Blame refpolicy/policy/modules/system/unconfined.te
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
9726b3 |
policy_module(unconfined,1.0)
|
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
9726b3 |
########################################
|
|
Chris PeBenito |
9726b3 |
#
|
|
Chris PeBenito |
9726b3 |
# Declarations
|
|
Chris PeBenito |
9726b3 |
#
|
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
9726b3 |
type unconfined_t;
|
|
Chris PeBenito |
9726b3 |
type unconfined_exec_t;
|
|
Chris PeBenito |
9726b3 |
init_system_domain(unconfined_t,unconfined_exec_t)
|
|
Chris PeBenito |
9726b3 |
role system_r types unconfined_t;
|
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
9726b3 |
########################################
|
|
Chris PeBenito |
9726b3 |
#
|
|
Chris PeBenito |
9726b3 |
# Local policy
|
|
Chris PeBenito |
9726b3 |
#
|
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
c98340 |
unconfined_domain_template(unconfined_t)
|
|
Chris PeBenito |
a42ca7 |
|
|
Chris PeBenito |
9726b3 |
logging_send_syslog_msg(unconfined_t)
|
|
Chris PeBenito |
9726b3 |
|
|
Chris PeBenito |
c98340 |
ifdef(`targeted_policy',`
|
|
Chris PeBenito |
c98340 |
allow unconfined_t self:system syslog_read;
|
|
Chris PeBenito |
c98340 |
|
|
Chris PeBenito |
c98340 |
# Define some type aliases to help with compatibility with
|
|
Chris PeBenito |
c98340 |
# macros and domains from the "strict" policy.
|
|
Chris PeBenito |
142e9f |
# cjp: remove xdm_t when we get to that module
|
|
Chris PeBenito |
142e9f |
typealias unconfined_t alias { secadm_t sysadm_t xdm_t };
|
|
Chris PeBenito |
c98340 |
|
|
Chris PeBenito |
a42ca7 |
init_domtrans_script(unconfined_t)
|
|
Chris PeBenito |
a42ca7 |
|
|
Chris PeBenito |
c98340 |
userdom_unconfined(unconfined_t)
|
|
Chris PeBenito |
c98340 |
|
|
Chris PeBenito |
c98340 |
ifdef(`TODO',`
|
|
Chris PeBenito |
c98340 |
ifdef(`samba.te', `samba_domain(user)')
|
|
Chris PeBenito |
c98340 |
') dnl end TODO
|
|
Chris PeBenito |
c98340 |
')
|