Changeset 98 for trunk/montavista
- Timestamp:
- 10/01/07 10:48:57 (1 year ago)
- Files:
-
- trunk/montavista/refpolicy/policy/modules/kernel/corecommands.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/kernel/corenetwork.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/kernel/devices.fc (modified) (2 diffs)
- trunk/montavista/refpolicy/policy/modules/kernel/storage.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/kernel/terminal.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/services/gpm.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/services/lpd.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/services/xserver.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/system/init.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/system/logging.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/system/udev.fc (modified) (1 diff)
- trunk/montavista/refpolicy/policy/modules/system/xen.fc (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/montavista/refpolicy/policy/modules/kernel/corecommands.fc
r97 r98 21 21 # 22 22 /dev/MAKEDEV -- gen_context(system_u:object_r:bin_t,s0) 23 24 ifdef(`distro_montavista',` 25 /dev/\.static/dev/MAKEDEV -- gen_context(system_u:object_r:bin_t,s0) 26 ') 23 27 24 28 # trunk/montavista/refpolicy/policy/modules/kernel/corenetwork.fc
r97 r98 6 6 7 7 /dev/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0) 8 9 ifdef(`distro_montavista',` 10 /dev/\.static/dev/ippp.* -c gen_context(system_u:object_r:ppp_device_t,s0) 11 /dev/\.static/dev/ppp -c gen_context(system_u:object_r:ppp_device_t,s0) 12 /dev/\.static/dev/pppox.* -c gen_context(system_u:object_r:ppp_device_t,s0) 13 /dev/\.static/dev/tap.* -c gen_context(system_u:object_r:tun_tap_device_t,s0) 14 /dev/\.static/dev/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0) 15 ') trunk/montavista/refpolicy/policy/modules/kernel/devices.fc
r97 r98 118 118 /lib/udev/devices -d gen_context(system_u:object_r:device_t,s0) 119 119 120 ifdef(`distro_debian',`121 # used by udev init script as temporary mount point122 /lib/udev/devices -d gen_context(system_u:object_r:device_t,s0)123 ')124 125 120 ifdef(`distro_gentoo',` 126 121 # used by init scripts to initally populate udev /dev 127 122 /lib/udev/devices/null -c gen_context(system_u:object_r:null_device_t,s0) 128 123 /lib/udev/devices/zero -c gen_context(system_u:object_r:zero_device_t,s0) 129 ')130 131 ifdef(`distro_montavista',`132 # used by udev init script as temporary mount point133 /lib/udev/devices -d gen_context(system_u:object_r:device_t,s0)134 124 ') 135 125 … … 140 130 /var/named/chroot/dev/zero -c gen_context(system_u:object_r:zero_device_t,s0) 141 131 ') 132 133 ifdef(`distro_montavista',` 134 /dev/\.static/dev -d gen_context(system_u:object_r:device_t,s0) 135 /dev/\.static/dev/.* gen_context(system_u:object_r:device_t,s0) 136 /dev/\.static/dev/.*mouse.* -c gen_context(system_u:object_r:mouse_device_t,s0) 137 /dev/\.static/dev/adsp.* -c gen_context(system_u:object_r:sound_device_t,s0) 138 /dev/\.static/dev/(misc/)?agpgart -c gen_context(system_u:object_r:agp_device_t,s0) 139 /dev/\.static/dev/aload.* -c gen_context(system_u:object_r:sound_device_t,s0) 140 /dev/\.static/dev/amidi.* -c gen_context(system_u:object_r:sound_device_t,s0) 141 /dev/\.static/dev/amixer.