Blame refpolicy/policy/modules/system/unconfined.fc
|
Chris PeBenito |
9726b3 |
# Add programs here which should not be confined by SELinux
|
|
Chris PeBenito |
9726b3 |
# e.g.:
|
|
Chris PeBenito |
e02c61 |
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
Chris PeBenito |
bf080a |
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
|
|
Chris PeBenito |
bf080a |
/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
Chris PeBenito |
522b59 |
|
|
Chris PeBenito |
522b59 |
ifdef(`targeted_policy',`
|
|
Chris PeBenito |
522b59 |
/usr/lib/openoffice.org.*/program/.*\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
Chris PeBenito |
522b59 |
/usr/bin/valgrind -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
Chris PeBenito |
123a99 |
/usr/local/RealPlay/realplay.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
Chris PeBenito |
123a99 |
/usr/bin/mplayer -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
|
|
Chris PeBenito |
522b59 |
')
|