Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified
📁 ..	-	2026-03-21 15:45
📄 __init__.cpython-39.opt-1.pyc a ��ye��@��s��d�S�)N��r��r��r��?/usr/lib/python3.9/site-packages/sepolicy/templates/__init__.py�<module>��	154 B	2025-09-21 09:25
📄 __init__.cpython-39.pyc a ��ye��@��s��d�S�)N��r��r��r��?/usr/lib/python3.9/site-packages/sepolicy/templates/__init__.py�<module>��	154 B	2025-09-21 09:25
📄 boolean.cpython-39.opt-1.pyc a ��ye��@��s��d�Z�dZdS�)zP ## <desc> ## <p> ## DESCRIPTION ## </p> ## </desc> gen_tunable(BOOLEAN, false) z0 tunable_policy(`BOOLEAN',` #TRUE ',` #FALSE ') N)Z te_booleanZte_rules��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/boolean.py�<module>��s��	314 B	2025-09-21 09:25
📄 boolean.cpython-39.pyc a ��ye��@��s��d�Z�dZdS�)zP ## <desc> ## <p> ## DESCRIPTION ## </p> ## </desc> gen_tunable(BOOLEAN, false) z0 tunable_policy(`BOOLEAN',` #TRUE ',` #FALSE ') N)Z te_booleanZte_rules��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/boolean.py�<module>��s��	314 B	2025-09-21 09:25
📄 etc_rw.cpython-39.opt-1.pyc a ��ye��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z? type TEMPLATETYPE_etc_rw_t; files_type(TEMPLATETYPE_etc_rw_t) aO�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_etc_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, { dir file lnk_file }) z� manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_etc_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE conf directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_conf',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') allow $1 TEMPLATETYPE_etc_rw_t:dir search_dir_perms; files_search_etc($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE conf files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_conf_files',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') allow $1 TEMPLATETYPE_etc_rw_t:dir list_dir_perms; read_files_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_search_etc($1) ') ######################################## ## <summary> ## Manage TEMPLATETYPE conf files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_conf_files',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') manage_files_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_search_etc($1) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t; ') files_search_etc($1) stream_connect_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_etc_rw_t;zA files_search_etc($1) admin_pattern($1, TEMPLATETYPE_etc_rw_t) zEFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) zHFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��=/usr/lib/python3.9/site-packages/sepolicy/templates/etc_rw.py�<module>��s��=	2.7 KB	2025-09-21 09:25
📄 etc_rw.cpython-39.pyc a ��ye��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z? type TEMPLATETYPE_etc_rw_t; files_type(TEMPLATETYPE_etc_rw_t) aO�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_etc_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, { dir file lnk_file }) z� manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_etc_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE conf directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_conf',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') allow $1 TEMPLATETYPE_etc_rw_t:dir search_dir_perms; files_search_etc($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE conf files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_conf_files',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') allow $1 TEMPLATETYPE_etc_rw_t:dir list_dir_perms; read_files_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_search_etc($1) ') ######################################## ## <summary> ## Manage TEMPLATETYPE conf files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_conf_files',` gen_require(` type TEMPLATETYPE_etc_rw_t; ') manage_files_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t) files_search_etc($1) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_etc_rw_t; ') files_search_etc($1) stream_connect_pattern($1, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_etc_rw_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_etc_rw_t;zA files_search_etc($1) admin_pattern($1, TEMPLATETYPE_etc_rw_t) zEFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) zHFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��=/usr/lib/python3.9/site-packages/sepolicy/templates/etc_rw.py�<module>��s��=	2.7 KB	2025-09-21 09:25
📄 executable.cpython-39.opt-1.pyc a ��ye�&��@��s��d�Z�dZdZdZdZdZdZdZdZd Z d Z dZdZdZ dZd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!d Z"d!Z#d"Z$d#Z%d$Z&d%Z'd&Z(d'S�)(z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; init_daemon_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) permissive TEMPLATETYPE_t; zO type TEMPLATETYPE_initrc_exec_t; init_script_file(TEMPLATETYPE_initrc_exec_t) a#��policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; domain_type(TEMPLATETYPE_t) domain_entry_file(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) role system_r types TEMPLATETYPE_t; permissive TEMPLATETYPE_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; inetd_service_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) permissive TEMPLATETYPE_t; aa��policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # attribute_role TEMPLATETYPE_roles; roleattribute system_r TEMPLATETYPE_roles; type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; application_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) role TEMPLATETYPE_roles types TEMPLATETYPE_t; permissive TEMPLATETYPE_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # sandbox_x_domain_template(TEMPLATETYPE) permissive TEMPLATETYPE_t; permissive TEMPLATETYPE_client_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # apache_content_template(TEMPLATETYPE) permissive httpd_TEMPLATETYPE_script_t; z�allow TEMPLATETYPE_t self:fifo_file rw_fifo_file_perms; allow TEMPLATETYPE_t self:unix_stream_socket create_stream_socket_perms; � zO optional_policy(` dbus_system_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) ') z� allow TEMPLATETYPE_t self:fifo_file manage_fifo_file_perms; allow TEMPLATETYPE_t self:unix_stream_socket create_stream_socket_perms; z# auth_use_nsswitch(TEMPLATETYPE_t) z) logging_send_syslog_msg(TEMPLATETYPE_t) z) sysnet_dns_name_resolve(TEMPLATETYPE_t) z* auth_domtrans_chk_passwd(TEMPLATETYPE_t) z mta_send_mail(TEMPLATETYPE_t) zg optional_policy(` dbus_system_bus_client(TEMPLATETYPE_t) dbus_connect_system_bus(TEMPLATETYPE_t) ') z4 optional_policy(` kerberos_use(TEMPLATETYPE_t) ') z{ optional_policy(` kerberos_keytab_template(TEMPLATETYPE, TEMPLATETYPE_t) kerberos_manage_host_rcache(TEMPLATETYPE_t) ') z) logging_send_audit_msgs(TEMPLATETYPE_t) zj optional_policy(` gen_require(` type USER_t; role USER_r; ') TEMPLATETYPE_run(USER_t, USER_r) ') z, domain_use_interactive_fds(TEMPLATETYPE_t) z& files_read_etc_files(TEMPLATETYPE_t) z- miscfiles_read_localization(TEMPLATETYPE_t) z. ## <summary>policy for TEMPLATETYPE</summary>a�� ######################################## ## <summary> ## Execute TEMPLATETYPE_exec_t in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`TEMPLATETYPE_domtrans',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, TEMPLATETYPE_exec_t, TEMPLATETYPE_t) ') ###################################### ## <summary> ## Execute TEMPLATETYPE in the caller domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_exec',` gen_require(` type TEMPLATETYPE_exec_t; ') corecmd_search_bin($1) can_exec($1, TEMPLATETYPE_exec_t) ') ak�� ######################################## ## <summary> ## Execute TEMPLATETYPE in the TEMPLATETYPE domain, and ## allow the specified role the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to be allowed the TEMPLATETYPE domain. ## </summary> ## </param> # interface(`TEMPLATETYPE_run',` gen_require(` type TEMPLATETYPE_t; attribute_role TEMPLATETYPE_roles; ') TEMPLATETYPE_domtrans($1) roleattribute $2 TEMPLATETYPE_roles; ') ######################################## ## <summary> ## Role access for TEMPLATETYPE ## </summary> ## <param name="role"> ## <summary> ## Role allowed access ## </summary> ## </param> ## <param name="domain"> ## <summary> ## User domain for the role ## </summary> ## </param> # interface(`TEMPLATETYPE_role',` gen_require(` type TEMPLATETYPE_t; attribute_role TEMPLATETYPE_roles; ') roleattribute $1 TEMPLATETYPE_roles; TEMPLATETYPE_domtrans($2) ps_process_pattern($2, TEMPLATETYPE_t) allow $2 TEMPLATETYPE_t:process { signull signal sigkill }; ') a�� ######################################## ## <summary> ## Execute sandbox in the TEMPLATETYPE_t domain, and ## allow the specified role the TEMPLATETYPE_t domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to be allowed the TEMPLATETYPE_t domain. ## </summary> ## </param> # interface(`TEMPLATETYPE_transition',` gen_require(` type TEMPLATETYPE_t; type TEMPLATETYPE_client_t; ') allow $1 TEMPLATETYPE_t:process { signal_perms transition }; dontaudit $1 TEMPLATETYPE_t:process { noatsecure siginh rlimitinh }; role $2 types TEMPLATETYPE_t; role $2 types TEMPLATETYPE_client_t; allow TEMPLATETYPE_t $1:process { sigchld signull }; allow TEMPLATETYPE_t $1:fifo_file rw_inherited_fifo_file_perms; allow TEMPLATETYPE_client_t $1:process { sigchld signull }; allow TEMPLATETYPE_client_t $1:fifo_file rw_inherited_fifo_file_perms; ') a>�� ######################################## ## <summary> ## Change to the TEMPLATETYPE role. ## </summary> ## <param name="role"> ## <summary> ## Role allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_role_change',` gen_require(` role TEMPLATETYPE_r; ') allow $1 TEMPLATETYPE_r; ') a�� ######################################## ## <summary> ## Execute TEMPLATETYPE server in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_initrc_domtrans',` gen_require(` type TEMPLATETYPE_initrc_exec_t; ') init_labeled_script_domtrans($1, TEMPLATETYPE_initrc_exec_t) ') a�� ######################################## ## <summary> ## Send and receive messages from ## TEMPLATETYPE over dbus. