|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /usr/share/selinux/targeted/ |
Upload File : |
˙|ų ŽČ ˙|ų SE Linux Module razor 1.0.1 - - % netlink_audit_socket nlmsg_relay
append bind connect create write relabelfrom ioctl name_bind nlmsg_readpriv nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read
tcp_socket
append bind connect create write relabelfrom
acceptfrom connectto ioctl name_bind node_bind newconn sendto recv_msg send_msg getattr setattr accept getopt name_connect read setopt shutdown recvfrom lock relabelto
listen
msgq associate create write unix_read destroy getattr setattr read
enqueue
unix_write dir rmdir
append create execute write relabelfrom link unlink ioctl remove_name getattr setattr add_name reparent read
rename search lock relabelto mounton quotaon swapon blk_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon
chr_file
append create execute write relabelfrom link unlink ioctl
entrypoint getattr setattr execmod read
rename lock relabelto execute_no_trans mounton quotaon swapon ipc associate create write unix_read destroy getattr setattr read
unix_write lnk_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon process getcap setcap sigstop sigchld share execheap
setcurrent setfscreate setkeycreate siginh
dyntransition
transition fork
getsession
noatsecure sigkill signull setrlimit getattr getsched setexec
setsched getpgid
setpgid ptrace execstack rlimitinh signal execmem fd use + packet send recv relabelto socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
fifo_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon file
append create execute write relabelfrom link unlink ioctl
entrypoint getattr setattr execmod read
rename lock relabelto execute_no_trans mounton quotaon swapon node
rawip_recv tcp_recv udp_recv
rawip_send tcp_send udp_send enforce_dest " netlink_nflog_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen pax mprotect emutramp randmmap pageexec randexec segmexec , key create write view link setattr read search ! netlink_tcpdiag_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read unix_stream_socket
append bind connect create write relabelfrom
acceptfrom connectto ioctl name_bind newconn sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen netlink_route_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read
shm associate create write unix_read destroy getattr setattr read
lock
unix_write $ netlink_selinux_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
capability setpcap fowner sys_boot sys_tty_config net_raw sys_admin
sys_chroot
sys_module sys_rawio dac_override ipc_owner kill dac_read_search sys_pacct
net_broadcast net_bind_service sys_nice sys_time fsetid mknod setgid setuid lease
net_admin audit_write
linux_immutable
sys_ptrace
audit_control ipc_lock sys_resource chown & netlink_ip6fw_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read netlink_firewall_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read sock_file
append create execute write relabelfrom link unlink ioctl getattr setattr read
rename lock relabelto mounton quotaon swapon unix_dgram_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen ) netlink_kobject_uevent_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
filesystem associate
quotaget relabelfrom
transition getattr quotamod mount remount unmount relabelto # netlink_xfrm_socket
append bind connect create write relabelfrom ioctl name_bind nlmsg_write sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen
nlmsg_read ' netlink_dnrt_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen - nscd gethost getgrp shmemhost shmempwd getpwd shmemgrp
key_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen netif
rawip_recv tcp_recv udp_recv
rawip_send tcp_send udp_send
packet_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen msg send receive
