Extensions for the gentoo hardened refpolicy and new modules implemented for personal use
Helmut Pozimski
fdd662b8fe
selinuxutil_additional: allow reading of etc runtime files
|
4 年之前 | |
|---|---|---|
| COPYING | 4 年之前 | |
| README.md | 4 年之前 | |
| acmetool.fc | 4 年之前 | |
| acmetool.te | 4 年之前 | |
| apache_additional.te | 4 年之前 | |
| atop.fc | 4 年之前 | |
| atop.if | 4 年之前 | |
| atop.te | 4 年之前 | |
| bootloader_additional.te | 4 年之前 | |
| dnsping.fc | 4 年之前 | |
| dnsping.te | 4 年之前 | |
| gcc_config_additional.te | 4 年之前 | |
| git.fc | 4 年之前 | |
| git.if | 4 年之前 | |
| git.te | 4 年之前 | |
| gogs.fc | 4 年之前 | |
| gogs.te | 4 年之前 | |
| iptables_additional.te | 4 年之前 | |
| jabber.fc | 4 年之前 | |
| jabber.if | 4 年之前 | |
| jabber.te | 4 年之前 | |
| ldap_additional.te | 4 年之前 | |
| logging_additional.te | 4 年之前 | |
| mysqldump.fc | 4 年之前 | |
| mysqldump.te | 4 年之前 | |
| phpfpm_additional.te | 4 年之前 | |
| portage_additional.te | 4 年之前 | |
| root_home.fc | 4 年之前 | |
| root_home.te | 4 年之前 | |
| selinuxutil_additional.te | 4 年之前 | |
| ssh_additional.te | 4 年之前 | |
| supervisor.fc | 4 年之前 | |
| supervisor.if | 4 年之前 | |
| supervisor.te | 4 年之前 | |
| sysadm_additional.te | 4 年之前 | |
| syslog_additional.te | 4 年之前 | |
| ttrss.fc | 4 年之前 | |
| ttrss.te | 4 年之前 | |
| udev_additional.te | 4 年之前 | |
| unconfined_additional.te | 4 年之前 |
README.md
About
This repository contains a collection of selinux policy modules written for Gentoo. Some of them are extensions to the policy modules of the hardened refpolicy while others were created from scratch but following the pattern of reference policy modules.
Please keep in mind that I wrote and extended the modules for my personal needs and they might not work well in your particular setup or use case. Also please review any of these modules carefully before using it to make sure it doesn't contain overbroad permissions or other errors which would actually lessen the security of the target system. If you find any errors or things I might want to improve, feel free to contact me.
Licensing
The modules in this repository are licensed under the GNU GENERAL PUBLIC LICENSE version 2.