Blob Blame History Raw
ifdef(`distro_redhat', `
/usr/share/system-config-network(/netconfig)?/[^/]+\.py -- system_u:object_r:bin_t
/etc/sysconfig/networking/profiles/.*/resolv\.conf -- system_u:object_r:net_conf_t
/etc/sysconfig/network-scripts/.*resolv\.conf -- system_u:object_r:net_conf_t
/usr/share/rhn/rhn_applet/applet\.py -- system_u:object_r:bin_t
/usr/share/rhn/rhn_applet/eggtrayiconmodule\.so -- system_u:object_r:shlib_t
/usr/share/rhn/rhn_applet/needed-packages\.py	--	system_u:object_r:bin_t
/usr/share/authconfig/authconfig-gtk\.py -- system_u:object_r:bin_t
/usr/share/hwbrowser/hwbrowser -- system_u:object_r:bin_t
/usr/share/system-config-httpd/system-config-httpd -- system_u:object_r:bin_t
/usr/share/system-config-services/system-config-services -- system_u:object_r:bin_t
/usr/share/system-logviewer/system-logviewer\.py -- system_u:object_r:bin_t
/usr/share/system-config-lvm/system-config-lvm.py -- system_u:object_r:bin_t
/usr/share/system-config-date/system-config-date\.py -- system_u:object_r:bin_t
/usr/share/system-config-display/system-config-display -- system_u:object_r:bin_t
/usr/share/system-config-keyboard/system-config-keyboard -- system_u:object_r:bin_t
/usr/share/system-config-language/system-config-language -- system_u:object_r:bin_t
/usr/share/system-config-mouse/system-config-mouse -- system_u:object_r:bin_t
/usr/share/system-config-netboot/system-config-netboot\.py -- system_u:object_r:bin_t
/usr/share/system-config-netboot/pxeos\.py -- system_u:object_r:bin_t
/usr/share/system-config-netboot/pxeboot\.py -- system_u:object_r:bin_t
/usr/share/system-config-nfs/system-config-nfs\.py -- system_u:object_r:bin_t
/usr/share/system-config-rootpassword/system-config-rootpassword -- system_u:object_r:bin_t
/usr/share/system-config-samba/system-config-samba\.py -- system_u:object_r:bin_t
/usr/share/system-config-securitylevel/system-config-securitylevel\.py -- system_u:object_r:bin_t
/usr/share/system-config-services/serviceconf\.py -- system_u:object_r:bin_t
/usr/share/system-config-soundcard/system-config-soundcard -- system_u:object_r:bin_t
/usr/share/system-config-users/system-config-users -- system_u:object_r:bin_t
/usr/share/switchdesk/switchdesk-gui\.py	--	system_u:object_r:bin_t
/usr/share/system-config-network/neat-control\.py	--	system_u:object_r:bin_t
/usr/share/system-config-nfs/nfs-export\.py	--	system_u:object_r:bin_t
/usr/share/pydict/pydict\.py	--	system_u:object_r:bin_t
/usr/share/cvs/contrib/rcs2log	--	system_u:object_r:bin_t
/usr/share/pwlib/make/ptlib-config --	system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexdir	--	system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexnam	--	system_u:object_r:bin_t
/usr/share/texmf/web2c/mktexupd	--	system_u:object_r:bin_t
/etc/rhgb(/.*)?		-d		system_u:object_r:mnt_t
/usr/share/ssl/misc(/.*)?		system_u:object_r:bin_t
#
# /emul/ia32-linux/usr
#
/emul(/.*)?				system_u:object_r:usr_t
/emul/ia32-linux/usr(/.*)?/lib(/.*)?		system_u:object_r:lib_t
/emul/ia32-linux/usr(/.*)?/lib/.*\.so(\.[^/]*)*		--	system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.so(\.[^/]*)*	--	system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.jar	--	system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/java/.*\.jsa	--	system_u:object_r:shlib_t
/emul/ia32-linux/usr(/.*)?/lib(/.*)?/ld-[^/]*\.so(\.[^/]*)* system_u:object_r:ld_so_t
/emul/ia32-linux/usr(/.*)?/bin(/.*)?		system_u:object_r:bin_t
/emul/ia32-linux/usr(/.*)?/Bin(/.*)?		system_u:object_r:bin_t
/emul/ia32-linux/usr(/.*)?/sbin(/.*)?		system_u:object_r:sbin_t
/emul/ia32-linux/usr/libexec(/.*)?		system_u:object_r:bin_t
# /emul/ia32-linux/lib
/emul/ia32-linux/lib(/.*)?					system_u:object_r:lib_t
/emul/ia32-linux/lib/.*\.so(\.[^/]*)*		--	system_u:object_r:shlib_t
/emul/ia32-linux/lib(/.*)?/ld-[^/]*\.so(\.[^/]*)*	--	system_u:object_r:ld_so_t
# /emul/ia32-linux/bin
/emul/ia32-linux/bin(/.*)?			system_u:object_r:bin_t
# /emul/ia32-linux/sbin
/emul/ia32-linux/sbin(/.*)?			system_u:object_r:sbin_t

ifdef(`dbusd.te', `', `
/var/run/dbus(/.*)?            system_u:object_r:system_dbusd_var_run_t
')

# The following are libraries with text relocations in need of execmod permissions
# Some of them should be fixed and removed from this list