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_dbus_chat',` gen_require(` type TEMPLATETYPE_t; class dbus send_msg; ') allow $1 TEMPLATETYPE_t:dbus send_msg; allow TEMPLATETYPE_t $1:dbus send_msg; ') a�� ######################################## ## <summary> ## All of the rules required to administrate ## an TEMPLATETYPE environment ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="role"> ## <summary> ## Role allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_admin',` gen_require(` type TEMPLATETYPE_t;z� ') allow $1 TEMPLATETYPE_t:process { signal_perms }; ps_process_pattern($1, TEMPLATETYPE_t) tunable_policy(`deny_ptrace',`',` allow $1 TEMPLATETYPE_t:process ptrace; ') z# type TEMPLATETYPE_initrc_exec_t;z� TEMPLATETYPE_initrc_domtrans($1) domain_system_change_exemption($1) role_transition $2 TEMPLATETYPE_initrc_exec_t system_r; allow $2 system_r; zb optional_policy(` systemd_passwd_agent_exec($1) systemd_read_fifo_file_passwd_run($1) ') ') zEEXECUTABLE -- gen_context(system_u:object_r:TEMPLATETYPE_exec_t,s0) z # No file context, leave blank zKEXECUTABLE -- gen_context(system_u:object_r:TEMPLATETYPE_initrc_exec_t,s0) N))Zte_daemon_typesZte_initscript_typesZte_dbusd_typesZte_inetd_typesZte_userapp_typesZte_sandbox_typesZte_cgi_typesZte_daemon_rulesZte_inetd_rulesZte_dbusd_rulesZte_userapp_rulesZte_cgi_rulesZte_sandbox_rulesZte_uid_rulesZte_syslog_rulesZte_resolve_rulesZte_pam_rulesZ te_mail_rulesZ te_dbus_rulesZte_kerberos_rulesZte_manage_krb5_rcache_rulesZte_audit_rulesZte_run_rulesZte_fd_rulesZte_etc_rulesZte_localization_rulesZif_heading_rulesZif_program_rulesZif_user_program_rulesZif_sandbox_rulesZif_role_change_rulesZif_initscript_rulesZ if_dbus_rulesZif_begin_adminZif_middle_adminZif_initscript_admin_typesZif_initscript_adminZif_end_adminZ fc_programZfc_userZ fc_initscript��r��r��A/usr/lib/python3.9/site-packages/sepolicy/templates/executable.py�<module>��sP�� )9#	8.7 KB	2025-09-21 09:25
📄 executable.cpython-39.pyc a ��ye�&��@��s��d�Z�dZdZdZdZdZdZdZdZd Z d Z dZdZdZ dZd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!d Z"d!Z#d"Z$d#Z%d$Z&d%Z'd&Z(d'S�)(z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; init_daemon_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) permissive TEMPLATETYPE_t; zO type TEMPLATETYPE_initrc_exec_t; init_script_file(TEMPLATETYPE_initrc_exec_t) a#��policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; domain_type(TEMPLATETYPE_t) domain_entry_file(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) role system_r types TEMPLATETYPE_t; permissive TEMPLATETYPE_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; inetd_service_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) permissive TEMPLATETYPE_t; aa��policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # attribute_role TEMPLATETYPE_roles; roleattribute system_r TEMPLATETYPE_roles; type TEMPLATETYPE_t; type TEMPLATETYPE_exec_t; application_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) role TEMPLATETYPE_roles types TEMPLATETYPE_t; permissive TEMPLATETYPE_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # sandbox_x_domain_template(TEMPLATETYPE) permissive TEMPLATETYPE_t; permissive TEMPLATETYPE_client_t; z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # apache_content_template(TEMPLATETYPE) permissive httpd_TEMPLATETYPE_script_t; z�allow TEMPLATETYPE_t self:fifo_file rw_fifo_file_perms; allow TEMPLATETYPE_t self:unix_stream_socket create_stream_socket_perms; � zO optional_policy(` dbus_system_domain(TEMPLATETYPE_t, TEMPLATETYPE_exec_t) ') z� allow TEMPLATETYPE_t self:fifo_file manage_fifo_file_perms; allow TEMPLATETYPE_t self:unix_stream_socket create_stream_socket_perms; z# auth_use_nsswitch(TEMPLATETYPE_t) z) logging_send_syslog_msg(TEMPLATETYPE_t) z) sysnet_dns_name_resolve(TEMPLATETYPE_t) z* auth_domtrans_chk_passwd(TEMPLATETYPE_t) z mta_send_mail(TEMPLATETYPE_t) zg optional_policy(` dbus_system_bus_client(TEMPLATETYPE_t) dbus_connect_system_bus(TEMPLATETYPE_t) ') z4 optional_policy(` kerberos_use(TEMPLATETYPE_t) ') z{ optional_policy(` kerberos_keytab_template(TEMPLATETYPE, TEMPLATETYPE_t) kerberos_manage_host_rcache(TEMPLATETYPE_t) ') z) logging_send_audit_msgs(TEMPLATETYPE_t) zj optional_policy(` gen_require(` type USER_t; role USER_r; ') TEMPLATETYPE_run(USER_t, USER_r) ') z, domain_use_interactive_fds(TEMPLATETYPE_t) z& files_read_etc_files(TEMPLATETYPE_t) z- miscfiles_read_localization(TEMPLATETYPE_t) z. ## <summary>policy for TEMPLATETYPE</summary>a�� ######################################## ## <summary> ## Execute TEMPLATETYPE_exec_t in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`TEMPLATETYPE_domtrans',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, TEMPLATETYPE_exec_t, TEMPLATETYPE_t) ') ###################################### ## <summary> ## Execute TEMPLATETYPE in the caller domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_exec',` gen_require(` type TEMPLATETYPE_exec_t; ') corecmd_search_bin($1) can_exec($1, TEMPLATETYPE_exec_t) ') ak�� ######################################## ## <summary> ## Execute TEMPLATETYPE in the TEMPLATETYPE domain, and ## allow the specified role the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to be allowed the TEMPLATETYPE domain. ## </summary> ## </param> # interface(`TEMPLATETYPE_run',` gen_require(` type TEMPLATETYPE_t; attribute_role TEMPLATETYPE_roles; ') TEMPLATETYPE_domtrans($1) roleattribute $2 TEMPLATETYPE_roles; ') ######################################## ## <summary> ## Role access for TEMPLATETYPE ## </summary> ## <param name="role"> ## <summary> ## Role allowed access ## </summary> ## </param> ## <param name="domain"> ## <summary> ## User domain for the role ## </summary> ## </param> # interface(`TEMPLATETYPE_role',` gen_require(` type TEMPLATETYPE_t; attribute_role TEMPLATETYPE_roles; ') roleattribute $1 TEMPLATETYPE_roles; TEMPLATETYPE_domtrans($2) ps_process_pattern($2, TEMPLATETYPE_t) allow $2 TEMPLATETYPE_t:process { signull signal sigkill }; ') a�� ######################################## ## <summary> ## Execute sandbox in the TEMPLATETYPE_t domain, and ## allow the specified role the TEMPLATETYPE_t domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to be allowed the TEMPLATETYPE_t domain. ## </summary> ## </param> # interface(`TEMPLATETYPE_transition',` gen_require(` type TEMPLATETYPE_t; type TEMPLATETYPE_client_t; ') allow $1 TEMPLATETYPE_t:process { signal_perms transition }; dontaudit $1 TEMPLATETYPE_t:process { noatsecure siginh rlimitinh }; role $2 types TEMPLATETYPE_t; role $2 types TEMPLATETYPE_client_t; allow TEMPLATETYPE_t $1:process { sigchld signull }; allow TEMPLATETYPE_t $1:fifo_file rw_inherited_fifo_file_perms; allow TEMPLATETYPE_client_t $1:process { sigchld signull }; allow TEMPLATETYPE_client_t $1:fifo_file rw_inherited_fifo_file_perms; ') a>�� ######################################## ## <summary> ## Change to the TEMPLATETYPE role. ## </summary> ## <param name="role"> ## <summary> ## Role allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_role_change',` gen_require(` role TEMPLATETYPE_r; ') allow $1 TEMPLATETYPE_r; ') a�� ######################################## ## <summary> ## Execute TEMPLATETYPE server in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_initrc_domtrans',` gen_require(` type TEMPLATETYPE_initrc_exec_t; ') init_labeled_script_domtrans($1, TEMPLATETYPE_initrc_exec_t) ') a�� ######################################## ## <summary> ## Send and receive messages from ## TEMPLATETYPE over dbus. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_dbus_chat',` gen_require(` type TEMPLATETYPE_t; class dbus send_msg; ') allow $1 TEMPLATETYPE_t:dbus send_msg; allow TEMPLATETYPE_t $1:dbus send_msg; ') a�� ######################################## ## <summary> ## All of the rules required to administrate ## an TEMPLATETYPE environment ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="role"> ## <summary> ## Role allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_admin',` gen_require(` type TEMPLATETYPE_t;z� ') allow $1 TEMPLATETYPE_t:process { signal_perms }; ps_process_pattern($1, TEMPLATETYPE_t) tunable_policy(`deny_ptrace',`',` allow $1 TEMPLATETYPE_t:process ptrace; ') z# type TEMPLATETYPE_initrc_exec_t;z� TEMPLATETYPE_initrc_domtrans($1) domain_system_change_exemption($1) role_transition $2 TEMPLATETYPE_initrc_exec_t system_r; allow $2 system_r; zb optional_policy(` systemd_passwd_agent_exec($1) systemd_read_fifo_file_passwd_run($1) ') ') zEEXECUTABLE -- gen_context(system_u:object_r:TEMPLATETYPE_exec_t,s0) z # No file context, leave blank zKEXECUTABLE -- gen_context(system_u:object_r:TEMPLATETYPE_initrc_exec_t,s0) N))Zte_daemon_typesZte_initscript_typesZte_dbusd_typesZte_inetd_typesZte_userapp_typesZte_sandbox_typesZte_cgi_typesZte_daemon_rulesZte_inetd_rulesZte_dbusd_rulesZte_userapp_rulesZte_cgi_rulesZte_sandbox_rulesZte_uid_rulesZte_syslog_rulesZte_resolve_rulesZte_pam_rulesZ te_mail_rulesZ te_dbus_rulesZte_kerberos_rulesZte_manage_krb5_rcache_rulesZte_audit_rulesZte_run_rulesZte_fd_rulesZte_etc_rulesZte_localization_rulesZif_heading_rulesZif_program_rulesZif_user_program_rulesZif_sandbox_rulesZif_role_change_rulesZif_initscript_rulesZ if_dbus_rulesZif_begin_adminZif_middle_adminZif_initscript_admin_typesZif_initscript_adminZif_end_adminZ fc_programZfc_userZ fc_initscript��r��r��A/usr/lib/python3.9/site-packages/sepolicy/templates/executable.py�<module>��sP�� )9#	8.7 KB	2025-09-21 09:25
