autotests/input/test.fc

0001 # Sample SELinux Labeling Policy File
0002
0003 # Syntax of 'file_contexts' file and other SELinux configuration files:
0004
0005 /usr/lib/.*/program/foo\.so  --  user:role:type:s0:c0-dsds.sd:sdsd
0006 /.*                system_u:object_r:default_t:s0
0007 /sys(/.*)?         system_u:object_r:sysfs_t:s0
0008 /xen(/.*)?         system_u:object_r:xen_image_t:s1
0009 /mnt(/[^/]*)?  -d  system_u:object_r:mnt_t:s1-5
0010 /mnt(/[^/]*)?  -l  system_u:object_r:mnt_t:s0.s2
0011 /tmp/.*            <<none>>
0012 /root(/.*)?        system_u:object_r:admin_home_t:s0
0013 /dev/[0-9].*   -c  system_u:object_r:usb_device_t:s0
0014 /run/.*\.*pid      <<none>>
0015 /mnt/[^/]*/.*      <<none>>
0016 /etc/[mg]dm(/.*)?  system_u:object_r:xdm_etc_t:s5-s6:c0
0017 /dev/(misc/)?psaux  -c  system_u:object_r:mouse_device_t:s0-s3:c0.c5
0018
0019 HOME_DIR/.+                                 system_u:object_r:user_home_t:s0
0020 HOME_DIR/((www)|(web)|(public_html))(/.+)?  system_u:object_r:httpd_user_content_t:s0
0021 HOME_DIR/\.cache/google-chrome(/.*)?        system_u:object_r:chrome_sandbox_home_t:s0
0022
0023 /dev/(misc/)?rtc[0-9]*           -c  system_u:object_r:clock_device_t:s0-s2:c1
0024 /var/(db|adm)/sudo(/.*)?             system_u:object_r:pam_var_run_t:s0
0025 /dev/pcd[0-3]                    -b  system_u:object_r:removable_device_t:s0
0026 /etc/ppp(/.*)?                   --  system_u:object_r:pppd_etc_rw_t:s0
0027 /var/www(/.*)?                       system_u:object_r:httpd_sys_content_t:s0
0028 /usr/lib(.*/)?bin(/.*)?              system_u:object_r:bin_t:s0
0029 /dev/shm/.*                          <<none>>
0030 /usr/lib/(sse2/)?hello-.*\.so.*  --  system_u:object_r:textrel_shlib_t:s0
0031 /sbin/grub.*                     --  system_u:object_r:bootloader_exec_t:s0.s3
0032 /sbin/lilo.*                     --  system_u:object_r:bootloader_exec_t:s0
0033 /etc/group[-\+]?                 --  system_u:object_r:passwd_file_t:s0:c1-c5
0034 /etc/rc\.d/init\.d/mpd           --  system_u:object_r:mpd_initrc_exec_t:s0
0035
0036
0037 # Syntax of *.fc files, from the SELinux reference policy:
0038
0039 /run/sudo/ts/%{USERNAME}     gen_context(system_u:object_r:pam_var_run_t,s0,c0)
0040 /etc/aiccu\.conf         --  gen_context(system_u:object_r:aiccu_etc_t,s0-s2,c1.c5)
0041 HOME_DIR/\.mtpz-data     --  gen_context(system_u:object_r:libmtp_home_t,s0)
0042 /var/log/mariadb(/.*)?       gen_context(system_u:object_r:mysqld_log_t,s0)
0043 /dev/dasd[^/]*           -b  gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
0044 /dev/dasd[^/]*           -c  gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
0045 HOME_ROOT                -d  gen_context(system_u:object_r:home_root_t,s0-mls_systemhigh,s1)
0046 HOME_ROOT                -l  gen_context(system_u:object_r:home_root_t,s0)
0047
0048 ifdef(`distro_debian',`
0049         /run/shm  -d  gen_context(system_u:object_r:tmpfs_t,s0)
0050         /run/shm/.*  <<none>>
0051 ')
0052 ifdef(`distro_suse',`
0053         /success  --  gen_context(system_u:object_r:etc_runtime_t,s0)
0054 ')
0055 ifdef(`init_systemd',`
0056         /run/tmpfiles\.d/kmod\.conf  --  gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
0057 ')
0058
0059 # Android contexts
0060
0061 android.hardware.light::ILight  u:object_r:hal_light_hwservice:s0
0062 android.hardware.nfc::INfc      u:object_r:hal_nfc_hwservice:s0
0063 *                               u:object_r:default_android_hwservice:s0
0064 ro.boot.bootloader              u:object_r:exported2_default_prop:s0 exact string
0065 sys.usb.mtp.device_type         u:object_r:exported2_system_prop:s0 exact int
0066
0067 # Tests
0068
0069 # Variables
0070 HOME_DIR/path
0071 HOME_ROOT/path
0072 /path/HOME_DIR/HOME_ROOT
0073
0074 # Open brackets
0075 /hello(world
0076 /hello[wo
0077
0078 /path[^0-8]+
0079 /path(hello|bye)
0080 /path.*a+b?
0081 /path\wa\Wa\sa\da\ba\Ba\(a
0082 /usr/hi\"esc\sesc\032esc\*3esds
0083
0084 # Security contexts
0085 user:role
0086 user:role:
0087 user:role:type
0088 user:role:type:level_sensitivity
0089 user:role:type:level_sensitivity:level_category
0090 user:role:type:level_sensitivity:level_category:other:other
0091 user:role:type:level_sensitivity:level_category-sens:cat:other
0092 user:role:type:s0.s1.s3:c0.c1,c2,c3 - s5.s6:c4,c5:other
0093 user : role : type : s0 . s1 . s3 : c0 . c1 , c2 , c3 - s5 . s6 : c4 , c5 : other
0094 user:role:type:s0,other
0095
0096 (user:role:type,)
0097 (user:role:type,level_s,)
0098 (user:role:type,level_s,level_c)
0099 (user:role:type,level_s,level_c,other,other,other)
0100 (user:role:type:level_s:level_c,other,other)
0101 (user:role:type:level_s:level_c:other,other,other)
0102
0103 us  er:role:type:level_s:level_c
0104 user:ro le:type:level_s:level_c
0105 user:role:ty  pe:level_s:level_c
0106 user:role:type:lev el_s:level_c
0107 user:role:type:level_s:lev el_c
0108
0109 (u ser:role:type,level_s,level_c,other,other)
0110 (user:ro le:type,level_s,level_c,other,other)
0111 (user:role:ty pe,level_s,level_c,other,other)
0112 (user:role:type,le vel_s,level_c,other,other)
0113 (user:role:type,level_s,le vel_c,other,other)
0114
0115 ( user :role:type,  level_s ,  level_c , other )
0116 ( user:role:type,  level_s ,  level_c , other )