selinux-policy/strict/file_contexts/program/lvm.fc
2005-04-29 17:45:15 +00:00

68 lines
3.3 KiB
Plaintext

# lvm
/sbin/lvmiopversion -- system_u:object_r:lvm_exec_t
/etc/lvm(/.*)? system_u:object_r:lvm_etc_t
/etc/lvm/\.cache -- system_u:object_r:lvm_metadata_t
/etc/lvm/archive(/.*)? system_u:object_r:lvm_metadata_t
/etc/lvm/backup(/.*)? system_u:object_r:lvm_metadata_t
/etc/lvmtab(/.*)? system_u:object_r:lvm_metadata_t
/etc/lvmtab\.d(/.*)? system_u:object_r:lvm_metadata_t
# LVM creates lock files in /var before /var is mounted
# configure LVM to put lockfiles in /etc/lvm/lock instead
# for this policy to work (unless you have no separate /var)
/etc/lvm/lock(/.*)? system_u:object_r:lvm_lock_t
/var/lock/lvm(/.*)? system_u:object_r:lvm_lock_t
/dev/lvm -c system_u:object_r:fixed_disk_device_t
/dev/mapper/.* -b system_u:object_r:fixed_disk_device_t
/dev/mapper/control -c system_u:object_r:lvm_control_t
/lib/lvm-10(/.*) -- system_u:object_r:lvm_exec_t
/lib/lvm-200(/.*) -- system_u:object_r:lvm_exec_t
/sbin/e2fsadm -- system_u:object_r:lvm_exec_t
/sbin/lvchange -- system_u:object_r:lvm_exec_t
/sbin/lvcreate -- system_u:object_r:lvm_exec_t
/sbin/lvdisplay -- system_u:object_r:lvm_exec_t
/sbin/lvextend -- system_u:object_r:lvm_exec_t
/sbin/lvmchange -- system_u:object_r:lvm_exec_t
/sbin/lvmdiskscan -- system_u:object_r:lvm_exec_t
/sbin/lvmsadc -- system_u:object_r:lvm_exec_t
/sbin/lvmsar -- system_u:object_r:lvm_exec_t
/sbin/lvreduce -- system_u:object_r:lvm_exec_t
/sbin/lvremove -- system_u:object_r:lvm_exec_t
/sbin/lvrename -- system_u:object_r:lvm_exec_t
/sbin/lvscan -- system_u:object_r:lvm_exec_t
/sbin/pvchange -- system_u:object_r:lvm_exec_t
/sbin/pvcreate -- system_u:object_r:lvm_exec_t
/sbin/pvdata -- system_u:object_r:lvm_exec_t
/sbin/pvdisplay -- system_u:object_r:lvm_exec_t
/sbin/pvmove -- system_u:object_r:lvm_exec_t
/sbin/pvscan -- system_u:object_r:lvm_exec_t
/sbin/vgcfgbackup -- system_u:object_r:lvm_exec_t
/sbin/vgcfgrestore -- system_u:object_r:lvm_exec_t
/sbin/vgchange -- system_u:object_r:lvm_exec_t
/sbin/vgchange\.static -- system_u:object_r:lvm_exec_t
/sbin/vgck -- system_u:object_r:lvm_exec_t
/sbin/vgcreate -- system_u:object_r:lvm_exec_t
/sbin/vgdisplay -- system_u:object_r:lvm_exec_t
/sbin/vgexport -- system_u:object_r:lvm_exec_t
/sbin/vgextend -- system_u:object_r:lvm_exec_t
/sbin/vgimport -- system_u:object_r:lvm_exec_t
/sbin/vgmerge -- system_u:object_r:lvm_exec_t
/sbin/vgmknodes -- system_u:object_r:lvm_exec_t
/sbin/vgreduce -- system_u:object_r:lvm_exec_t
/sbin/vgremove -- system_u:object_r:lvm_exec_t
/sbin/vgrename -- system_u:object_r:lvm_exec_t
/sbin/vgscan -- system_u:object_r:lvm_exec_t
/sbin/vgscan\.static -- system_u:object_r:lvm_exec_t
/sbin/vgsplit -- system_u:object_r:lvm_exec_t
/sbin/vgwrapper -- system_u:object_r:lvm_exec_t
/sbin/cryptsetup -- system_u:object_r:lvm_exec_t
/sbin/dmsetup -- system_u:object_r:lvm_exec_t
/sbin/dmsetup\.static -- system_u:object_r:lvm_exec_t
/sbin/lvm -- system_u:object_r:lvm_exec_t
/sbin/lvm\.static -- system_u:object_r:lvm_exec_t
/usr/sbin/lvm -- system_u:object_r:lvm_exec_t
/sbin/lvresize -- system_u:object_r:lvm_exec_t
/sbin/lvs -- system_u:object_r:lvm_exec_t
/sbin/pvremove -- system_u:object_r:lvm_exec_t
/sbin/pvs -- system_u:object_r:lvm_exec_t
/sbin/vgs -- system_u:object_r:lvm_exec_t