selinux-policy/refpolicy/policy/modules/system/unconfined.te

164 lines
2.7 KiB
Plaintext

policy_module(unconfined,1.3.5)
########################################
#
# Declarations
#
# real declaration moved to mls until
# range_transition works in loadable modules
gen_require(`
type unconfined_t;
')
type unconfined_exec_t;
init_system_domain(unconfined_t,unconfined_exec_t)
role system_r types unconfined_t;
########################################
#
# Local policy
#
unconfined_domain(unconfined_t)
logging_send_syslog_msg(unconfined_t)
ifdef(`targeted_policy',`
allow unconfined_t self:system syslog_read;
dontaudit unconfined_t self:capability sys_module;
files_create_boot_flag(unconfined_t)
init_domtrans_script(unconfined_t)
libs_domtrans_ldconfig(unconfined_t)
logging_domtrans_auditctl(unconfined_t)
seutil_domtrans_restorecon(unconfined_t)
userdom_unconfined(unconfined_t)
userdom_priveleged_home_dir_manager(unconfined_t)
optional_policy(`
ada_domtrans(unconfined_t)
')
optional_policy(`
amanda_domtrans_recover(unconfined_t)
')
optional_policy(`
apache_domtrans_helper(unconfined_t)
')
optional_policy(`
bind_domtrans_ndc(unconfined_t)
')
optional_policy(`
bluetooth_domtrans_helper(unconfined_t)
')
optional_policy(`
dbus_stub(unconfined_t)
optional_policy(`
avahi_dbus_chat(unconfined_t)
')
optional_policy(`
bluetooth_dbus_chat(unconfined_t)
')
optional_policy(`
cups_dbus_chat_config(unconfined_t)
')
optional_policy(`
hal_dbus_chat(unconfined_t)
')
optional_policy(`
networkmanager_dbus_chat(unconfined_t)
')
')
optional_policy(`
dmidecode_domtrans(unconfined_t)
')
optional_policy(`
firstboot_domtrans(unconfined_t)
')
optional_policy(`
java_domtrans(unconfined_t)
')
optional_policy(`
lpd_domtrans_checkpc(unconfined_t)
')
optional_policy(`
modutils_domtrans_update_mods(unconfined_t)
')
optional_policy(`
mono_domtrans(unconfined_t)
')
optional_policy(`
portmap_domtrans_helper(unconfined_t)
')
optional_policy(`
postfix_domtrans_map(unconfined_t)
# cjp: this should probably be removed:
postfix_domtrans_master(unconfined_t)
')
optional_policy(`
# cjp: this should probably be removed:
rpc_domtrans_nfsd(unconfined_t)
')
optional_policy(`
rpm_domtrans(unconfined_t)
')
optional_policy(`
samba_domtrans_net(unconfined_t)
samba_domtrans_winbind_helper(unconfined_t)
')
optional_policy(`
sendmail_domtrans(unconfined_t)
')
optional_policy(`
sysnet_domtrans_dhcpc(unconfined_t)
')
optional_policy(`
usermanage_domtrans_admin_passwd(unconfined_t)
')
optional_policy(`
vpn_domtrans(unconfined_t)
')
optional_policy(`
webalizer_domtrans(unconfined_t)
')
optional_policy(`
wine_domtrans(unconfined_t)
')
optional_policy(`
xserver_domtrans_xdm_xserver(unconfined_t)
')
')