udp_socket
append bind connect create write relabelfrom ioctl name_bind node_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen * appletalk_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen rawip_socket
append bind connect create write relabelfrom ioctl name_bind node_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen ( association
setcontext sendto recvfrom netlink_socket
append bind connect create write relabelfrom ioctl name_bind sendto recv_msg send_msg getattr setattr accept getopt read setopt shutdown recvfrom lock relabelto
listen sem associate create write unix_read destroy getattr setattr read
unix_write system ipc_info syslog_read syslog_console
syslog_mod security compute_member compute_user compute_create
setenforce
check_context setcheckreqprot compute_relabel setbool load_policy
setsecparam
compute_av object_r@ @ @ system_r@ @ @ @ @ D D
! @ etc_runtime_t D @ nscd_var_run_t > @ razor_var_lib_t @ @ "file_type @ @ exec_type - @ dns_client_packet_t @ node_type @ unlabeled_t @ proc_kcore_t 0 @ port_type ? @ razor_client_packet_t @ razor_exec_t @ selinux_config_t
@ @ entry_type " @ autofs_t @ device_t A @ devlog_t ) @ locale_t @ etc_t $ @ ld_so_t @ proc_t @ rpm_t = @ tmpfs_t 2 @ reserved_port_t B @ console_device_t 6 @ client_packet_t 3 @ reserved_port_type
% @ ld_so_cache_t
+ @ netif_type 8 @ razor_etc_t : @ razor_log_t
@ proc_mdstat_t
@ proc_net_t
@ var_log_t @ direct_run_init
* @ net_conf_t @ urandom_device_t @ random_device_t @ sysctl_kernel_t 9 @ @ usercanread 4 @ portmap_port_t @ razor_port_t @ sysctl_t / @ var_yp_t @ bin_t @ init_t # @ lib_t @ netif_t C @ nscd_t 1 @ port_t @ razor_t & @ shlib_t < @ tmp_t ( @ usr_t @ var_t ; @ @ logfile . @ unpriv_userdomain
, @ dns_port_t ' @ textrel_shlib_t @ proc_kmsg_t
@ security_t @ unconfined_t @ @ syslogd_t @ var_lib_t @ var_run_t 5 @ portmap_client_packet_t 7 @ server_packet_t @ @ domain allow_ypbind @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ ˙Ųđ @ @ @ @ @ @ @ @ @ @
W @ @ @ @ @ ?Î @ @ @ @ @ ?ū @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ˙ @ @ @ @ @ ˙ @ @ @ @ @ ˙ @ @ @ @ @ @ @ @ @ @ ?Î @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ > @ @ @ @ @ @ @ @ @ @ @ @ : @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ : @ @ @ @ @ @ > @ @ @ @ @ @ @ @ @ @ @ @ : @ @ @ @ @ ` @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ @ S @ @ @ @ @ @ ( @ @ @ @ @ @ + @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @
S @ @ @ @ @ @ S @ @ @ @ @ @
S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ ` @ S @ @ @ @ @ ` @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ S S @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ ?Î @ @ @ @ @ ?Î @ @ @ @ @ @ ( @ @ @ @ @ @ + @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ + @ @ @ @ @ @ + @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ?Î @ @ @ @ @ @ > @ @ @ @ @ @ @ @ @ @ @ @ : @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ : @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ > @ @ @ @ @ @ ( @ @ @ @ @ @ + @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @@ + @ @ @ @ @ @@ + @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ ˙˙˙˙˙ @ @ @ @ ū˙˙˙? ]@ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ "@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ˙˙˙˙˙ @ @ @ @ <ū˙˙˙? ]@ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
S @ @ @ ˙˙˙˙˙ @ @ @ @ Lū˙˙˙? ]@ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ˙˙˙˙˙ @ @ @ @ ū˙˙˙? ]@ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ˙˙˙˙˙ @ @ @ @ ˙˙˙˙? ]@ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @ ' @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ + @ @ @ @ @ @ @ + @ @ @ @ @ @ + @ @ @ @ @ @ + @ @ @ @ @ @ + @ @ @ @ @ @ + @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ + @ @ @ @ @ @ ( @ @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ ?Î @ @ @ @ @ ?ū @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ˙˙˙˙˙ @ @ @ @ ū˙˙˙˙]@ @ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ ?Î @ @ @ @ @ ?Î @ @ @ @ @ @ S @ @ @ @ @ @ @ @ @ @ @ @
