|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21585/root/usr/share/selinux/targeted/ |
Upload File : |
| | SE Linux Module ccs 1.0.0 . . $ netlink_audit_socket nlmsg_relay
append bind connect create write relabelfrom ioctl name_bind nlmsg_readpriv nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read
tcp_socket
append bind connect create write relabelfrom
acceptfrom connectto ioctl name_bind node_bind newconn sendto recv_msg send_msg getattr setattr accept getopt name_connect read setopt shutdown recvfrom lock relabelto
listen
msgq associate create write unix_read destroy getattr setattr read
enqueue
unix_write dir rmdir
append create execute write relabelfrom link unlink ioctl remove_name getattr setattr add_name reparent read
rename search lock relabelto mounton quotaon swapon blk_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon
chr_file
append create execute write relabelfrom link unlink ioctl
entrypoint getattr setattr execmod read
rename lock relabelto execute_no_trans mounton quotaon swapon ipc associate create write unix_read destroy getattr setattr read
unix_write lnk_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon process getcap setcap sigstop sigchld share execheap
setcurrent setfscreate setkeycreate siginh
dyntransition
transition fork
getsession
noatsecure sigkill signull setrlimit getattr getsched setexec
setsched getpgid
setpgid ptrace execstack rlimitinh
setsockcreate signal execmem fd use * packet flow_out send recv relabelto flow_in socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
fifo_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon file
append create execute write relabelfrom link unlink ioctl
entrypoint getattr setattr execmod read
rename lock relabelto execute_no_trans mounton quotaon swapon node
rawip_recv tcp_recv udp_recv
rawip_send tcp_send udp_send dccp_recv dccp_send enforce_dest ! netlink_nflog_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen + key create write view link setattr read search netlink_tcpdiag_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read unix_stream_socket
append bind connect create write relabelfrom
acceptfrom connectto ioctl name_bind newconn sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen netlink_route_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read
shm associate create write unix_read destroy getattr setattr read
lock
unix_write # netlink_selinux_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
capability setpcap fowner sys_boot sys_tty_config net_raw sys_admin
sys_chroot
sys_module sys_rawio dac_override ipc_owner kill dac_read_search sys_pacct
net_broadcast net_bind_service sys_nice sys_time fsetid mknod setgid setuid lease
net_admin audit_write
linux_immutable
sys_ptrace
audit_control ipc_lock sys_resource chown % netlink_ip6fw_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read , dccp_socket
append bind connect create write relabelfrom ioctl name_bind node_bind sendto recv_msg send_msg getattr setattr accept getopt name_connect read setopt shutdown recvfrom lock relabelto
listen netlink_firewall_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read sock_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon unix_dgram_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen ( netlink_kobject_uevent_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
filesystem associate
quotaget relabelfrom
transition getattr quotamod mount remount unmount relabelto " netlink_xfrm_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read & netlink_dnrt_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen . nscd shmemserv gethost getgrp shmemhost shmempwd getpwd getserv shmemgrp
key_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen netif
rawip_recv tcp_recv udp_recv
rawip_send tcp_send udp_send dccp_recv dccp_send
packet_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
- memprotect mmap_zero msg send receive
udp_socket
append bind connect create write relabelfrom ioctl name_bind node_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen ) appletalk_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen rawip_socket
append bind connect create write relabelfrom ioctl name_bind node_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen ' association
setcontext sendto recvfrom polmatch netlink_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen sem associate create write unix_read destroy getattr setattr read
unix_write system ipc_info syslog_read syslog_console
syslog_mod security compute_member compute_user compute_create
setenforce
check_context setcheckreqprot compute_relabel setbool load_policy
setsecparam
compute_av object_r@ @ @ system_r@ @ @ @ @ L L @ @ direct_init
9 @ etc_runtime_t
$ @ ccs_var_log_t @ nscd_var_run_t @ @ F file_type @ @ exec_type G @ dns_client_packet_t 3 @ node_type 1 @ unlabeled_t 4 @ port_type @ selinux_config_t
@ @ entry_type @ device_t C @ devlog_t @ devpts_t @ initrc_t D @ locale_t H @ avahi_t @ ccs_t 8 @ etc_t L @ file_t = @ ld_so_t + @ proc_t @ rpm_t # @ tmpfs_t @ console_device_t 0 @ base_ro_file_type @ @ direct_init_entry
@ ccs_exec_t
> @ ld_so_cache_t ) @ aisexec_t
