forked from theforeman/foreman-selinux
-
Notifications
You must be signed in to change notification settings - Fork 0
/
foreman.fc
56 lines (40 loc) · 2.57 KB
/
foreman.fc
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# vim: sw=4:ts=4:et
#
# Copyright 2013 Red Hat, Inc.
#
# This program and entire repository is free software: you can redistribute it
# and/or modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation, either version 3 of the License,
# or any later version.
#
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
# details.
#
# You should have received a copy of the GNU General Public License along with
# this program. If not, see http://www.gnu.org/licenses/.
#
# Foreman file contexts
/etc/foreman(/.*)? gen_context(system_u:object_r:foreman_config_t,s0)
/etc/puppet/node.rb gen_context(system_u:object_r:foreman_enc_t, s0)
/var/lib/foreman(/.*)? gen_context(system_u:object_r:foreman_lib_t,s0)
/var/lib/foreman/db/(.*.sqlite3)? gen_context(system_u:object_r:foreman_db_t,s0)
/var/log/foreman(/.*)? gen_context(system_u:object_r:foreman_log_t,s0)
/var/run/foreman(/.*)? gen_context(system_u:object_r:foreman_var_run_t,s0)
/usr/share/foreman/.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0)
/usr/share/foreman/extras/noVNC/websockify\.py gen_context(system_u:object_r:websockify_exec_t,s0)
# Passenger non-SCL file contexts
/usr/lib/ruby/gems/1.8/gems/passenger-.*/agents/.* -- gen_context(system_u:object_r:passenger_exec_t,s0)
/usr/lib64/ruby/site_ruby/1.8/x86_64-linux/agents/.* -- gen_context(system_u:object_r:passenger_exec_t,s0)
/usr/lib/ruby/gems/1.8/gems/passenger-.*/helper-scripts/prespawn -- gen_context(system_u:object_r:passenger_exec_t,s0)
# Passenger SCL file contexts
/opt/rh/ruby193/root/usr/(share/gems/gems|lib64/gems/exts)/passenger-.*/agents/.* -- gen_context(system_u:object_r:passenger_exec_t,s0)
/opt/rh/ruby193/root/usr/(share/gems/gems|lib64/gems/exts)/passenger-.*/helper-scripts/prespawn -- gen_context(system_u:object_r:passenger_exec_t,s0)
# Foreman Hooks plugin
/usr/share/foreman/config/hooks(/.*)? gen_context(system_u:object_r:foreman_hook_t,s0)
# Foreman Tasks plugin
/usr/share/gems/gems/foreman-tasks-.*/bin/foreman-tasks -- gen_context(system_u:object_r:foreman_tasks_exec_t,s0)
/opt/rh/ruby193/root/usr/share/gems/gems/foreman-tasks-.*/bin/foreman-tasks -- gen_context(system_u:object_r:foreman_tasks_exec_t,s0)
# Katello plugin
/usr/share/katello/script/katello-jobs -- gen_context(system_u:object_r:foreman_tasks_exec_t,s0)