* -c gen_context(system_u:object_r:sound_device_t,s0) 142 /dev/\.static/dev/apm_bios -c gen_context(system_u:object_r:apm_bios_t,s0) 143 /dev/\.static/dev/atibm -c gen_context(system_u:object_r:mouse_device_t,s0) 144 /dev/\.static/dev/audio.* -c gen_context(system_u:object_r:sound_device_t,s0) 145 /dev/\.static/dev/beep -c gen_context(system_u:object_r:sound_device_t,s0) 146 /dev/\.static/dev/dmfm -c gen_context(system_u:object_r:sound_device_t,s0) 147 /dev/\.static/dev/dsp.* -c gen_context(system_u:object_r:sound_device_t,s0) 148 /dev/\.static/dev/efirtc -c gen_context(system_u:object_r:clock_device_t,s0) 149 /dev/\.static/dev/em8300.* -c gen_context(system_u:object_r:v4l_device_t,s0) 150 /dev/\.static/dev/event.* -c gen_context(system_u:object_r:event_device_t,s0) 151 /dev/\.static/dev/evtchn -c gen_context(system_u:object_r:xen_device_t,s0) 152 /dev/\.static/dev/fb[0-9]* -c gen_context(system_u:object_r:framebuf_device_t,s0) 153 /dev/\.static/dev/full -c gen_context(system_u:object_r:null_device_t,s0) 154 /dev/\.static/dev/fw.* -c gen_context(system_u:object_r:usb_device_t,s0) 155 /dev/\.static/dev/hiddev.* -c gen_context(system_u:object_r:usb_device_t,s0) 156 /dev/\.static/dev/hpet -c gen_context(system_u:object_r:clock_device_t,s0) 157 /dev/\.static/dev/hw_random -c gen_context(system_u:object_r:random_device_t,s0) 158 /dev/\.static/dev/hwrng -c gen_context(system_u:object_r:random_device_t,s0) 159 /dev/\.static/dev/i915 -c gen_context(system_u:object_r:dri_device_t,s0) 160 /dev/\.static/dev/irlpt[0-9]+ -c gen_context(system_u:object_r:printer_device_t,s0) 161 /dev/\.static/dev/js.* -c gen_context(system_u:object_r:mouse_device_t,s0) 162 /dev/\.static/dev/kmem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) 163 /dev/\.static/dev/kmsg -c gen_context(system_u:object_r:kmsg_device_t,mls_systemhigh) 164 /dev/\.static/dev/logibm -c gen_context(system_u:object_r:mouse_device_t,s0) 165 /dev/\.static/dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) 166 /dev/\.static/dev/mcelog -c gen_context(system_u:object_r:kmsg_device_t,mls_systemhigh) 167 /dev/\.static/dev/mem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) 168 /dev/\.static/dev/mice -c gen_context(system_u:object_r:mouse_device_t,s0) 169 /dev/\.static/dev/microcode -c gen_context(system_u:object_r:cpu_device_t,s0) 170 /dev/\.static/dev/midi.* -c gen_context(system_u:object_r:sound_device_t,s0) 171 /dev/\.static/dev/mixer.* -c gen_context(system_u:object_r:sound_device_t,s0) 172 /dev/\.static/dev/mmetfgrab -c gen_context(system_u:object_r:scanner_device_t,s0) 173 /dev/\.static/dev/mpu401.* -c gen_context(system_u:object_r:sound_device_t,s0) 174 /dev/\.static/dev/null -c gen_context(system_u:object_r:null_device_t,s0) 175 /dev/\.static/dev/nvidia.* -c gen_context(system_u:object_r:xserver_misc_device_t,s0) 176 /dev/\.static/dev/nvram -c gen_context(system_u:object_r:nvram_device_t,mls_systemhigh) 177 /dev/\.static/dev/oldmem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) 178 /dev/\.static/dev/par.* -c gen_context(system_u:object_r:printer_device_t,s0) 179 /dev/\.static/dev/patmgr[01] -c gen_context(system_u:object_r:sound_device_t,s0) 180 /dev/\.static/dev/pmu -c gen_context(system_u:object_r:power_device_t,s0) 181 /dev/\.static/dev/port -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) 182 /dev/\.static/dev/(misc/)?psaux -c gen_context(system_u:object_r:mouse_device_t,s0) 183 /dev/\.static/dev/rmidi.