W @ @ @ ˙˙˙˙˙ @ @ @ ū˙˙˙? Ũ@ @ @ @ @ , @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ ?Î @ @ @ @ @ @ @ @ @ @ @ @ @ - @ @ @ @ @ @ @ @ @ @ @ @ - 8 @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ S @ @ @ @ @ @ W @ @ @ @ @ @ @ @ @ ˙˙˙˙˙ @ @ @ ū˙˙˙? ]@ @ @ @ @ - @ @ ˙ @ @ ˙˙˙ @ @ @ @ ˙˙˙ @ @ ˙ @ @ ˙˙ @ @ ˙˙? @ @ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙ @ @ ˙˙ @ @ @ @ ? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙ @ @ @ @ ˙ @ @ ˙ @ @ ˙ @ @ ? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙? @ @ ˙˙˙ @ @ ˙˙˙ @ @ ˙˙? @ @ @ @ ˙˙? @ @ ˙˙? @ @ @ @ @ @ ? @ @ @ @ @ @ @ @ - netlink_audit_socket
tcp_socket msgq dir blk_file chr_file ipc lnk_file process fd packet socket fifo_file file node netlink_nflog_socket pax key netlink_tcpdiag_socket unix_stream_socket netlink_route_socket shm netlink_selinux_socket
capability netlink_ip6fw_socket netlink_firewall_socket sock_file unix_dgram_socket netlink_kobject_uevent_socket
filesystem netlink_xfrm_socket netlink_dnrt_socket nscd
key_socket netif
packet_socket msg
udp_socket appletalk_socket rawip_socket association netlink_socket sem system security object_r system_r D
etc_runtime_t nscd_var_run_t razor_var_lib_t file_type exec_type dns_client_packet_t node_type unlabeled_t proc_kcore_t port_type razor_client_packet_t razor_exec_t selinux_config_t
entry_type autofs_t device_t devlog_t locale_t etc_t ld_so_t proc_t rpm_t tmpfs_t reserved_port_t console_device_t client_packet_t reserved_port_type
ld_so_cache_t
netif_type razor_etc_t razor_log_t
proc_mdstat_t
proc_net_t var_log_t direct_run_init
net_conf_t urandom_device_t random_device_t sysctl_kernel_t usercanread portmap_port_t razor_port_t sysctl_t var_yp_t bin_t init_t lib_t netif_t nscd_t port_t razor_t shlib_t tmp_t usr_t var_t logfile unpriv_userdomain
dns_port_t textrel_shlib_t proc_kmsg_t
security_t unconfined_t syslogd_t var_lib_t var_run_t portmap_client_packet_t server_packet_t domain allow_ypbind ˙|ų########################################
#
# Macros for switching between source policy
# and loadable policy module support
#
##############################
#
# For adding the module statement
#
##############################
#
# For use in interfaces, to optionally insert a require block
#
# helper function, since m4 wont expand macros
# if a line is a comment (#):
##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#
##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#
##############################
#
# Optional policy handling
#
##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#
##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.
##############################
#
# Tunable declaration
#
##############################
#
# Tunable policy handling
#
########################################
#
# Helper macros
#
#
# shiftn(num,list...)
#
# shift the list num times
#
#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#
#
# __endline__
#
# dummy macro to insert a newline. used for
# errprint, so the close parentheses can be
# indented correctly.
#
#
# refpolwarn(message)
#
# print a warning message
#
#
# refpolerr(message)
#
# print an error message. does not
# make anything fail.
#
########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#
########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#
########################################
#
# can_exec(domain,executable)
#
########################################
#
# gen_bool(name,default_value)
#
########################################
#
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.
