Hu
ee9959537f
- %selinux_relabel_post should not relabel files in
transactional systems in %post as the policy is not loaded
into the kernel directly after install, instead the relabelling
will happen on the next boot
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=276
55 lines
2.3 KiB
Plaintext
55 lines
2.3 KiB
Plaintext
allow_auditadm_exec_content auditadm_exec_content
|
|
allow_console_login login_console_enabled
|
|
allow_cvs_read_shadow cvs_read_shadow
|
|
allow_daemons_dump_core daemons_dump_core
|
|
allow_daemons_use_tcp_wrapper daemons_use_tcp_wrapper
|
|
allow_daemons_use_tty daemons_use_tty
|
|
allow_domain_fd_use domain_fd_use
|
|
allow_execheap selinuxuser_execheap
|
|
allow_execmod selinuxuser_execmod
|
|
allow_execstack selinuxuser_execstack
|
|
allow_ftpd_anon_write ftpd_anon_write
|
|
allow_ftpd_full_access ftpd_full_access
|
|
allow_ftpd_use_cifs ftpd_use_cifs
|
|
allow_ftpd_use_nfs ftpd_use_nfs
|
|
allow_gssd_read_tmp gssd_read_tmp
|
|
allow_guest_exec_content guest_exec_content
|
|
allow_httpd_anon_write httpd_anon_write
|
|
allow_httpd_mod_auth_ntlm_winbind httpd_mod_auth_ntlm_winbind
|
|
allow_httpd_mod_auth_pam httpd_mod_auth_pam
|
|
allow_httpd_sys_script_anon_write httpd_sys_script_anon_write
|
|
allow_kerberos kerberos_enabled
|
|
allow_mplayer_execstack mplayer_execstack
|
|
allow_mount_anyfile mount_anyfile
|
|
allow_nfsd_anon_write nfsd_anon_write
|
|
allow_polyinstantiation polyinstantiation_enabled
|
|
allow_postfix_local_write_mail_spool postfix_local_write_mail_spool
|
|
allow_rsync_anon_write rsync_anon_write
|
|
allow_saslauthd_read_shadow saslauthd_read_shadow
|
|
allow_secadm_exec_content secadm_exec_content
|
|
allow_smbd_anon_write smbd_anon_write
|
|
allow_ssh_keysign ssh_keysign
|
|
allow_staff_exec_content staff_exec_content
|
|
allow_sysadm_exec_content sysadm_exec_content
|
|
allow_user_exec_content user_exec_content
|
|
allow_user_mysql_connect selinuxuser_mysql_connect_enabled
|
|
allow_user_postgresql_connect selinuxuser_postgresql_connect_enabled
|
|
allow_write_xshm xserver_clients_write_xshm
|
|
allow_xguest_exec_content xguest_exec_content
|
|
allow_xserver_execmem xserver_execmem
|
|
allow_ypbind nis_enabled
|
|
allow_zebra_write_config zebra_write_config
|
|
user_direct_dri selinuxuser_direct_dri_enabled
|
|
user_ping selinuxuser_ping
|
|
user_share_music selinuxuser_share_music
|
|
user_tcp_server selinuxuser_tcp_server
|
|
sepgsql_enable_pitr_implementation postgresql_can_rsync
|
|
sepgsql_enable_users_ddl postgresql_selinux_users_ddl
|
|
sepgsql_transmit_client_label postgresql_selinux_transmit_client_label
|
|
sepgsql_unconfined_dbadm postgresql_selinux_unconfined_dbadm
|
|
clamd_use_jit antivirus_use_jit
|
|
amavis_use_jit antivirus_use_jit
|
|
logwatch_can_sendmail logwatch_can_network_connect_mail
|
|
puppet_manage_all_files puppetagent_manage_all_files
|
|
virt_sandbox_use_nfs virt_use_nfs
|