* -c gen_context(system_u:object_r:sound_device_t,s0) 184 /dev/\.static/dev/radeon -c gen_context(system_u:object_r:dri_device_t,s0) 185 /dev/\.static/dev/radio.* -c gen_context(system_u:object_r:v4l_device_t,s0) 186 /dev/\.static/dev/random -c gen_context(system_u:object_r:random_device_t,s0) 187 /dev/\.static/dev/raw1394.* -c gen_context(system_u:object_r:v4l_device_t,s0) 188 /dev/\.static/dev/(misc/)?rtc[0-9]* -c gen_context(system_u:object_r:clock_device_t,s0) 189 /dev/\.static/dev/sequencer -c gen_context(system_u:object_r:sound_device_t,s0) 190 /dev/\.static/dev/sequencer2 -c gen_context(system_u:object_r:sound_device_t,s0) 191 /dev/\.static/dev/smpte.* -c gen_context(system_u:object_r:sound_device_t,s0) 192 /dev/\.static/dev/smu -c gen_context(system_u:object_r:power_device_t,s0) 193 /dev/\.static/dev/srnd[0-7] -c gen_context(system_u:object_r:sound_device_t,s0) 194 /dev/\.static/dev/snapshot -c gen_context(system_u:object_r:apm_bios_t,s0) 195 /dev/\.static/dev/sndstat -c gen_context(system_u:object_r:sound_device_t,s0) 196 /dev/\.static/dev/sonypi -c gen_context(system_u:object_r:v4l_device_t,s0) 197 /dev/\.static/dev/tlk[0-3] -c gen_context(system_u:object_r:v4l_device_t,s0) 198 /dev/\.static/dev/urandom -c gen_context(system_u:object_r:urandom_device_t,s0) 199 /dev/\.static/dev/usbmon[0-9]+ -c gen_context(system_u:object_r:usb_device_t,s0) 200 /dev/\.static/dev/usbdev.* -c gen_context(system_u:object_r:usb_device_t,s0) 201 /dev/\.static/dev/usb[0-9]+ -c gen_context(system_u:object_r:usb_device_t,s0) 202 /dev/\.static/dev/usblp.* -c gen_context(system_u:object_r:printer_device_t,s0) 203 /dev/\.static/dev/vbi.* -c gen_context(system_u:object_r:v4l_device_t,s0) 204 /dev/\.static/dev/vmmon -c gen_context(system_u:object_r:vmware_device_t,s0) 205 /dev/\.static/dev/vmnet.* -c gen_context(system_u:object_r:vmware_device_t,s0) 206 /dev/\.static/dev/video.* -c gen_context(system_u:object_r:v4l_device_t,s0) 207 /dev/\.static/dev/vttuner -c gen_context(system_u:object_r:v4l_device_t,s0) 208 /dev/\.static/dev/vtx.* -c gen_context(system_u:object_r:v4l_device_t,s0) 209 /dev/\.static/dev/watchdog -c gen_context(system_u:object_r:watchdog_device_t,s0) 210 /dev/\.static/dev/winradio. -c gen_context(system_u:object_r:v4l_device_t,s0) 211 /dev/\.static/dev/z90crypt -c gen_context(system_u:object_r:crypt_device_t,s0) 212 /dev/\.static/dev/zero -c gen_context(system_u:object_r:zero_device_t,s0) 213 /dev/\.static/dev/bus/usb/.*/[0-9]+ -c gen_context(system_u:object_r:usb_device_t,s0) 214 /dev/\.static/dev/cmx.* -c gen_context(system_u:object_r:smartcard_device_t,s0) 215 /dev/\.static/dev/cpu/.* -c gen_context(system_u:object_r:cpu_device_t,s0) 216 /dev/\.static/dev/cpu/mtrr -c gen_context(system_u:object_r:mtrr_device_t,s0) 217 /dev/\.static/dev/dri/.+ -c gen_context(system_u:object_r:dri_device_t,s0) 218 /dev/\.static/dev/dvb/.* -c gen_context(system_u:object_r:v4l_device_t,s0) 219 /dev/\.static/dev/input/.*mouse.* -c gen_context(system_u:object_r:mouse_device_t,s0) 220 /dev/\.static/dev/input/event.* -c gen_context(system_u:object_r:event_device_t,s0) 221 /dev/\.static/dev/input/mice -c gen_context(system_u:object_r:mouse_device_t,s0) 222 /dev/\.static/dev/input/js.* -c gen_context(system_u:object_r:mouse_device_t,s0) 223 /dev/\.static/dev/mapper/control -c gen_context(system_u:object_r:lvm_control_t,s0) 224 /dev/\.static/dev/pts(/.