2 @ netif_type @ initrc_devpts_t ( @ var_log_t @ direct_run_init I @ avahi_var_run_t
! @ ccs_var_lib_t
% @ ccs_var_run_t
E @ net_conf_t 7 @ urandom_device_t - @ sysctl_kernel_t
@ @ polymember K @ tty_device_t * @ aisexec_var_run_t ; @ initrc_tmp_t 6 @ netsupport_port_t , @ sysctl_t / @ bin_t @ init_t < @ lib_t @ nscd_t . @ sbin_t ? @ shlib_t @ tmp_t A @ usr_t @ var_t @ @ daemon " @ @ logfile & @ @ pidfile @ @ tmpfile @ cluster_conf_t 5 @ cluster_port_t J @ unpriv_userdomain
F @ dns_port_t @ @ textrel_shlib_t @ ccs_tmpfs_t
@ @ initrc_domain
@ security_t @ @ @ tmpfsfile
@ unconfined_t @ ccs_tmp_t B @ syslogd_t ' @ var_lib_t @ var_run_t
: @ configfile @ @ domain ccs_disable_trans s0 @ c0 c1023 @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ H @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ X @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @
W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ X @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ X @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ ?A @ @ @ @ @ ? @ @ @ @ @ ?A @ @ @ @ @ ? @ @ @ @ @ ? @ @ @ @ @ ? @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ > @ @ @ @ @ @ W @ @ @ @ @ @ > @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ > @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ > @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ ! ! @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ $ $ $ @ @ @ @ @ @ W @ @ @ @ @ @ > @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ % % % @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ * @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @
S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ ? @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S S @ @ @ @ @ ? @ @ @ @ @ ? @ @ @ @ @ @ * @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ * @ @ @ @ @ @ @ * @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @
W @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ ǟ@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ F @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ǟ@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
S @ @ @ @ @ @ ϟ@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ן@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ 矹@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ ? @ @ @ @ @ @ . @ @ @ @ @ @ @ @ @ @ @ @ . @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ . @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ǟ@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ ? @ @ @ @ @ @ . @ @ @ @ @ @ @ @ @ @ @ @ . @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ . @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ǟ@ @ @ @ @ @ @ - @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ ? @ @ ? @ @ @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ? @ @ @ @ ? @ @ @ @ @ @ ? @ @ @ @ ? @ @ ? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ . netlink_audit_socket
tcp_socket msgq dir blk_file chr_file ipc lnk_file process fd packet socket fifo_file file node netlink_nflog_socket key netlink_tcpdiag_socket unix_stream_socket netlink_route_socket shm netlink_selinux_socket
capability netlink_ip6fw_socket dccp_socket netlink_firewall_socket sock_file unix_dgram_socket netlink_kobject_uevent_socket
filesystem netlink_xfrm_socket netlink_dnrt_socket nscd
key_socket netif
packet_socket
memprotect msg
udp_socket appletalk_socket rawip_socket association netlink_socket sem system security object_r system_r L direct_init
etc_runtime_t
ccs_var_log_t nscd_var_run_t file_type exec_type dns_client_packet_t node_type unlabeled_t port_type selinux_config_t
entry_type device_t devlog_t devpts_t initrc_t locale_t avahi_t ccs_t etc_t file_t ld_so_t proc_t rpm_t tmpfs_t console_device_t base_ro_file_type direct_init_entry
ccs_exec_t
ld_so_cache_t aisexec_t
netif_type initrc_devpts_t var_log_t direct_run_init avahi_var_run_t
ccs_var_lib_t
ccs_var_run_t
net_conf_t urandom_device_t sysctl_kernel_t
polymember tty_device_t aisexec_var_run_t initrc_tmp_t netsupport_port_t sysctl_t bin_t init_t lib_t nscd_t sbin_t shlib_t tmp_t usr_t var_t daemon logfile pidfile tmpfile cluster_conf_t cluster_port_t unpriv_userdomain
dns_port_t textrel_shlib_t ccs_tmpfs_t
initrc_domain
security_t tmpfsfile unconfined_t ccs_tmp_t syslogd_t var_lib_t var_run_t
configfile domain ccs_disable_trans s0 c0 c1023 |#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#
#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#
#
# unix domain socket patterns
#
########################################
#
# Macros for switching between source policy
# and loadable policy module support
#
##############################
#
# For adding the module statement
#
##############################
#
# For use in interfaces, to optionally insert a require block
#
# helper function, since m4 wont expand macros
# if a line is a comment (#):
##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#
##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#
##############################
#
# Optional policy handling
#
##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#
##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.