#
# All directory and file classes
#
#
# All non-directory file classes.
#
#
# Non-device file classes.
#
#
# Device file classes.
#
#
# All socket classes.
#
#
# Datagram socket classes.
#
#
# Stream socket classes.
#
#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#
########################################
#
# Macros for sets of permissions
#
#
# Permissions for getting file attributes.
#
#
# Permissions for executing files.
#
#
# Permissions for reading files and their attributes.
#
#
# Permissions for reading and executing files.
#
#
# Permissions for reading and appending to files.
#
#
# Permissions for linking, unlinking and renaming files.
#
#
# Permissions for creating lnk_files.
#
#
# Permissions for creating and using files.
#
#
# Permissions for reading directories and their attributes.
#
#
# Permissions for reading and writing directories and their attributes.
#
#
# Permissions for reading and adding names to directories.
#
#
# Permissions for creating and using directories.
#
#
# Permissions to mount and unmount file systems.
#
#
# Permissions for using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for using stream sockets.
#
#
# Permissions for creating and using stream sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using netlink sockets.
#
#
# Permissions for using netlink sockets for operations that modify state.
#
#
# Permissions for using netlink sockets for operations that observe state.
#
#
# Permissions for sending all signals.
#
#
# Permissions for sending and receiving network packets.
#
#
# Permissions for using System V IPC
#
########################################
#
# New permission sets
#
#
# Directory
#
#
# File
#
#
# Use (read and write) terminals
#
#
# Sockets
#
########################################
#
# Macros for switching between source policy
# and loadable policy module support
#
##############################
#
# For adding the module statement
#
##############################
#
# For use in interfaces, to optionally insert a require block
#
# helper function, since m4 wont expand macros
# if a line is a comment (#):
##############################
#
# In the future interfaces should be in loadable modules
#
# template(name,rules)
#
##############################
#
# In the future interfaces should be in loadable modules
#
# interface(name,rules)
#
##############################
#
# Optional policy handling
#
##############################
#
# Determine if we should use the default
# tunable value as specified by the policy
# or if the override value should be used
#
##############################
#
# Extract booleans out of an expression.
# This needs to be reworked so expressions
# with parentheses can work.
##############################
#
# Tunable declaration
#
##############################
#
# Tunable policy handling
#
########################################
#
# Helper macros
#
#
# shiftn(num,list...)
#
# shift the list num times
#
#
# ifndef(expr,true_block,false_block)
#
# m4 does not have this.
#
#
# __endline__
#
# dummy macro to insert a newline. used for
# errprint, so the close parentheses can be
# indented correctly.
#
#
# refpolwarn(message)
#
# print a warning message
#
#
# refpolerr(message)
#
# print an error message. does not
# make anything fail.
#
########################################
#
# gen_user(username, prefix, role_set, mls_defaultlevel, mls_range, [mcs_categories])
#
########################################
#
# gen_context(context,mls_sensitivity,[mcs_categories])
#
########################################
#
# can_exec(domain,executable)
#
########################################
#
# gen_bool(name,default_value)
#
########################################
#
# Support macros for sets of object classes and permissions
#
# This file should only have object class and permission set macros - they
# can only reference object classes and/or permissions.
#
# All directory and file classes
#
#
# All non-directory file classes.
#
#
# Non-device file classes.
#
#
# Device file classes.
#
#
# All socket classes.
#
#
# Datagram socket classes.
#
#
# Stream socket classes.
#
#
# Unprivileged socket classes (exclude rawip, netlink, packet).
#
########################################
#
# Macros for sets of permissions
#
#
# Permissions for getting file attributes.
#
#
# Permissions for executing files.
#
#
# Permissions for reading files and their attributes.
#
#
# Permissions for reading and executing files.
#
#
# Permissions for reading and appending to files.
#
#
# Permissions for linking, unlinking and renaming files.
#
#
# Permissions for creating lnk_files.
#
#
# Permissions for creating and using files.
#
#
# Permissions for reading directories and their attributes.
#
#
# Permissions for reading and writing directories and their attributes.
#
#
# Permissions for reading and adding names to directories.
#
#
# Permissions for creating and using directories.
#
#
# Permissions to mount and unmount file systems.
#
#
# Permissions for using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for using stream sockets.
#
#
# Permissions for creating and using stream sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using sockets.
#
#
# Permissions for creating and using netlink sockets.
#
#
# Permissions for using netlink sockets for operations that modify state.
#
#
# Permissions for using netlink sockets for operations that observe state.
#
#
# Permissions for sending all signals.
#
#
# Permissions for sending and receiving network packets.
#
#
# Permissions for using System V IPC
#
########################################
#
# New permission sets
#
#
# Directory
#
#
# File
#
#
# Use (read and write) terminals
#
#
# Sockets
#
/etc/razor(/.*)? system_u:object_r:razor_etc_t:s0
/usr/bin/razor.* -- system_u:object_r:razor_exec_t:s0
/var/lib/razor(/.*)? system_u:object_r:razor_var_lib_t:s0
/var/log/razor-agent\.log -- system_u:object_r:razor_log_t:s0