📄 network.cpython-39.opt-1.pyc a ��ye#5��@��sT��d�Z�dZdZdZdZdZdZdZdZd Z d Z dZdZd Z dZdZdZdZdZdZdS�)z= type TEMPLATETYPE_port_t; corenet_port(TEMPLATETYPE_port_t) zWsysnet_dns_name_resolve(TEMPLATETYPE_t) corenet_all_recvfrom_unlabeled(TEMPLATETYPE_t) z�allow TEMPLATETYPE_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(TEMPLATETYPE_t) corenet_tcp_sendrecv_generic_node(TEMPLATETYPE_t) corenet_tcp_sendrecv_all_ports(TEMPLATETYPE_t) z.corenet_tcp_bind_generic_node(TEMPLATETYPE_t) z?allow TEMPLATETYPE_t TEMPLATETYPE_port_t:tcp_socket name_bind; zBallow TEMPLATETYPE_t TEMPLATETYPE_port_t:tcp_socket name_connect; z�allow TEMPLATETYPE_t self:udp_socket { create_socket_perms listen }; corenet_udp_sendrecv_generic_if(TEMPLATETYPE_t) corenet_udp_sendrecv_generic_node(TEMPLATETYPE_t) corenet_udp_sendrecv_all_ports(TEMPLATETYPE_t) z.corenet_udp_bind_generic_node(TEMPLATETYPE_t) z?allow TEMPLATETYPE_t TEMPLATETYPE_port_t:udp_socket name_bind; z.corenet_tcp_connect_all_ports(TEMPLATETYPE_t) z2corenet_tcp_connect_all_rpc_ports(TEMPLATETYPE_t) z9corenet_tcp_connect_all_unreserved_ports(TEMPLATETYPE_t) z+corenet_tcp_bind_all_ports(TEMPLATETYPE_t) z/corenet_tcp_bind_all_rpc_ports(TEMPLATETYPE_t) z6corenet_tcp_bind_all_unreserved_ports(TEMPLATETYPE_t) z+corenet_udp_bind_all_ports(TEMPLATETYPE_t) z/corenet_udp_bind_all_rpc_ports(TEMPLATETYPE_t) z6corenet_udp_bind_all_unreserved_ports(TEMPLATETYPE_t) a�)��######################################## ## <summary> ## Send and receive TCP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_tcp_sendrecv_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket { send_msg recv_msg }; ') ######################################## ## <summary> ## Send UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_udp_send_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket send_msg; ') ######################################## ## <summary> ## Do not audit attempts to send UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_send_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket send_msg; ') ######################################## ## <summary> ## Receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_udp_receive_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket recv_msg; ') ######################################## ## <summary> ## Do not audit attempts to receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_receive_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket recv_msg; ') ######################################## ## <summary> ## Send and receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_udp_sendrecv_TEMPLATETYPE_port',` corenet_udp_send_TEMPLATETYPE_port($1) corenet_udp_receive_TEMPLATETYPE_port($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive ## UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_sendrecv_TEMPLATETYPE_port',` corenet_dontaudit_udp_send_TEMPLATETYPE_port($1) corenet_dontaudit_udp_receive_TEMPLATETYPE_port($1) ') ######################################## ## <summary> ## Bind TCP sockets to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_tcp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket name_bind; ') ######################################## ## <summary> ## Bind UDP sockets to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_udp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket name_bind; ') ######################################## ## <summary> ## Do not audit attempts to sbind to TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket name_bind; ') ######################################## ## <summary> ## Make a TCP connection to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_tcp_connect_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket name_connect; ') ######################################## ## <summary> ## Do not audit attempts to make a TCP connection to TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_dontaudit_tcp_connect_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:tcp_socket name_connect; ') ######################################## ## <summary> ## Send TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_send_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet send; ') ######################################## ## <summary> ## Do not audit attempts to send TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_send_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') dontaudit $1 TEMPLATETYPE_client_packet_t:packet send; ') ######################################## ## <summary> ## Receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_receive_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet recv; ') ######################################## ## <summary> ## Do not audit attempts to receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_receive_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') dontaudit $1 TEMPLATETYPE_client_packet_t:packet recv; ') ######################################## ## <summary> ## Send and receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_sendrecv_TEMPLATETYPE_client_packets',` corenet_send_TEMPLATETYPE_client_packets($1) corenet_receive_TEMPLATETYPE_client_packets($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_sendrecv_TEMPLATETYPE_client_packets',` corenet_dontaudit_send_TEMPLATETYPE_client_packets($1) corenet_dontaudit_receive_TEMPLATETYPE_client_packets($1) ') ######################################## ## <summary> ## Relabel packets to TEMPLATETYPE_client the packet type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_relabelto_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet relabelto; ') ######################################## ## <summary> ## Send TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_send_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet send; ') ######################################## ## <summary> ## Do not audit attempts to send TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_send_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') dontaudit $1 TEMPLATETYPE_server_packet_t:packet send; ') ######################################## ## <summary> ## Receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_receive_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet recv; ') ######################################## ## <summary> ## Do not audit attempts to receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_receive_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') dontaudit $1 TEMPLATETYPE_server_packet_t:packet recv; ') ######################################## ## <summary> ## Send and receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_sendrecv_TEMPLATETYPE_server_packets',` corenet_send_TEMPLATETYPE_server_packets($1) corenet_receive_TEMPLATETYPE_server_packets($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_sendrecv_TEMPLATETYPE_server_packets',` corenet_dontaudit_send_TEMPLATETYPE_server_packets($1) corenet_dontaudit_receive_TEMPLATETYPE_server_packets($1) ') ######################################## ## <summary> ## Relabel packets to TEMPLATETYPE_server the packet type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_relabelto_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet relabelto; ') � N)Zte_typesZ te_networkZte_tcpZ te_in_tcpZte_in_need_port_tcpZte_out_need_port_tcpZte_udpZ te_in_udpZte_in_need_port_udpZte_out_all_ports_tcpZte_out_reserved_ports_tcpZte_out_unreserved_ports_tcpZte_in_all_ports_tcpZte_in_reserved_ports_tcpZte_in_unreserved_ports_tcpZte_in_all_ports_udpZte_in_reserved_ports_udpZte_in_unreserved_ports_udpZif_rulesZte_rules��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/network.py�<module>��s,��b	12.43 KB	2025-09-21 09:25
📄 network.cpython-39.pyc a ��ye#5��@��sT��d�Z�dZdZdZdZdZdZdZdZd Z d Z dZdZd Z dZdZdZdZdZdZdS�)z= type TEMPLATETYPE_port_t; corenet_port(TEMPLATETYPE_port_t) zWsysnet_dns_name_resolve(TEMPLATETYPE_t) corenet_all_recvfrom_unlabeled(TEMPLATETYPE_t) z�allow TEMPLATETYPE_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(TEMPLATETYPE_t) corenet_tcp_sendrecv_generic_node(TEMPLATETYPE_t) corenet_tcp_sendrecv_all_ports(TEMPLATETYPE_t) z.corenet_tcp_bind_generic_node(TEMPLATETYPE_t) z?allow TEMPLATETYPE_t TEMPLATETYPE_port_t:tcp_socket name_bind; zBallow TEMPLATETYPE_t TEMPLATETYPE_port_t:tcp_socket name_connect; z�allow TEMPLATETYPE_t self:udp_socket { create_socket_perms listen }; corenet_udp_sendrecv_generic_if(TEMPLATETYPE_t) corenet_udp_sendrecv_generic_node(TEMPLATETYPE_t) corenet_udp_sendrecv_all_ports(TEMPLATETYPE_t) z.corenet_udp_bind_generic_node(TEMPLATETYPE_t) z?allow TEMPLATETYPE_t TEMPLATETYPE_port_t:udp_socket name_bind; z.corenet_tcp_connect_all_ports(TEMPLATETYPE_t) z2corenet_tcp_connect_all_rpc_ports(TEMPLATETYPE_t) z9corenet_tcp_connect_all_unreserved_ports(TEMPLATETYPE_t) z+corenet_tcp_bind_all_ports(TEMPLATETYPE_t) z/corenet_tcp_bind_all_rpc_ports(TEMPLATETYPE_t) z6corenet_tcp_bind_all_unreserved_ports(TEMPLATETYPE_t) z+corenet_udp_bind_all_ports(TEMPLATETYPE_t) z/corenet_udp_bind_all_rpc_ports(TEMPLATETYPE_t) z6corenet_udp_bind_all_unreserved_ports(TEMPLATETYPE_t) a�)��######################################## ## <summary> ## Send and receive TCP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_tcp_sendrecv_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket { send_msg recv_msg }; ') ######################################## ## <summary> ## Send UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_udp_send_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket send_msg; ') ######################################## ## <summary> ## Do not audit attempts to send UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_send_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket