199 lines
3.5 KiB
Plaintext
199 lines
3.5 KiB
Plaintext
|
|
policy_module(unconfined,1.3.12)
|
|
|
|
########################################
|
|
#
|
|
# Declarations
|
|
#
|
|
|
|
# real declaration moved to mls until
|
|
# range_transition works in loadable modules
|
|
gen_require(`
|
|
type unconfined_t;
|
|
')
|
|
type unconfined_exec_t;
|
|
init_system_domain(unconfined_t,unconfined_exec_t)
|
|
|
|
ifdef(`targeted_policy',`
|
|
type unconfined_execmem_t;
|
|
type unconfined_execmem_exec_t;
|
|
init_system_domain(unconfined_execmem_t,unconfined_execmem_exec_t)
|
|
')
|
|
|
|
########################################
|
|
#
|
|
# Local policy
|
|
#
|
|
|
|
unconfined_domain(unconfined_t)
|
|
|
|
logging_send_syslog_msg(unconfined_t)
|
|
|
|
ifdef(`targeted_policy',`
|
|
allow unconfined_t self:system syslog_read;
|
|
dontaudit unconfined_t self:capability sys_module;
|
|
|
|
domain_auto_trans(unconfined_t,unconfined_execmem_exec_t,unconfined_execmem_t)
|
|
|
|
files_create_boot_flag(unconfined_t)
|
|
|
|
init_domtrans_script(unconfined_t)
|
|
|
|
libs_domtrans_ldconfig(unconfined_t)
|
|
|
|
logging_domtrans_auditctl(unconfined_t)
|
|
|
|
mount_domtrans_unconfined(unconfined_t)
|
|
|
|
seutil_domtrans_restorecon(unconfined_t)
|
|
seutil_domtrans_semanage(unconfined_t)
|
|
|
|
userdom_unconfined(unconfined_t)
|
|
userdom_priveleged_home_dir_manager(unconfined_t)
|
|
|
|
optional_policy(`
|
|
ada_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
amanda_domtrans_recover(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
apache_domtrans_helper(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
bind_domtrans_ndc(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
bluetooth_domtrans_helper(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
init_dbus_chat_script(unconfined_t)
|
|
|
|
dbus_stub(unconfined_t)
|
|
|
|
optional_policy(`
|
|
avahi_dbus_chat(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
bluetooth_dbus_chat(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
cups_dbus_chat_config(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
hal_dbus_chat(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
networkmanager_dbus_chat(unconfined_t)
|
|
')
|
|
')
|
|
|
|
optional_policy(`
|
|
dmidecode_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
firstboot_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
ftp_domtrans_ftpdctl(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
inn_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
java_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
lpd_domtrans_checkpc(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
modutils_domtrans_update_mods(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
mono_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
prelink_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
portmap_domtrans_helper(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
postfix_domtrans_map(unconfined_t)
|
|
# cjp: this should probably be removed:
|
|
postfix_domtrans_master(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
# cjp: this should probably be removed:
|
|
rpc_domtrans_nfsd(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
rpm_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
samba_domtrans_net(unconfined_t)
|
|
samba_domtrans_winbind_helper(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
sendmail_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
sysnet_domtrans_dhcpc(unconfined_t)
|
|
sysnet_dbus_chat_dhcpc(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
usermanage_domtrans_admin_passwd(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
vpn_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
webalizer_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
wine_domtrans(unconfined_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
xserver_domtrans_xdm_xserver(unconfined_t)
|
|
')
|
|
')
|
|
|
|
########################################
|
|
#
|
|
# Unconfined Execmem Local policy
|
|
#
|
|
|
|
ifdef(`targeted_policy',`
|
|
allow unconfined_execmem_t self:process { execstack execmem };
|
|
unconfined_domain_noaudit(unconfined_execmem_t)
|
|
')
|