -184,7 +184,7 @@ allow $1 setfiles_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_setfiles_execute_depend',`
|
define(`selinux_setfiles_execute_depend',`
|
||||||
type setfiles_t, setfiles_exec_t;
|
type setfiles_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
|
@ -28,7 +28,7 @@ allow $1 checkpolicy_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_checkpolicy_execute_depend',`
|
define(`selinux_checkpolicy_execute_depend',`
|
||||||
type checkpolicy_t, checkpolicy_exec_t;
|
type checkpolicy_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -60,7 +60,7 @@ allow $1 load_policy_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_load_policy_execute_depend',`
|
define(`selinux_load_policy_execute_depend',`
|
||||||
type load_policy_t, load_policy_exec_t;
|
type load_policy_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -91,7 +91,7 @@ dontaudit $1 newrole_t:process { noatsecure siginh rlimitinh };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_newrole_transition_depend',`
|
define(`selinux_newrole_transition_depend',`
|
||||||
type newrole_t, newrole_exec_t;
|
type newrole_exec_t;
|
||||||
class file { getattr read execute };
|
class file { getattr read execute };
|
||||||
class process { transition noatsecure siginh rlimitinh };
|
class process { transition noatsecure siginh rlimitinh };
|
||||||
')
|
')
|
||||||
@ -137,7 +137,7 @@ dontaudit $1 restorecon_t:process { noatsecure siginh rlimitinh };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_restorecon_transition_depend',`
|
define(`selinux_restorecon_transition_depend',`
|
||||||
type restorecon_t, restorecon_exec_t;
|
type restorecon_exec_t;
|
||||||
class file { getattr read execute };
|
class file { getattr read execute };
|
||||||
class process { transition noatsecure siginh rlimitinh };
|
class process { transition noatsecure siginh rlimitinh };
|
||||||
')
|
')
|
||||||
@ -184,7 +184,7 @@ allow $1 setfiles_exec_t:file { getattr read execute execute_no_trans };
|
|||||||
')
|
')
|
||||||
|
|
||||||
define(`selinux_setfiles_execute_depend',`
|
define(`selinux_setfiles_execute_depend',`
|
||||||
type setfiles_t, setfiles_exec_t;
|
type setfiles_exec_t;
|
||||||
class file { getattr read execute execute_no_trans };
|
class file { getattr read execute execute_no_trans };
|
||||||
')
|
')
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user