send_msg; ') ######################################## ## <summary> ## Receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_udp_receive_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket recv_msg; ') ######################################## ## <summary> ## Do not audit attempts to receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_receive_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket recv_msg; ') ######################################## ## <summary> ## Send and receive UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_udp_sendrecv_TEMPLATETYPE_port',` corenet_udp_send_TEMPLATETYPE_port($1) corenet_udp_receive_TEMPLATETYPE_port($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive ## UDP traffic on the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_sendrecv_TEMPLATETYPE_port',` corenet_dontaudit_udp_send_TEMPLATETYPE_port($1) corenet_dontaudit_udp_receive_TEMPLATETYPE_port($1) ') ######################################## ## <summary> ## Bind TCP sockets to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_tcp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket name_bind; ') ######################################## ## <summary> ## Bind UDP sockets to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_udp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:udp_socket name_bind; ') ######################################## ## <summary> ## Do not audit attempts to sbind to TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_udp_bind_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:udp_socket name_bind; ') ######################################## ## <summary> ## Make a TCP connection to the TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_tcp_connect_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') allow $1 TEMPLATETYPE_port_t:tcp_socket name_connect; ') ######################################## ## <summary> ## Do not audit attempts to make a TCP connection to TEMPLATETYPE port. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_dontaudit_tcp_connect_TEMPLATETYPE_port',` gen_require(` type TEMPLATETYPE_port_t; ') dontaudit $1 TEMPLATETYPE_port_t:tcp_socket name_connect; ') ######################################## ## <summary> ## Send TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_send_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet send; ') ######################################## ## <summary> ## Do not audit attempts to send TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_send_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') dontaudit $1 TEMPLATETYPE_client_packet_t:packet send; ') ######################################## ## <summary> ## Receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_receive_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet recv; ') ######################################## ## <summary> ## Do not audit attempts to receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_receive_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') dontaudit $1 TEMPLATETYPE_client_packet_t:packet recv; ') ######################################## ## <summary> ## Send and receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_sendrecv_TEMPLATETYPE_client_packets',` corenet_send_TEMPLATETYPE_client_packets($1) corenet_receive_TEMPLATETYPE_client_packets($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive TEMPLATETYPE_client packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_sendrecv_TEMPLATETYPE_client_packets',` corenet_dontaudit_send_TEMPLATETYPE_client_packets($1) corenet_dontaudit_receive_TEMPLATETYPE_client_packets($1) ') ######################################## ## <summary> ## Relabel packets to TEMPLATETYPE_client the packet type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_relabelto_TEMPLATETYPE_client_packets',` gen_require(` type TEMPLATETYPE_client_packet_t; ') allow $1 TEMPLATETYPE_client_packet_t:packet relabelto; ') ######################################## ## <summary> ## Send TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="write" weight="10"/> # interface(`corenet_send_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet send; ') ######################################## ## <summary> ## Do not audit attempts to send TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_send_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') dontaudit $1 TEMPLATETYPE_server_packet_t:packet send; ') ######################################## ## <summary> ## Receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="read" weight="10"/> # interface(`corenet_receive_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet recv; ') ######################################## ## <summary> ## Do not audit attempts to receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_receive_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') dontaudit $1 TEMPLATETYPE_server_packet_t:packet recv; ') ######################################## ## <summary> ## Send and receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <infoflow type="both" weight="10"/> # interface(`corenet_sendrecv_TEMPLATETYPE_server_packets',` corenet_send_TEMPLATETYPE_server_packets($1) corenet_receive_TEMPLATETYPE_server_packets($1) ') ######################################## ## <summary> ## Do not audit attempts to send and receive TEMPLATETYPE_server packets. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> ## <infoflow type="none"/> # interface(`corenet_dontaudit_sendrecv_TEMPLATETYPE_server_packets',` corenet_dontaudit_send_TEMPLATETYPE_server_packets($1) corenet_dontaudit_receive_TEMPLATETYPE_server_packets($1) ') ######################################## ## <summary> ## Relabel packets to TEMPLATETYPE_server the packet type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`corenet_relabelto_TEMPLATETYPE_server_packets',` gen_require(` type TEMPLATETYPE_server_packet_t; ') allow $1 TEMPLATETYPE_server_packet_t:packet relabelto; ') � N)Zte_typesZ te_networkZte_tcpZ te_in_tcpZte_in_need_port_tcpZte_out_need_port_tcpZte_udpZ te_in_udpZte_in_need_port_udpZte_out_all_ports_tcpZte_out_reserved_ports_tcpZte_out_unreserved_ports_tcpZte_in_all_ports_tcpZte_in_reserved_ports_tcpZte_in_unreserved_ports_tcpZte_in_all_ports_udpZte_in_reserved_ports_udpZte_in_unreserved_ports_udpZif_rulesZte_rules��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/network.py�<module>��s,��b	12.43 KB	2025-09-21 09:25
📄 rw.cpython-39.opt-1.pyc a ��ye\��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)z7 type TEMPLATETYPE_rw_t; files_type(TEMPLATETYPE_rw_t) z� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) a�� ######################################## ## <summary> ## Search TEMPLATETYPE rw directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_rw_dir',` gen_require(` type TEMPLATETYPE_rw_t; ') allow $1 TEMPLATETYPE_rw_t:dir search_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_rw_files',` gen_require(` type TEMPLATETYPE_rw_t; ') read_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) allow $1 TEMPLATETYPE_rw_t:dir list_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Manage TEMPLATETYPE rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_rw_files',` gen_require(` type TEMPLATETYPE_rw_t; ') manage_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) ') ######################################## ## <summary> ## Create, read, write, and delete ## TEMPLATETYPE rw dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_rw_dirs',` gen_require(` type TEMPLATETYPE_rw_t; ') manage_dirs_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) ') zQ manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_rw_t; ') stream_connect_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_rw_t;z= files_search_etc($1) admin_pattern($1, TEMPLATETYPE_rw_t) zB FILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0) zLFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) zE FILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0) N) Zte_typesZte_rulesZif_rulesZte_stream_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��9/usr/lib/python3.9/site-packages/sepolicy/templates/rw.py�<module>��s��O	2.85 KB	2025-09-21 09:25
📄 rw.cpython-39.pyc a ��ye\��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)z7 type TEMPLATETYPE_rw_t; files_type(TEMPLATETYPE_rw_t) z� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) a�� ######################################## ## <summary> ## Search TEMPLATETYPE rw directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_rw_dir',` gen_require(` type TEMPLATETYPE_rw_t; ') allow $1 TEMPLATETYPE_rw_t:dir search_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_rw_files',` gen_require(` type TEMPLATETYPE_rw_t; ') read_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) allow $1 TEMPLATETYPE_rw_t:dir list_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Manage TEMPLATETYPE rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_rw_files',` gen_require(` type TEMPLATETYPE_rw_t; ') manage_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) ') ######################################## ## <summary> ## Create, read, write, and delete ## TEMPLATETYPE rw dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_rw_dirs',` gen_require(` type TEMPLATETYPE_rw_t; ') manage_dirs_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) ') zQ manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t) a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_rw_t; ') stream_connect_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_rw_t;z= files_search_etc($1) admin_pattern($1, TEMPLATETYPE_rw_t) zB FILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0) zLFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0) zE FILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0) N) Zte_typesZte_rulesZif_rulesZte_stream_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��9/usr/lib/python3.9/site-packages/sepolicy/templates/rw.py�<module>��s��O	2.85 KB	2025-09-21 09:25
