policy/modules/admin/anaconda.te

   1
   2 policy_module(anaconda, 1.3.0)
   3
   4 ########################################
   5 #
   6 # Declarations
   7 #
   8
   9 type anaconda_t;
  10 type anaconda_exec_t;
  11 domain_type(anaconda_t)
  12 domain_obj_id_change_exemption(anaconda_t)
  13 role system_r types anaconda_t;
  14
  15 ########################################
  16 #
  17 # Local policy
  18 #
  19
  20 allow anaconda_t self:process execmem;
  21
  22 kernel_domtrans_to(anaconda_t,anaconda_exec_t)
  23
  24 # Run other rc scripts in the anaconda_t domain.
  25 init_domtrans_script(anaconda_t)
  26
  27 libs_domtrans_ldconfig(anaconda_t)
  28
  29 logging_send_syslog_msg(anaconda_t)
  30
  31 modutils_domtrans_insmod(anaconda_t)
  32
  33 seutil_domtrans_semanage(anaconda_t)
  34
  35 unconfined_domain(anaconda_t)
  36
  37 unprivuser_home_dir_filetrans_home_content(anaconda_t,{ dir file lnk_file fifo_file sock_file })
  38
  39 optional_policy(`
  40         dmesg_domtrans(anaconda_t)
  41 ')
  42
  43 optional_policy(`
  44         kudzu_domtrans(anaconda_t)
  45 ')
  46
  47 optional_policy(`
  48         rpm_domtrans(anaconda_t)
  49         rpm_domtrans_script(anaconda_t)
  50 ')
  51
  52 optional_policy(`
  53         ssh_domtrans_keygen(anaconda_t)
  54 ')
  55
  56 optional_policy(`
  57         udev_domtrans(anaconda_t)
  58 ')
  59
  60 optional_policy(`
  61         usermanage_domtrans_admin_passwd(anaconda_t)
  62 ')