*)? <<none>> 225 /dev/\.static/dev/s(ou)?nd/.* -c gen_context(system_u:object_r:sound_device_t,s0) 226 /dev/\.static/dev/usb/dc2xx.* -c gen_context(system_u:object_r:scanner_device_t,s0) 227 /dev/\.static/dev/usb/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) 228 /dev/\.static/dev/usb/mdc800.* -c gen_context(system_u:object_r:scanner_device_t,s0) 229 /dev/\.static/dev/usb/scanner.* -c gen_context(system_u:object_r:scanner_device_t,s0) 230 /dev/\.static/dev/xen/blktap.* -c gen_context(system_u:object_r:xen_device_t,s0) 231 /dev/\.static/dev/xen/evtchn -c gen_context(system_u:object_r:xen_device_t,s0) 232 ') trunk/montavista/refpolicy/policy/modules/kernel/storage.fc
r97 r98 68 68 69 69 /dev/usb/rio500 -c gen_context(system_u:object_r:removable_device_t,s0) 70 71 ifdef(`distro_montavista',` 72 /dev/\.static/dev/n?(raw)?[qr]ft[0-3] -c gen_context(system_u:object_r:tape_device_t,s0) 73 /dev/\.static/dev/n?[hs]t[0-9].* -c gen_context(system_u:object_r:tape_device_t,s0) 74 /dev/\.static/dev/n?z?qft[0-3] -c gen_context(system_u:object_r:tape_device_t,s0) 75 /dev/\.static/dev/n?osst[0-3].* -c gen_context(system_u:object_r:tape_device_t,s0) 76 /dev/\.static/dev/n?pt[0-9]+ -c gen_context(system_u:object_r:tape_device_t,s0) 77 /dev/\.static/dev/n?tpqic[12].* -c gen_context(system_u:object_r:tape_device_t,s0) 78 /dev/\.static/dev/[shmx]d[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 79 /dev/\.static/dev/aztcd -b gen_context(system_u:object_r:removable_device_t,s0) 80 /dev/\.static/dev/bpcd -b gen_context(system_u:object_r:removable_device_t,s0) 81 /dev/\.static/dev/cdu.* -b gen_context(system_u:object_r:removable_device_t,s0) 82 /dev/\.static/dev/cm20.* -b gen_context(system_u:object_r:removable_device_t,s0) 83 /dev/\.static/dev/dasd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 84 /dev/\.static/dev/dm-[0-9]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 85 /dev/\.static/dev/fd[^/]+ -b gen_context(system_u:object_r:removable_device_t,s0) 86 /dev/\.static/dev/flash[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 87 /dev/\.static/dev/gscd -b gen_context(system_u:object_r:removable_device_t,s0) 88 /dev/\.static/dev/hitcd -b gen_context(system_u:object_r:removable_device_t,s0) 89 /dev/\.static/dev/ht[0-1] -b gen_context(system_u:object_r:tape_device_t,s0) 90 /dev/\.static/dev/initrd -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 91 /dev/\.static/dev/jsfd -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 92 /dev/\.static/dev/jsflash -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 93 /dev/\.static/dev/loop.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 94 /dev/\.static/dev/lvm -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 95 /dev/\.static/dev/mcdx? -b gen_context(system_u:object_r:removable_device_t,s0) 96 /dev/\.static/dev/megadev.* -c gen_context(system_u:object_r:removable_device_t,s0) 97 /dev/\.static/dev/mmcblk.* -b gen_context(system_u:object_r:removable_device_t,s0) 98 /dev/\.static/dev/nb[^/]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 99 /dev/\.static/dev/optcd -b gen_context(system_u:object_r:removable_device_t,s0) 100 /dev/\.static/dev/p[fg][0-3] -b gen_context(system_u:object_r:removable_device_t,s0) 101 /dev/\.static/dev/pcd[0-3] -b gen_context(system_u:object_r:removable_device_t,s0) 102 /dev/\.static/dev/pd[a-d][^/]* -b gen_context(system_u:object_r:removable_device_t,s0) 103 /dev/\.static/dev/pg[0-3] -c gen_context(system_u:object_r:removable_device_t,s0) 104 /dev/\.static/dev/ram.