📄 script.cpython-39.opt-1.pyc a ��ye��@��s0��d�Z�dZdZdZdZdZdZdZdZd Z d Z dS�)a��#!/bin/sh -e DIRNAME=`dirname $0` cd $DIRNAME USAGE="$0 [ --update ]" if [ `id -u` != 0 ]; then echo 'You must be root to run this script' exit 1 fi if [ $# -eq 1 ]; then if [ "$1" = "--update" ] ; then time=`ls -l --time-style="+%x %X" TEMPLATEFILE.te \| awk '{ printf "%s %s", $6, $7 }'` rules=`ausearch --start $time -m avc --raw -se TEMPLATETYPE` if [ x"$rules" != "x" ] ; then echo "Found avc's to update policy with" echo -e "$rules" \| audit2allow -R echo "Do you want these changes added to policy [y/n]?" read ANS if [ "$ANS" = "y" -o "$ANS" = "Y" ] ; then echo "Updating policy" echo -e "$rules" \| audit2allow -R >> TEMPLATEFILE.te # Fall though and rebuild policy else exit 0 fi else echo "No new avcs found" exit 0 fi else echo -e $USAGE exit 1 fi elif [ $# -ge 2 ] ; then echo -e $USAGE exit 1 fi echo "Building and Loading Policy" set -x make -f /usr/share/selinux/devel/Makefile TEMPLATEFILE.pp \|\| exit /usr/sbin/semodule -i TEMPLATEFILE.pp a��# Generate a rpm package for the newly generated policy pwd=$(pwd) rpmbuild --define "_sourcedir ${pwd}" --define "_specdir ${pwd}" --define "_builddir ${pwd}" --define "_srcrpmdir ${pwd}" --define "_rpmdir ${pwd}" --define "_buildrootdir ${pwd}/.build" -ba TEMPLATEFILE_selinux.spec zT# Generate a man page of the installed module sepolicy manpage -p . -d DOMAINTYPE_t zI# Fixing the file context on FILENAME /sbin/restorecon -F -R -v FILENAME zk# Adding SELinux tcp port to port PORTNUM /usr/sbin/semanage port -a -t TEMPLATETYPE_port_t -p tcp PORTNUM zk# Adding SELinux udp port to port PORTNUM /usr/sbin/semanage port -a -t TEMPLATETYPE_port_t -p udp PORTNUM zh# Adding SELinux user TEMPLATETYPE_u /usr/sbin/semanage user -a -R "TEMPLATETYPE_rROLES" TEMPLATETYPE_u zq# Adding roles to SELinux user TEMPLATETYPE_u /usr/sbin/semanage user -m -R "TEMPLATETYPE_rROLES" TEMPLATETYPE_u zW# Adding roles to SELinux user USER /usr/sbin/semanage user -m -R +TEMPLATETYPE_r USER a��cat > TEMPLATETYPE_u << _EOF TEMPLATETYPE_r:TEMPLATETYPE_t:s0 TEMPLATETYPE_r:TEMPLATETYPE_t system_r:crond_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:initrc_su_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:local_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:remote_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:sshd_t TEMPLATETYPE_r:TEMPLATETYPE_t _EOF if [ ! -f /etc/selinux/targeted/contexts/users/TEMPLATETYPE_u ]; then cp TEMPLATETYPE_u /etc/selinux/targeted/contexts/users/ fi a��cat > TEMPLATETYPE_u << _EOF TEMPLATETYPE_r:TEMPLATETYPE_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:crond_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:initrc_su_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:local_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:remote_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:sshd_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:xdm_t TEMPLATETYPE_r:TEMPLATETYPE_t _EOF if [ ! -f /etc/selinux/targeted/contexts/users/TEMPLATETYPE_u ]; then cp TEMPLATETYPE_u /etc/selinux/targeted/contexts/users/ fi N)�compileZrpmZmanpageZ restoreconZ tcp_portsZ udp_portsZusersZeusersZadmin_transZmin_login_user_default_contextZx_login_user_default_context��r��r��=/usr/lib/python3.9/site-packages/sepolicy/templates/script.py�<module>��s��.	3.31 KB	2025-09-21 09:25
📄 script.cpython-39.pyc a ��ye��@��s0��d�Z�dZdZdZdZdZdZdZdZd Z d Z dS�)a��#!/bin/sh -e DIRNAME=`dirname $0` cd $DIRNAME USAGE="$0 [ --update ]" if [ `id -u` != 0 ]; then echo 'You must be root to run this script' exit 1 fi if [ $# -eq 1 ]; then if [ "$1" = "--update" ] ; then time=`ls -l --time-style="+%x %X" TEMPLATEFILE.te \| awk '{ printf "%s %s", $6, $7 }'` rules=`ausearch --start $time -m avc --raw -se TEMPLATETYPE` if [ x"$rules" != "x" ] ; then echo "Found avc's to update policy with" echo -e "$rules" \| audit2allow -R echo "Do you want these changes added to policy [y/n]?" read ANS if [ "$ANS" = "y" -o "$ANS" = "Y" ] ; then echo "Updating policy" echo -e "$rules" \| audit2allow -R >> TEMPLATEFILE.te # Fall though and rebuild policy else exit 0 fi else echo "No new avcs found" exit 0 fi else echo -e $USAGE exit 1 fi elif [ $# -ge 2 ] ; then echo -e $USAGE exit 1 fi echo "Building and Loading Policy" set -x make -f /usr/share/selinux/devel/Makefile TEMPLATEFILE.pp \|\| exit /usr/sbin/semodule -i TEMPLATEFILE.pp a��# Generate a rpm package for the newly generated policy pwd=$(pwd) rpmbuild --define "_sourcedir ${pwd}" --define "_specdir ${pwd}" --define "_builddir ${pwd}" --define "_srcrpmdir ${pwd}" --define "_rpmdir ${pwd}" --define "_buildrootdir ${pwd}/.build" -ba TEMPLATEFILE_selinux.spec zT# Generate a man page of the installed module sepolicy manpage -p . -d DOMAINTYPE_t zI# Fixing the file context on FILENAME /sbin/restorecon -F -R -v FILENAME zk# Adding SELinux tcp port to port PORTNUM /usr/sbin/semanage port -a -t TEMPLATETYPE_port_t -p tcp PORTNUM zk# Adding SELinux udp port to port PORTNUM /usr/sbin/semanage port -a -t TEMPLATETYPE_port_t -p udp PORTNUM zh# Adding SELinux user TEMPLATETYPE_u /usr/sbin/semanage user -a -R "TEMPLATETYPE_rROLES" TEMPLATETYPE_u zq# Adding roles to SELinux user TEMPLATETYPE_u /usr/sbin/semanage user -m -R "TEMPLATETYPE_rROLES" TEMPLATETYPE_u zW# Adding roles to SELinux user USER /usr/sbin/semanage user -m -R +TEMPLATETYPE_r USER a��cat > TEMPLATETYPE_u << _EOF TEMPLATETYPE_r:TEMPLATETYPE_t:s0 TEMPLATETYPE_r:TEMPLATETYPE_t system_r:crond_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:initrc_su_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:local_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:remote_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:sshd_t TEMPLATETYPE_r:TEMPLATETYPE_t _EOF if [ ! -f /etc/selinux/targeted/contexts/users/TEMPLATETYPE_u ]; then cp TEMPLATETYPE_u /etc/selinux/targeted/contexts/users/ fi a��cat > TEMPLATETYPE_u << _EOF TEMPLATETYPE_r:TEMPLATETYPE_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:crond_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:initrc_su_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:local_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:remote_login_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:sshd_t TEMPLATETYPE_r:TEMPLATETYPE_t system_r:xdm_t TEMPLATETYPE_r:TEMPLATETYPE_t _EOF if [ ! -f /etc/selinux/targeted/contexts/users/TEMPLATETYPE_u ]; then cp TEMPLATETYPE_u /etc/selinux/targeted/contexts/users/ fi N)�compileZrpmZmanpageZ restoreconZ tcp_portsZ udp_portsZusersZeusersZadmin_transZmin_login_user_default_contextZx_login_user_default_context��r��r��=/usr/lib/python3.9/site-packages/sepolicy/templates/script.py�<module>��s��.	3.31 KB	2025-09-21 09:25
📄 semodule.cpython-39.opt-1.pyc a ��ye��@��s��d�Z�dZdZdZdS�)zQ #!/bin/sh make -f /usr/share/selinux/devel/Makefile semodule -i TEMPLATETYPE.pp z restorecon -R -v FILENAME z9 semanage ports -a -t TEMPLATETYPE_port_t -p tcp PORTNUM z9 semanage ports -a -t TEMPLATETYPE_port_t -p udp PORTNUM N)�compileZ restoreconZ tcp_portsZ udp_ports��r��r��?/usr/lib/python3.9/site-packages/sepolicy/templates/semodule.py�<module>��s��	446 B	2025-09-21 09:25
📄 semodule.cpython-39.pyc a ��ye��@��s��d�Z�dZdZdZdS�)zQ #!/bin/sh make -f /usr/share/selinux/devel/Makefile semodule -i TEMPLATETYPE.pp z restorecon -R -v FILENAME z9 semanage ports -a -t TEMPLATETYPE_port_t -p tcp PORTNUM z9 semanage ports -a -t TEMPLATETYPE_port_t -p udp PORTNUM N)�compileZ restoreconZ tcp_portsZ udp_ports��r��r��?/usr/lib/python3.9/site-packages/sepolicy/templates/semodule.py�<module>��s��	446 B	2025-09-21 09:25
📄 spec.cpython-39.opt-1.pyc a ��{��hb ��@��s��d�Z�dZdZdZdZdS�)z# vim: sw=4:ts=4:et a�� %define selinux_policyver VERSION Name: MODULENAME_selinux Version: 1.0 Release: 1%{?dist} Summary: SELinux policy module for MODULENAME Group: System Environment/Base License: GPLv2+ # This is an example. You will need to change it. # For a complete guide on packaging your policy # see https://fedoraproject.org/wiki/SELinux/IndependentPolicy URL: http://HOSTNAME Source0: MODULENAME.pp Source1: MODULENAME.if Source2: DOMAINNAME_selinux.8 Source3: DOMAINNAME_u Requires: policycoreutils-python-utils, libselinux-utils Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils-python-utils Requires(postun): policycoreutils-python-utils a��BuildArch: noarch %description This package installs and sets up the SELinux policy security module for MODULENAME. %install install -d %{buildroot}%{_datadir}/selinux/packages install -m 644 %{SOURCE0} %{buildroot}%{_datadir}/selinux/packages install -d %{buildroot}%{_datadir}/selinux/devel/include/contrib install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/selinux/devel/include/contrib/ install -d %{buildroot}%{_mandir}/man8/ install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/DOMAINNAME_selinux.8 install -d %{buildroot}/etc/selinux/targeted/contexts/users/ install -m 644 %{SOURCE3} %{buildroot}/etc/selinux/targeted/contexts/users/DOMAINNAME_u %post semodule -n -i %{_datadir}/selinux/packages/MODULENAME.pp # Add the new user defined in DOMAINNAME_u only when the package is installed (not during updates) if [ $1 -eq 1 ]; then /usr/sbin/semanage user -a -R DOMAINNAME_r DOMAINNAME_u fi if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy %relabel_files fi; exit 0 %postun if [ $1 -eq 0 ]; then /usr/sbin/semanage user -d DOMAINNAME_u semodule -n -r MODULENAME if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy %relabel_files fi; fi; exit 0 %files %attr(0600,root,root) %{_datadir}/selinux/packages/MODULENAME.pp %{_datadir}/selinux/devel/include/contrib/MODULENAME.if %{_mandir}/man8/DOMAINNAME_selinux.8.* /etc/selinux/targeted/contexts/users/DOMAINNAME_u %changelog * TODAYSDATE YOUR NAME <YOUR@EMAILADDRESS> 1.0-1 - Initial version z %define relabel_files() \ zrestorecon -R FILENAME; \ N)Zheader_comment_sectionZbase_sectionZmid_sectionZdefine_relabel_files_beginZdefine_relabel_files_end��r��r��;/usr/lib/python3.9/site-packages/sepolicy/templates/spec.py�<module>��s��3	2.48 KB	2025-09-21 09:25
