|
Chris PeBenito |
e181fe |
# Copyright (C) 2005 Tresys Technology, LLC
|
|
Chris PeBenito |
e181fe |
|
|
Chris PeBenito |
960373 |
policy_module(filesystem,1.0)
|
|
Chris PeBenito |
960373 |
|
|
Chris PeBenito |
b4cd15 |
attribute fs_type;
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
########################################
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# fs_t is the default type for persistent
|
|
Chris PeBenito |
b4cd15 |
# filesystems with extended attributes
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type fs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
########################################
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# Non-persistent/pseudo filesystems
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type bdev_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon bdev / system_u:object_r:bdev_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type binfmt_misc_fs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon binfmt_misc / system_u:object_r:binfmt_misc_fs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type eventpollfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon eventpollfs / system_u:object_r:eventpollfs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type futexfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon futexfs / system_u:object_r:futexfs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type nfsd_fs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon nfsd / system_u:object_r:nfsd_fs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type ramfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow ramfs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon ramfs / system_u:object_r:ramfs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type romfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow romfs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon romfs / system_u:object_r:romfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon cramfs / system_u:object_r:romfs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
type rpc_pipefs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
genfscon rpc_pipefs / system_u:object_r:rpc_pipefs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# tmpfs_t is the type for tmpfs filesystems
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type tmpfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow tmpfs_t self:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t autofs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t cifs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t dosfs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t iso9660_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t nfs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t removable_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow tmpfs_t usbfs_t:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
########################################
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# Filesystems without extended attribute support
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type autofs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow autofs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon autofs / system_u:object_r:autofs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon automount / system_u:object_r:autofs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# cifs_t is the type for filesystems and their
|
|
Chris PeBenito |
b4cd15 |
# files shared from Windows servers
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type cifs_t alias sambafs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow cifs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon cifs / system_u:object_r:cifs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon smbfs / system_u:object_r:cifs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# dosfs_t is the type for fat and vfat
|
|
Chris PeBenito |
b4cd15 |
# filesystems and their files.
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type dosfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow dosfs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon vfat / system_u:object_r:dosfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon msdos / system_u:object_r:dosfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon fat / system_u:object_r:dosfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon ntfs / system_u:object_r:dosfs_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
# iso9660_t is the type for CD filesystems
|
|
Chris PeBenito |
b4cd15 |
# and their files.
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type iso9660_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow iso9660_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon iso9660 / system_u:object_r:iso9660_t
|
|
Chris PeBenito |
b4cd15 |
genfscon udf / system_u:object_r:iso9660_t
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
33bc0d |
# removable_t is the default type of all removable media
|
|
Chris PeBenito |
33bc0d |
#
|
|
Chris PeBenito |
33bc0d |
type removable_t, fs_type;
|
|
Chris PeBenito |
33bc0d |
allow removable_t self:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t autofs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t cifs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t dosfs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t iso9660_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t nfs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
allow removable_t usbfs_t:filesystem associate;
|
|
Chris PeBenito |
33bc0d |
|
|
Chris PeBenito |
33bc0d |
#
|
|
Chris PeBenito |
b4cd15 |
# nfs_t is the default type for NFS file systems
|
|
Chris PeBenito |
b4cd15 |
# and their files.
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
type nfs_t, fs_type;
|
|
Chris PeBenito |
b4cd15 |
allow nfs_t self:filesystem associate;
|
|
Chris PeBenito |
b4cd15 |
genfscon nfs / system_u:object_r:nfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon nfs4 / system_u:object_r:nfs_t
|
|
Chris PeBenito |
b4cd15 |
genfscon afs / system_u:object_r:nfs_t
|