# Fedora Core packages: gstreamer-plugins, compat-libstdc++, Glide3, libdv
# 	HelixPlayer, SDL, xorg-x11, xorg-x11-libs, Hermes, valgrind, openoffice.org-libs, httpd - php
/usr/lib/gstreamer-.*/libgstffmpeg\.so.*  -- system_u:object_r:texrel_shlib_t
/usr/lib/gstreamer-.*/libgsthermescolorspace\.so -- system_u:object_r:texrel_shlib_t
/usr/lib/gstreamer-.*/libgstmms\.so 	 -- system_u:object_r:texrel_shlib_t
/usr/lib/libstdc\+\+\.so\.2\.7\.2\.8 		-- system_u:object_r:texrel_shlib_t
/usr/lib/libg\+\+\.so\.2\.7\.2\.8		-- system_u:object_r:texrel_shlib_t
/usr/lib/libglide3\.so.* 			-- system_u:object_r:texrel_shlib_t
/usr/lib/libdv\.so.* 				-- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/oggfformat\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/theorarend\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/helix/plugins/vorbisrend\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/helix/codecs/colorcvt\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/helix/codecs/cvt1\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libSDL-.*\.so.*			-- system_u:object_r:texrel_shlib_t
/usr/X11R6/lib/modules/dri/.*\.so		-- system_u:object_r:texrel_shlib_t
/usr/X11R6/lib/libOSMesa\.so.*			-- system_u:object_r:texrel_shlib_t
/usr/X11R6/lib/libfglrx_gamma\.so.* 		--  system_u:object_r:texrel_shlib_t
/usr/lib/libHermes\.so.*			-- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/hp2ps				-- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/stage2			-- system_u:object_r:texrel_shlib_t
/usr/lib/valgrind/vg.*\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/program(/.*)?			system_u:object_r:bin_t
/usr/lib/.*/program/.*\.so.*			system_u:object_r:shlib_t
/usr/lib/.*/program/libicudata\.so.*		-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/program/libsts645li\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/program/libvclplug_gen645li\.so	-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/program/libwrp645li\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/program/libswd680li\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib(64)?/.*/program/librecentfile\.so 	--  system_u:object_r:texrel_shlib_t
/usr/lib(64)?/.*/program/libsvx680li\.so	--  system_u:object_r:texrel_shlib_t
/usr/lib(64)?/.*/program/libcomphelp4gcc3\.so  	--  system_u:object_r:texrel_shlib_t

# Fedora Extras packages: ladspa, imlib2, ocaml
/usr/lib/ladspa/analogue_osc_1416\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/bandpass_a_iir_1893\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/bandpass_iir_1892\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/butterworth_1902\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/fm_osc_1415\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/gsm_1215\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/gverb_1216\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/hermes_filter_1200\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/highpass_iir_1890\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/lowpass_iir_1891\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/notch_iir_1894\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/pitch_scale_1193\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/pitch_scale_1194\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc1_1425\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc2_1426\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc3_1427\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/sc4_1882\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/ladspa/se4_1883\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libImlib2\.so.* 			-- system_u:object_r:texrel_shlib_t
/usr/lib/ocaml/stublibs/dllnums\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/httpd/modules/libphp5\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/php/modules/.*\.so			-- system_u:object_r:texrel_shlib_t

# Livna.org packages: xmms-mp3, ffmpeg, xvidcore, xine-lib, gsm, lame
/usr/lib/xmms/Input/libmpg123\.so		-- system_u:object_r:texrel_shlib_t
/usr/lib/libpostproc\.so.*			-- system_u:object_r:texrel_shlib_t
/usr/lib/libavformat-.*\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libavcodec-.*\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libxvidcore\.so.*			-- system_u:object_r:texrel_shlib_t
/usr/lib/xine/plugins/.*\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libgsm\.so.*				-- system_u:object_r:texrel_shlib_t
/usr/lib/libmp3lame\.so.*			-- system_u:object_r:texrel_shlib_t

# Flash plugin, Macromedia
HOME_DIR/.*/plugins/libflashplayer\.so.*	-- system_u:object_r:texrel_shlib_t
/usr/lib/.*/plugins/libflashplayer\.so.*	-- system_u:object_r:texrel_shlib_t

# Jai, Sun Microsystems (Jpackage SPRM)
/usr/lib/libmlib_jai\.so			-- system_u:object_r:texrel_shlib_t
/usr/lib/libdivxdecore.so.0			-- system_u:object_r:texrel_shlib_t
/usr/lib/libdivxencore.so.0			-- system_u:object_r:texrel_shlib_t

# Java, Sun Microsystems (JPackage SRPM)
/usr/.*/jre/lib/i386/libdeploy.so		-- system_u:object_r:texrel_shlib_t

/usr(/.*)?/Reader/intellinux/plug_ins/.*\.api	-- system_u:object_r:shlib_t
/usr(/.*)?/Reader/intellinux/plug_ins/AcroForm\.api	-- system_u:object_r:texrel_shlib_t
/usr(/.*)?/Reader/intellinux/plug_ins/EScript\.api	-- system_u:object_r:texrel_shlib_t
/usr(/.*)?/Reader/intellinux/SPPlugins/ADMPlugin\.apl  --  system_u:object_r:texrel_shlib_t
')

ifdef(`distro_suse', `
/var/lib/samba/bin/.+					system_u:object_r:bin_t
/var/lib/samba/bin/.*\.so(\.[^/]*)*		-l	system_u:object_r:lib_t
/usr/lib/samba/classic/.*			--	system_u:object_r:bin_t
/usr/lib/samba/classic/[^/]*\.so(\.[^/]*)*	--	system_u:object_r:shlib_t
/success					--	system_u:object_r:etc_runtime_t
/etc/defkeymap\.map				--	system_u:object_r:etc_runtime_t
')