📄 spec.cpython-39.pyc a ��{��hb ��@��s��d�Z�dZdZdZdZdS�)z# vim: sw=4:ts=4:et a�� %define selinux_policyver VERSION Name: MODULENAME_selinux Version: 1.0 Release: 1%{?dist} Summary: SELinux policy module for MODULENAME Group: System Environment/Base License: GPLv2+ # This is an example. You will need to change it. # For a complete guide on packaging your policy # see https://fedoraproject.org/wiki/SELinux/IndependentPolicy URL: http://HOSTNAME Source0: MODULENAME.pp Source1: MODULENAME.if Source2: DOMAINNAME_selinux.8 Source3: DOMAINNAME_u Requires: policycoreutils-python-utils, libselinux-utils Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils-python-utils Requires(postun): policycoreutils-python-utils a��BuildArch: noarch %description This package installs and sets up the SELinux policy security module for MODULENAME. %install install -d %{buildroot}%{_datadir}/selinux/packages install -m 644 %{SOURCE0} %{buildroot}%{_datadir}/selinux/packages install -d %{buildroot}%{_datadir}/selinux/devel/include/contrib install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/selinux/devel/include/contrib/ install -d %{buildroot}%{_mandir}/man8/ install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/DOMAINNAME_selinux.8 install -d %{buildroot}/etc/selinux/targeted/contexts/users/ install -m 644 %{SOURCE3} %{buildroot}/etc/selinux/targeted/contexts/users/DOMAINNAME_u %post semodule -n -i %{_datadir}/selinux/packages/MODULENAME.pp # Add the new user defined in DOMAINNAME_u only when the package is installed (not during updates) if [ $1 -eq 1 ]; then /usr/sbin/semanage user -a -R DOMAINNAME_r DOMAINNAME_u fi if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy %relabel_files fi; exit 0 %postun if [ $1 -eq 0 ]; then /usr/sbin/semanage user -d DOMAINNAME_u semodule -n -r MODULENAME if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy %relabel_files fi; fi; exit 0 %files %attr(0600,root,root) %{_datadir}/selinux/packages/MODULENAME.pp %{_datadir}/selinux/devel/include/contrib/MODULENAME.if %{_mandir}/man8/DOMAINNAME_selinux.8.* /etc/selinux/targeted/contexts/users/DOMAINNAME_u %changelog * TODAYSDATE YOUR NAME <YOUR@EMAILADDRESS> 1.0-1 - Initial version z %define relabel_files() \ zrestorecon -R FILENAME; \ N)Zheader_comment_sectionZbase_sectionZmid_sectionZdefine_relabel_files_beginZdefine_relabel_files_end��r��r��;/usr/lib/python3.9/site-packages/sepolicy/templates/spec.py�<module>��s��3	2.48 KB	2025-09-21 09:25
📄 test_module.cpython-39.opt-1.pyc a ��yea��@��s\��i�Z�d�e�d<�d�e�d<�de�d<�de�d<�de�d<�d e�d <�de�d<�de�d <�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d <�d!e�d"<�d!e�d#<�de�d$<�d!e�d%<�d!e�d&<�d!e�d'<�d(e�d)<�d*e�d+<�d(e�d,<�d-e�d.<�d/e�d0<�d/e�d1<�d2e�d3<�d2e�d4<�d$e�d5<�d$e�d6<�d$e�d7<�d$e�d8<�d9e�d:<�d;e�d<<�d=e�d><�d?e�d@<�dAe�dB<�dCZdDS�)EZsepolicy_domain_t�domainZdomainsZsepolicy_target_tZ target_domainZsepolicy_source_tZ source_domainZsepolicy_peer_tZpeer_domainZsepolicy_exception_types_tZexception_typesZsepolicy_userdomain_tZuser_domainZ userdomainZsepolicy_bool_domain_tZbool_domainZsepolicy_file_t�typeZ file_typeZsepolicy_private_file_tzprivate typeZprivate_typeZsepolicy_devpts_tZpty_typeZsepolicy_tmpfs_tZ tmpfs_typeZsepolicy_home_file_tZ home_typeZ sepolicy_tZtty_typeZdirectory_typeZsepolicy_object_tZobject_typeZsepolicy_exec_tZscript_fileZentry_point�fileZ entry_fileZinit_script_fileZ entrypointZ sepolicy_rZroleZsepolicyZrole_prefixZ user_roleZsepolicy_source_rZsource_roleZsepolicy_domain�prefixZ domain_prefixZsepolicy_userdomainZuserdomain_prefixZuser_prefixZobject_class�object�classzobjectclass(es)Zsepolicy_objectZobject_namez"sepolicy_name"�nameZsepolicy_tty_tZterminalZsepolicy_bool_tZbooleanzs0 - mcs_systemhigh�rangea��policy_module(TEMPLATETYPE, 1.0.0) type sepolicy_t; domain_type(sepolicy_t) type sepolicy_domain_t; domain_type(sepolicy_domain_t) type sepolicy_target_t; domain_type(sepolicy_target_t) type sepolicy_source_t; domain_type(sepolicy_source_t) type sepolicy_peer_t; domain_type(sepolicy_peer_t) type sepolicy_exception_types_t; domain_type(sepolicy_exception_types_t) type sepolicy_userdomain_t; domain_type(sepolicy_userdomain_t) type sepolicy_file_t; files_type(sepolicy_file_t) type sepolicy_private_file_t; files_type(sepolicy_private_file_t) type sepolicy_home_file_t; files_type(sepolicy_home_file_t) type sepolicy_tty_t; term_tty(sepolicy_tty_t) type sepolicy_object_t; type sepolicy_devpts_t; term_pty(sepolicy_devpts_t) type sepolicy_tmpfs_t; files_type(sepolicy_tmpfs_t) type sepolicy_exec_t; files_type(sepolicy_exec_t) role sepolicy_r; role sepolicy_source_r; role sepolicy_target_r; ################################# # # Local policy # N)�dict_valuesZte_test_module��r ��r ��B/usr/lib/python3.9/site-packages/sepolicy/templates/test_module.py�<module>��sV��	2.47 KB	2025-09-21 09:25
📄 test_module.cpython-39.pyc a ��yea��@��s\��i�Z�d�e�d<�d�e�d<�de�d<�de�d<�de�d<�d e�d <�de�d<�de�d <�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d<�de�d <�d!e�d"<�d!e�d#<�de�d$<�d!e�d%<�d!e�d&<�d!e�d'<�d(e�d)<�d*e�d+<�d(e�d,<�d-e�d.<�d/e�d0<�d/e�d1<�d2e�d3<�d2e�d4<�d$e�d5<�d$e�d6<�d$e�d7<�d$e�d8<�d9e�d:<�d;e�d<<�d=e�d><�d?e�d@<�dAe�dB<�dCZdDS�)EZsepolicy_domain_t�domainZdomainsZsepolicy_target_tZ target_domainZsepolicy_source_tZ source_domainZsepolicy_peer_tZpeer_domainZsepolicy_exception_types_tZexception_typesZsepolicy_userdomain_tZuser_domainZ userdomainZsepolicy_bool_domain_tZbool_domainZsepolicy_file_t�typeZ file_typeZsepolicy_private_file_tzprivate typeZprivate_typeZsepolicy_devpts_tZpty_typeZsepolicy_tmpfs_tZ tmpfs_typeZsepolicy_home_file_tZ home_typeZ sepolicy_tZtty_typeZdirectory_typeZsepolicy_object_tZobject_typeZsepolicy_exec_tZscript_fileZentry_point�fileZ entry_fileZinit_script_fileZ entrypointZ sepolicy_rZroleZsepolicyZrole_prefixZ user_roleZsepolicy_source_rZsource_roleZsepolicy_domain�prefixZ domain_prefixZsepolicy_userdomainZuserdomain_prefixZuser_prefixZobject_class�object�classzobjectclass(es)Zsepolicy_objectZobject_namez"sepolicy_name"�nameZsepolicy_tty_tZterminalZsepolicy_bool_tZbooleanzs0 - mcs_systemhigh�rangea��policy_module(TEMPLATETYPE, 1.0.0) type sepolicy_t; domain_type(sepolicy_t) type sepolicy_domain_t; domain_type(sepolicy_domain_t) type sepolicy_target_t; domain_type(sepolicy_target_t) type sepolicy_source_t; domain_type(sepolicy_source_t) type sepolicy_peer_t; domain_type(sepolicy_peer_t) type sepolicy_exception_types_t; domain_type(sepolicy_exception_types_t) type sepolicy_userdomain_t; domain_type(sepolicy_userdomain_t) type sepolicy_file_t; files_type(sepolicy_file_t) type sepolicy_private_file_t; files_type(sepolicy_private_file_t) type sepolicy_home_file_t; files_type(sepolicy_home_file_t) type sepolicy_tty_t; term_tty(sepolicy_tty_t) type sepolicy_object_t; type sepolicy_devpts_t; term_pty(sepolicy_devpts_t) type sepolicy_tmpfs_t; files_type(sepolicy_tmpfs_t) type sepolicy_exec_t; files_type(sepolicy_exec_t) role sepolicy_r; role sepolicy_source_r; role sepolicy_target_r; ################################# # # Local policy # N)�dict_valuesZte_test_module��r ��r ��B/usr/lib/python3.9/site-packages/sepolicy/templates/test_module.py�<module>��sV��	2.47 KB	2025-09-21 09:25
📄 tmp.cpython-39.opt-1.pyc a ��ye� ��@��s ��d�Z�dZdZdZdZdZdZdS�)z= type TEMPLATETYPE_tmp_t; files_tmp_file(TEMPLATETYPE_tmp_t) a:�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, { dir file lnk_file }) z� manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, sock_file) a�� ######################################## ## <summary> ## Do not audit attempts to read, ## TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> # interface(`TEMPLATETYPE_dontaudit_read_tmp_files',` gen_require(` type TEMPLATETYPE_tmp_t; ') dontaudit $1 TEMPLATETYPE_tmp_t:file read_file_perms; ') ######################################## ## <summary> ## Read TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_tmp_files',` gen_require(` type TEMPLATETYPE_tmp_t; ') files_search_tmp($1) read_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_tmp',` gen_require(` type TEMPLATETYPE_tmp_t; ') files_search_tmp($1) manage_dirs_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_lnk_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_tmp_t; ') files_search_pids($1) stream_connect_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_tmp_t;z> files_search_tmp($1) admin_pattern($1, TEMPLATETYPE_tmp_t) N)Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rules��r��r��:/usr/lib/python3.9/site-packages/sepolicy/templates/tmp.py�<module>��s��=	2.54 KB	2025-09-21 09:25
