Files
Dmitry Sharshakov 776970005d feat: add SELinux CIL policy source files (#1124)
Common Intermediate Language is a format of SELinux policy source
2024-08-16 13:51:29 +02:00

21 lines
890 B
Plaintext

; 20 lines 15 code 3 comments 2 blanks
;============= etcd_t ==============
(allow etcd_t proc_sysctl_t (dir (search)))
(allow etcd_t proc_sysctl_t (file (read open)))
(allow etcd_t procfs_t (dir (search getattr)))
(allow etcd_t procfs_t (lnk_file (read)))
(allow etcd_t self (dir (read open search)))
(allow etcd_t self (fifo_file (write read)))
;============= kernel_t ==============
(allow kernel_t bin_t (dir (search)))
(allow kernel_t bin_t (file (read execute_no_trans open map execute)))
(allow kernel_t debugfs_t (dir (search)))
(allow kernel_t device_t (blk_file (create setattr)))
(allow kernel_t device_t (chr_file (write create setattr)))
(allow kernel_t self (capability (dac_override mknod)))
(allow kernel_t self (dir (write add_name search)))
(allow kernel_t self (file (write create open)))
(filecon "/.extra(/.*)?" any (system_u object_r extra_t (systemLow systemLow)))