7643df3757
With the 1f76e522a ("Rename all /var/run file context entries to /run")
selinux-policy commit, all /var/run file context entries moved to /run
and the equivalency was inverted. Subsequently, changes in frr.fc
need to be done, too, in a similar manner.
Together with that, the "/run/lock = /var/lock" equivalency was also
inverted and entries moved.
30 lines
1.7 KiB
Plaintext
30 lines
1.7 KiB
Plaintext
/usr/libexec/frr/(.*)? gen_context(system_u:object_r:frr_exec_t,s0)
|
|
|
|
/usr/lib/systemd/system/frr.* gen_context(system_u:object_r:frr_unit_file_t,s0)
|
|
|
|
/etc/frr(/.*)? gen_context(system_u:object_r:frr_conf_t,s0)
|
|
|
|
/var/log/frr(/.*)? gen_context(system_u:object_r:frr_log_t,s0)
|
|
/var/tmp/frr(/.*)? gen_context(system_u:object_r:frr_tmp_t,s0)
|
|
|
|
/run/lock/subsys/bfdd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/bgpd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/eigrpd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/fabricd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/isisd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/nhrpd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/ospf6d -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/ospfd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/pbrd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/pimd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/ripd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/ripngd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/staticd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/zebra -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/vrrpd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
/run/lock/subsys/pathd -- gen_context(system_u:object_r:frr_lock_t,s0)
|
|
|
|
/run/frr(/.*)? gen_context(system_u:object_r:frr_var_run_t,s0)
|
|
|
|
/usr/bin/vtysh -- gen_context(system_u:object_r:frr_exec_t,s0)
|