📄 tmp.cpython-39.pyc a ��ye� ��@��s ��d�Z�dZdZdZdZdZdZdS�)z= type TEMPLATETYPE_tmp_t; files_tmp_file(TEMPLATETYPE_tmp_t) a:�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, { dir file lnk_file }) z� manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, sock_file) a�� ######################################## ## <summary> ## Do not audit attempts to read, ## TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> # interface(`TEMPLATETYPE_dontaudit_read_tmp_files',` gen_require(` type TEMPLATETYPE_tmp_t; ') dontaudit $1 TEMPLATETYPE_tmp_t:file read_file_perms; ') ######################################## ## <summary> ## Read TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_tmp_files',` gen_require(` type TEMPLATETYPE_tmp_t; ') files_search_tmp($1) read_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE tmp files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_tmp',` gen_require(` type TEMPLATETYPE_tmp_t; ') files_search_tmp($1) manage_dirs_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) manage_lnk_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_tmp_t; ') files_search_pids($1) stream_connect_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_tmp_t;z> files_search_tmp($1) admin_pattern($1, TEMPLATETYPE_tmp_t) N)Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rules��r��r��:/usr/lib/python3.9/site-packages/sepolicy/templates/tmp.py�<module>��s��=	2.54 KB	2025-09-21 09:25
📄 unit_file.cpython-39.opt-1.pyc a ��ye��@��s ��d�Z�dZdZdZdZdZdZdS�)zL type TEMPLATETYPE_unit_file_t; systemd_unit_file(TEMPLATETYPE_unit_file_t) ��aD��######################################## ## <summary> ## Execute TEMPLATETYPE server in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`TEMPLATETYPE_systemctl',` gen_require(` type TEMPLATETYPE_t; type TEMPLATETYPE_unit_file_t; ') systemd_exec_systemctl($1) systemd_read_fifo_file_passwd_run($1) allow $1 TEMPLATETYPE_unit_file_t:file read_file_perms; allow $1 TEMPLATETYPE_unit_file_t:service manage_service_perms; ps_process_pattern($1, TEMPLATETYPE_t) ') z type TEMPLATETYPE_unit_file_t;z� TEMPLATETYPE_systemctl($1) admin_pattern($1, TEMPLATETYPE_unit_file_t) allow $1 TEMPLATETYPE_unit_file_t:service all_service_perms; zHFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_unit_file_t,s0) N)Zte_typesZte_rulesZif_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/unit_file.py�<module>��s��	1.15 KB	2025-09-21 09:25
📄 unit_file.cpython-39.pyc a ��ye��@��s ��d�Z�dZdZdZdZdZdZdS�)zL type TEMPLATETYPE_unit_file_t; systemd_unit_file(TEMPLATETYPE_unit_file_t) ��aD��######################################## ## <summary> ## Execute TEMPLATETYPE server in the TEMPLATETYPE domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`TEMPLATETYPE_systemctl',` gen_require(` type TEMPLATETYPE_t; type TEMPLATETYPE_unit_file_t; ') systemd_exec_systemctl($1) systemd_read_fifo_file_passwd_run($1) allow $1 TEMPLATETYPE_unit_file_t:file read_file_perms; allow $1 TEMPLATETYPE_unit_file_t:service manage_service_perms; ps_process_pattern($1, TEMPLATETYPE_t) ') z type TEMPLATETYPE_unit_file_t;z� TEMPLATETYPE_systemctl($1) admin_pattern($1, TEMPLATETYPE_unit_file_t) allow $1 TEMPLATETYPE_unit_file_t:service all_service_perms; zHFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_unit_file_t,s0) N)Zte_typesZte_rulesZif_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/unit_file.py�<module>��s��	1.15 KB	2025-09-21 09:25
📄 user.cpython-39.opt-1.pyc a ��yeD��@��sL��d�Z�dZdZdZdZdZdZdZdZdZ d Z d ZdZdZ d ZdZdZdZdS�)z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_unpriv_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_admin_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_restricted_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_restricted_xwindows_user_template(TEMPLATETYPE) z$policy_module(TEMPLATETYPE, 1.0.0) a��policy_module(TEMPLATETYPE, 1.0.0) ## <desc> ## <p> ## Allow TEMPLATETYPE to read files in the user home directory ## </p> ## </desc> gen_tunable(TEMPLATETYPE_read_user_files, false) ## <desc> ## <p> ## Allow TEMPLATETYPE to manage files in the user home directory ## </p> ## </desc> gen_tunable(TEMPLATETYPE_manage_user_files, false) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_base_user_template(TEMPLATETYPE) ��zO ######################################## # # TEMPLATETYPE customized policy # � zO optional_policy(` APPLICATION_role(TEMPLATETYPE_r, TEMPLATETYPE_t) ') z~ optional_policy(` gen_require(` role USER_r; ') TEMPLATETYPE_role_change(USER_r) ') a�� allow TEMPLATETYPE_t self:capability { dac_override dac_read_search kill sys_ptrace sys_nice }; files_dontaudit_search_all_dirs(TEMPLATETYPE_t) selinux_get_enforce_mode(TEMPLATETYPE_t) seutil_domtrans_setfiles(TEMPLATETYPE_t) seutil_search_default_contexts(TEMPLATETYPE_t) logging_send_syslog_msg(TEMPLATETYPE_t) kernel_read_system_state(TEMPLATETYPE_t) domain_dontaudit_search_all_domains_state(TEMPLATETYPE_t) domain_dontaudit_ptrace_all_domains(TEMPLATETYPE_t) userdom_dontaudit_search_admin_dir(TEMPLATETYPE_t) userdom_dontaudit_search_user_home_dirs(TEMPLATETYPE_t) tunable_policy(`TEMPLATETYPE_read_user_files',` userdom_read_user_home_content_files(TEMPLATETYPE_t) userdom_read_user_tmp_files(TEMPLATETYPE_t) ') tunable_policy(`TEMPLATETYPE_manage_user_files',` userdom_manage_user_home_content_dirs(TEMPLATETYPE_t) userdom_manage_user_home_content_files(TEMPLATETYPE_t) userdom_manage_user_home_content_symlinks(TEMPLATETYPE_t) userdom_manage_user_tmp_files(TEMPLATETYPE_t) ') zE gen_require(` role USER_r; ') allow USER_r TEMPLATETYPE_r; zP optional_policy(` APPLICATION_admin(TEMPLATETYPE_t, TEMPLATETYPE_r) ') zz optional_policy(` gen_require(` role ROLE_r; ') allow TEMPLATETYPE_r ROLE_r; ') z_ optional_policy(` sudo_role_template(TEMPLATETYPE, TEMPLATETYPE_r, TEMPLATETYPE_t) ') z4 seutil_run_newrole(TEMPLATETYPE_t, TEMPLATETYPE_r) N)Zte_login_user_typesZte_admin_user_typesZte_min_login_user_typesZte_x_login_user_typesZte_existing_user_typesZte_root_user_typesZte_login_user_rulesZte_existing_user_rulesZte_x_login_user_rulesZte_root_user_rulesZte_transition_rulesZte_user_trans_rulesZte_admin_rulesZte_admin_trans_rulesZte_admin_domain_rulesZte_roles_rulesZ te_sudo_rulesZte_newrole_rules��r��r��;/usr/lib/python3.9/site-packages/sepolicy/templates/user.py�<module>��s"��	3.46 KB	2025-09-21 09:25
📄 user.cpython-39.pyc a ��yeD��@��sL��d�Z�dZdZdZdZdZdZdZdZdZ d Z d ZdZdZ d ZdZdZdZdS�)z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_unpriv_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_admin_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_restricted_user_template(TEMPLATETYPE) z�policy_module(TEMPLATETYPE, 1.0.0) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_restricted_xwindows_user_template(TEMPLATETYPE) z$policy_module(TEMPLATETYPE, 1.0.0) a��policy_module(TEMPLATETYPE, 1.0.0) ## <desc> ## <p> ## Allow TEMPLATETYPE to read files in the user home directory ## </p> ## </desc> gen_tunable(TEMPLATETYPE_read_user_files, false) ## <desc> ## <p> ## Allow TEMPLATETYPE to manage files in the user home directory ## </p> ## </desc> gen_tunable(TEMPLATETYPE_manage_user_files, false) ######################################## # # Declarations # role TEMPLATETYPE_r; userdom_base_user_template(TEMPLATETYPE) ��zO ######################################## # # TEMPLATETYPE customized policy # � zO optional_policy(` APPLICATION_role(TEMPLATETYPE_r, TEMPLATETYPE_t) ') z~ optional_policy(` gen_require(` role USER_r; ') TEMPLATETYPE_role_change(USER_r) ') a�� allow TEMPLATETYPE_t self:capability { dac_override dac_read_search kill sys_ptrace sys_nice }; files_dontaudit_search_all_dirs(TEMPLATETYPE_t) selinux_get_enforce_mode(TEMPLATETYPE_t) seutil_domtrans_setfiles(TEMPLATETYPE_t) seutil_search_default_contexts(TEMPLATETYPE_t) logging_send_syslog_msg(TEMPLATETYPE_t) kernel_read_system_state(TEMPLATETYPE_t) domain_dontaudit_search_all_domains_state(TEMPLATETYPE_t) domain_dontaudit_ptrace_all_domains(TEMPLATETYPE_t) userdom_dontaudit_search_admin_dir(TEMPLATETYPE_t) userdom_dontaudit_search_user_home_dirs(TEMPLATETYPE_t) tunable_policy(`TEMPLATETYPE_read_user_files',` userdom_read_user_home_content_files(TEMPLATETYPE_t) userdom_read_user_tmp_files(TEMPLATETYPE_t) ') tunable_policy(`TEMPLATETYPE_manage_user_files',` userdom_manage_user_home_content_dirs(TEMPLATETYPE_t) userdom_manage_user_home_content_files(TEMPLATETYPE_t) userdom_manage_user_home_content_symlinks(TEMPLATETYPE_t) userdom_manage_user_tmp_files(TEMPLATETYPE_t) ') zE gen_require(` role USER_r; ') allow USER_r TEMPLATETYPE_r; zP optional_policy(` APPLICATION_admin(TEMPLATETYPE_t, TEMPLATETYPE_r) ') zz optional_policy(` gen_require(` role ROLE_r; ') allow TEMPLATETYPE_r ROLE_r; ') z_ optional_policy(` sudo_role_template(TEMPLATETYPE, TEMPLATETYPE_r, TEMPLATETYPE_t) ') z4 seutil_run_newrole(TEMPLATETYPE_t, TEMPLATETYPE_r) N)Zte_login_user_typesZte_admin_user_typesZte_min_login_user_typesZte_x_login_user_typesZte_existing_user_typesZte_root_user_typesZte_login_user_rulesZte_existing_user_rulesZte_x_login_user_rulesZte_root_user_rulesZte_transition_rulesZte_user_trans_rulesZte_admin_rulesZte_admin_trans_rulesZte_admin_domain_rulesZte_roles_rulesZ te_sudo_rulesZte_newrole_rules��r��r��;/usr/lib/python3.9/site-packages/sepolicy/templates/user.py�<module>��s"��	3.46 KB	2025-09-21 09:25
📄 var_cache.cpython-39.opt-1.pyc a ��ye8��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z= type TEMPLATETYPE_cache_t; files_type(TEMPLATETYPE_cache_t) aH�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) files_var_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) files_var_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE cache directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_cache',` gen_require(` type TEMPLATETYPE_cache_t; ') allow $1 TEMPLATETYPE_cache_t:dir search_dir_perms; files_search_var($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE cache files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_cache_files',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) read_files_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') ######################################## ## <summary> ## Create, read, write, and delete ## TEMPLATETYPE cache files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_cache_files',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) manage_files_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE cache dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_cache_dirs',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) manage_dirs_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_cache_t; ') stream_connect_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') z type TEMPLATETYPE_cache_t;z@ files_search_var($1) admin_pattern($1, TEMPLATETYPE_cache_t) zDFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_cache_t,s0) zGFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_cache_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/var_cache.py�<module>��s��P	3 KB	2025-09-21 09:25