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 105 /dev/\.static/dev/rawctl -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 106 /dev/\.static/dev/rd.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 107 /dev/\.static/dev/s(cd|r)[^/]* -b gen_context(system_u:object_r:removable_device_t,s0) 108 /dev/\.static/dev/sbpcd.* -b gen_context(system_u:object_r:removable_device_t,s0) 109 /dev/\.static/dev/sg[0-9]+ -c gen_context(system_u:object_r:scsi_generic_device_t,s0) 110 /dev/\.static/dev/sjcd -b gen_context(system_u:object_r:removable_device_t,s0) 111 /dev/\.static/dev/sonycd -b gen_context(system_u:object_r:removable_device_t,s0) 112 /dev/\.static/dev/tape.* -c gen_context(system_u:object_r:tape_device_t,s0) 113 /dev/\.static/dev/tw[a-z][^/]+ -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 114 /dev/\.static/dev/ub[a-z][^/]+ -b gen_context(system_u:object_r:removable_device_t,mls_systemhigh) 115 /dev/\.static/dev/ubd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 116 /dev/\.static/dev/xvd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 117 /dev/\.static/dev/ataraid/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 118 /dev/\.static/dev/cciss/[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 119 /dev/\.static/dev/fuse -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 120 /dev/\.static/dev/floppy/[^/]* -b gen_context(system_u:object_r:removable_device_t,s0) 121 /dev/\.static/dev/i2o/hd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 122 /dev/\.static/dev/ida/[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 123 /dev/\.static/dev/md/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 124 /dev/\.static/dev/mapper/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 125 /dev/\.static/dev/raw/raw[0-9]+ -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 126 /dev/\.static/dev/scramdisk/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) 127 /dev/\.static/dev/usb/rio500 -c gen_context(system_u:object_r:removable_device_t,s0) 128 ') trunk/montavista/refpolicy/policy/modules/kernel/terminal.fc
r97 r98 38 38 /lib/udev/devices/console -c gen_context(system_u:object_r:console_device_t,s0) 39 39 ') 40 41 ifdef(`distro_montavista',` 42 /dev/\.static/dev/.*tty[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) 43 /dev/\.static/dev/[pt]ty[a-ep-z][0-9a-f] -c gen_context(system_u:object_r:bsdpty_device_t,s0) 44 /dev/\.static/dev/adb.* -c gen_context(system_u:object_r:tty_device_t,s0) 45 /dev/\.static/dev/capi.* -c gen_context(system_u:object_r:tty_device_t,s0) 46 /dev/\.static/dev/console -c gen_context(system_u:object_r:console_device_t,s0) 47 /dev/\.static/dev/cu.* -c gen_context(system_u:object_r:tty_device_t,s0) 48 /dev/\.static/dev/dcbri[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0) 49 /dev/\.static/dev/hvc.* -c gen_context(system_u:object_r:tty_device_t,s0) 50 /dev/\.static/dev/hvsi.* -c gen_context(system_u:object_r:tty_device_t,s0) 51 /dev/\.static/dev/ircomm[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0) 52 /dev/\.static/dev/ip2[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) 53 /dev/\.static/dev/isdn.