##############################
#
# Tunable declaration
#
##############################
#
# Tunable policy handling
#
########################################
#
# Helper macros
#
#
# shiftn(num,list...)
#
# shift the list num times
#
#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#
#
# __endline__
#
# dummy macro to insert a newline. used for
# errprint, so the close parentheses can be
# indented correctly.
#
########################################
#
# refpolwarn(message)
#
# print a warning message
#
########################################
#
# refpolerr(message)
#
# print an error message. does not
# make anything fail.
#
########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#
########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#
########################################
#
# can_exec(domain,executable)
#
########################################
#
# gen_bool(name,default_value)
#
#
# Specified domain transition patterns
#
# compatibility:
#
# Automatic domain transition patterns
#
# compatibility:
#
# Other process permissions
#
########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#
########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#
########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#
########################################
#
# Basic level names for system low and high
#
########################################
#
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.
#
# All directory and file classes
#
#
# All non-directory file classes.
#
#
# Non-device file classes.
#
#
# Device file classes.
#
#
# All socket classes.
#
#
# Datagram socket classes.
#
#
# Stream socket classes.
#
#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#
########################################
#
# Macros for sets of permissions
#
#
# Permissions for getting file attributes.
#
#
# Permissions for executing files.
#
#
# Permissions for reading files and their attributes.
#
#
# Permissions for reading and executing files.
#
#
# Permissions for reading and appending to files.
#
#
# Permissions for linking, unlinking and renaming files.
#
#
# Permissions for creating lnk_files.
#
#
# Permissions for creating and using files.
#
#
# Permissions for reading directories and their attributes.
#
#
# Permissions for reading and writing directories and their attributes.
#
#
# Permissions for reading and adding names to directories.
#
#
# Permissions for creating and using directories.
#
#
# Permissions to mount and unmount file systems.
#
#
# Permissions for using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for using stream sockets.
#
#
# Permissions for creating and using stream sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using netlink sockets.
#
#
# Permissions for using netlink sockets for operations that modify state.
#
#
# Permissions for using netlink sockets for operations that observe state.
#
#
# Permissions for sending all signals.
#
#
# Permissions for sending and receiving network packets.
#
#
# Permissions for using System V IPC
#
########################################
#
# New permission sets
#
#
# Directory
#
#
# File
#
#
# Use (read and write) terminals
#
#
# Sockets
#
########################################
#
# New permission sets
#
#
# Directory (dir)
#
#
# Regular file (file)
#
#
# Symbolic link (lnk_file)
#
#
# (Un)named Pipes/FIFOs (fifo_file)
#
#
# (Un)named Sockets (sock_file)
#
#
# Block device nodes (blk_file)
#
#
# Character device nodes (chr_file)
#
########################################
#
# Special permission sets
#
#
# Use (read and write) terminals
#
#
# Sockets
#
#
# Directory patterns (dir)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. directory type
#
#
# Regular file patterns (file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Symbolic link patterns (lnk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# (Un)named Pipes/FIFO patterns (fifo_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# (Un)named sockets patterns (sock_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Block device node patterns (blk_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# Character device node patterns (chr_file)
#
# Parameters:
# 1. domain type
# 2. container (directory) type
# 3. file type
#
#
# File type_transition patterns
#
# pattern(domain,dirtype,newtype,class(es))
#
#
# unix domain socket patterns
#
########################################
#
# Macros for switching between source policy
# and loadable policy module support
#
##############################
#
# For adding the module statement
#
##############################
#
# For use in interfaces, to optionally insert a require block
#
# helper function, since m4 wont expand macros
# if a line is a comment (#):
##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#
##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#
##############################
#
# Optional policy handling
#
##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#
##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.