* -c gen_context(system_u:object_r:tty_device_t,s0) 54 /dev/\.static/dev/ptmx -c gen_context(system_u:object_r:ptmx_t,s0) 55 /dev/\.static/dev/rfcomm[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0) 56 /dev/\.static/dev/tty -c gen_context(system_u:object_r:devtty_t,s0) 57 /dev/\.static/dev/ttySG.* -c gen_context(system_u:object_r:tty_device_t,s0) 58 /dev/\.static/dev/xvc[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) 59 /dev/\.static/dev/pty/.* -c gen_context(system_u:object_r:bsdpty_device_t,s0) 60 /dev/\.static/dev/pts -d gen_context(system_u:object_r:devpts_t,s0-mls_systemhigh) 61 /dev/\.static/dev/tts/[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) 62 /dev/\.static/dev/usb/tty.* -c gen_context(system_u:object_r:usbtty_device_t,s0) 63 /dev/\.static/dev/vcc?/.* -c gen_context(system_u:object_r:tty_device_t,s0) 64 /dev/\.static/dev/vcs[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) 65 /dev/\.static/dev/xvc[0-9]* -c gen_context(system_u:object_r:tty_device_t,s0) 66 ') trunk/montavista/refpolicy/policy/modules/services/gpm.fc
r97 r98 6 6 7 7 /usr/sbin/gpm -- gen_context(system_u:object_r:gpm_exec_t,s0) 8 9 ifdef(`distro_montavista',` 10 /dev/\.static/dev/gpmctl -s gen_context(system_u:object_r:gpmctl_t,s0) 11 /dev/\.static/dev/gpmdata -p gen_context(system_u:object_r:gpmctl_t,s0) 12 ') trunk/montavista/refpolicy/policy/modules/services/lpd.fc
r97 r98 3 3 # 4 4 /dev/printer -s gen_context(system_u:object_r:printer_t,s0) 5 6 ifdef(`distro_montavista',` 7 /dev/\.static/dev/printer -s gen_context(system_u:object_r:printer_t,s0) 8 ') 5 9 6 10 # trunk/montavista/refpolicy/policy/modules/services/xserver.fc
r97 r98 16 16 # 17 17 /dev/xconsole -p gen_context(system_u:object_r:xconsole_device_t,s0) 18 19 ifdef(`distro_montavista',` 20 /dev/\.static/dev/xconsole -p gen_context(system_u:object_r:xconsole_device_t,s0) 21 ') 18 22 19 23 # trunk/montavista/refpolicy/policy/modules/system/init.fc
r97 r98 23 23 # 24 24 /dev/initctl -p gen_context(system_u:object_r:initctl_t,s0) 25 26 ifdef(`distro_montavista',` 27 /dev/\.static/dev/initctl -p gen_context(system_u:object_r:initctl_t,s0) 28 ') 25 29 26 30 # trunk/montavista/refpolicy/policy/modules/system/logging.fc
r97 r98 1 1 /dev/log -s gen_context(system_u:object_r:devlog_t,s0) 2 3 ifdef(`distro_montavista',` 4 /dev/\.static/dev/log -s gen_context(system_u:object_r:devlog_t,s0) 5 ') 2 6 3 7 /etc/audit(/.*)? gen_context(system_u:object_r:auditd_etc_t,mls_systemhigh) trunk/montavista/refpolicy/policy/modules/system/udev.fc
r97 r98 4 4 /dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0) 5 5 /dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0) 6 7 ifdef(`distro_montavista',` 8 /dev/\.static/dev/\.udev(/.*)? -- gen_context(system_u:object_r:udev_tbl_t,s0) 9 /dev/\.static/dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0) 10 /dev/\.static/dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0) 11 ') 6 12 7 13 /etc/dev\.d/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0) trunk/montavista/refpolicy/policy/modules/system/xen.fc
r97 r98 1 1 /dev/xen/tapctrl.* -p gen_context(system_u:object_r:xenctl_t,s0) 2 3 ifdef(`distro_montavista',` 4 /dev/\.static/dev/xen/tapctrl.* -p gen_context(system_u:object_r:xenctl_t,s0) 5 ') 2 6 3 7 /usr/bin/virsh -- gen_context(system_u:object_r:xm_exec_t,s0)