##############################
#
# Tunable declaration
#
##############################
#
# Tunable policy handling
#
########################################
#
# Helper macros
#
#
# shiftn(num,list...)
#
# shift the list num times
#
#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#
#
# __endline__
#
# dummy macro to insert a newline. used for
# errprint, so the close parentheses can be
# indented correctly.
#
########################################
#
# refpolwarn(message)
#
# print a warning message
#
########################################
#
# refpolerr(message)
#
# print an error message. does not
# make anything fail.
#
########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#
########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#
########################################
#
# can_exec(domain,executable)
#
########################################
#
# gen_bool(name,default_value)
#
#
# Specified domain transition patterns
#
# compatibility:
#
# Automatic domain transition patterns
#
# compatibility:
#
# Other process permissions
#
########################################
#
# gen_cats(N)
#
# declares categores c0 to c(N-1)
#
########################################
#
# gen_sens(N)
#
# declares sensitivites s0 to s(N-1) with dominance
# in increasing numeric order with s0 lowest, s(N-1) highest
#
########################################
#
# gen_levels(N,M)
#
# levels from s0 to (N-1) with categories c0 to (M-1)
#
########################################
#
# Basic level names for system low and high
#
########################################
#
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.
#
# All directory and file classes
#
#
# All non-directory file classes.
#
#
# Non-device file classes.
#
#
# Device file classes.
#
#
# All socket classes.
#
#
# Datagram socket classes.
#
#
# Stream socket classes.
#
#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#
########################################
#
# Macros for sets of permissions
#
#
# Permissions for getting file attributes.
#
#
# Permissions for executing files.
#
#
# Permissions for reading files and their attributes.
#
#
# Permissions for reading and executing files.
#
#
# Permissions for reading and appending to files.
#
#
# Permissions for linking, unlinking and renaming files.
#
#
# Permissions for creating lnk_files.
#
#
# Permissions for creating and using files.
#
#
# Permissions for reading directories and their attributes.
#
#
# Permissions for reading and writing directories and their attributes.
#
#
# Permissions for reading and adding names to directories.
#
#
# Permissions for creating and using directories.
#
#
# Permissions to mount and unmount file systems.
#
#
# Permissions for using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for using stream sockets.
#
#
# Permissions for creating and using stream sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using netlink sockets.
#
#
# Permissions for using netlink sockets for operations that modify state.
#
#
# Permissions for using netlink sockets for operations that observe state.
#
#
# Permissions for sending all signals.
#
#
# Permissions for sending and receiving network packets.
#
#
# Permissions for using System V IPC
#
########################################
#
# New permission sets
#
#
# Directory
#
#
# File
#
#
# Use (read and write) terminals
#
#
# Sockets
#
########################################
#
# New permission sets
#
#
# Directory (dir)
#
#
# Regular file (file)
#
#
# Symbolic link (lnk_file)
#
#
# (Un)named Pipes/FIFOs (fifo_file)
#
#
# (Un)named Sockets (sock_file)
#
#
# Block device nodes (blk_file)
#
#
# Character device nodes (chr_file)
#
########################################
#
# Special permission sets
#
#
# Use (read and write) terminals
#
#
# Sockets
#
/etc/cluster(/.*)? system_u:object_r:cluster_conf_t:s0
/sbin/ccsd -- system_u:object_r:ccs_exec_t:s0
/var/run/cluster/ccsd\.pid -- system_u:object_r:ccs_var_run_t:s0
/var/run/cluster/ccsd\.sock -s system_u:object_r:ccs_var_run_t:s0