📄 var_cache.cpython-39.pyc a ��ye8��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z= type TEMPLATETYPE_cache_t; files_type(TEMPLATETYPE_cache_t) aH�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) files_var_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) files_var_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_cache_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE cache directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_cache',` gen_require(` type TEMPLATETYPE_cache_t; ') allow $1 TEMPLATETYPE_cache_t:dir search_dir_perms; files_search_var($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE cache files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_cache_files',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) read_files_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') ######################################## ## <summary> ## Create, read, write, and delete ## TEMPLATETYPE cache files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_cache_files',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) manage_files_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE cache dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_cache_dirs',` gen_require(` type TEMPLATETYPE_cache_t; ') files_search_var($1) manage_dirs_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_cache_t; ') stream_connect_pattern($1, TEMPLATETYPE_cache_t, TEMPLATETYPE_cache_t) ') z type TEMPLATETYPE_cache_t;z@ files_search_var($1) admin_pattern($1, TEMPLATETYPE_cache_t) zDFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_cache_t,s0) zGFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_cache_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/var_cache.py�<module>��s��P	3 KB	2025-09-21 09:25
📄 var_lib.cpython-39.opt-1.pyc a ��ye��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)zA type TEMPLATETYPE_var_lib_t; files_type(TEMPLATETYPE_var_lib_t) aZ�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) files_var_lib_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) files_var_lib_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_lib',` gen_require(` type TEMPLATETYPE_var_lib_t; ') allow $1 TEMPLATETYPE_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_lib_files',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) read_files_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_lib_files',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) manage_files_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_lib_dirs',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) manage_dirs_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t; ') stream_connect_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') z type TEMPLATETYPE_var_lib_t;zF files_search_var_lib($1) admin_pattern($1, TEMPLATETYPE_var_lib_t) zFFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) zFFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) zIFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_lib.py�<module>��s��O	3.13 KB	2025-09-21 09:25
📄 var_lib.cpython-39.pyc a ��ye��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)zA type TEMPLATETYPE_var_lib_t; files_type(TEMPLATETYPE_var_lib_t) aZ�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) files_var_lib_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) files_var_lib_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_lib',` gen_require(` type TEMPLATETYPE_var_lib_t; ') allow $1 TEMPLATETYPE_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_lib_files',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) read_files_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_lib_files',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) manage_files_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_lib_dirs',` gen_require(` type TEMPLATETYPE_var_lib_t; ') files_search_var_lib($1) manage_dirs_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_var_lib_t; ') stream_connect_pattern($1, TEMPLATETYPE_var_lib_t, TEMPLATETYPE_var_lib_t) ') z type TEMPLATETYPE_var_lib_t;zF files_search_var_lib($1) admin_pattern($1, TEMPLATETYPE_var_lib_t) zFFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) zFFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) zIFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_var_lib_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_lib.py�<module>��s��O	3.13 KB	2025-09-21 09:25
📄 var_log.cpython-39.opt-1.pyc a ��ye��@��s ��d�Z�dZdZdZdZdZdZdS�)z? type TEMPLATETYPE_log_t; logging_log_file(TEMPLATETYPE_log_t) a<�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) logging_log_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_log_t, { dir file lnk_file }) a��######################################## ## <summary> ## Read TEMPLATETYPE's log files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_read_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) read_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') ######################################## ## <summary> ## Append to TEMPLATETYPE log files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_append_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) append_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE log files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) manage_dirs_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_lnk_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') z type TEMPLATETYPE_log_t;zA logging_search_logs($1) admin_pattern($1, TEMPLATETYPE_log_t) zBFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_log_t,s0) zEFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_log_t,s0) N)Zte_typesZte_rulesZif_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_log.py�<module>��s��>	2.11 KB	2025-09-21 09:25
📄 var_log.cpython-39.pyc a ��ye��@��s ��d�Z�dZdZdZdZdZdZdS�)z? type TEMPLATETYPE_log_t; logging_log_file(TEMPLATETYPE_log_t) a<�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) logging_log_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_log_t, { dir file lnk_file }) a��######################################## ## <summary> ## Read TEMPLATETYPE's log files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`TEMPLATETYPE_read_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) read_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') ######################################## ## <summary> ## Append to TEMPLATETYPE log files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_append_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) append_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE log files ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_log',` gen_require(` type TEMPLATETYPE_log_t; ') logging_search_logs($1) manage_dirs_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) manage_lnk_files_pattern($1, TEMPLATETYPE_log_t, TEMPLATETYPE_log_t) ') z type TEMPLATETYPE_log_t;zA logging_search_logs($1) admin_pattern($1, TEMPLATETYPE_log_t) zBFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_log_t,s0) zEFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_log_t,s0) N)Zte_typesZte_rulesZif_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_log.py�<module>��s��>	2.11 KB	2025-09-21 09:25
📄 var_run.cpython-39.opt-1.pyc a ��yes��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)zE type TEMPLATETYPE_var_run_t; files_pid_file(TEMPLATETYPE_var_run_t) aV�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) files_pid_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, { dir file lnk_file }) z� manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) files_pid_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, sock_file) a��######################################## ## <summary> ## Read TEMPLATETYPE PID files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_pid_files',` gen_require(` type TEMPLATETYPE_var_run_t; ') files_search_pids($1) read_files_pattern($1, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_var_run_t; ') files_search_pids($1) stream_connect_pattern($1, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_var_run_t;zC files_search_pids($1) admin_pattern($1, TEMPLATETYPE_var_run_t) zFFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) zFFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) zIFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_run.py�<module>��s��	2.02 KB	2025-09-21 09:25
📄 var_run.cpython-39.pyc a ��yes��@��s,��d�Z�dZdZdZdZdZdZdZdZd Z d S�)zE type TEMPLATETYPE_var_run_t; files_pid_file(TEMPLATETYPE_var_run_t) aV�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) files_pid_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, { dir file lnk_file }) z� manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) files_pid_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_var_run_t, sock_file) a��######################################## ## <summary> ## Read TEMPLATETYPE PID files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_pid_files',` gen_require(` type TEMPLATETYPE_var_run_t; ') files_search_pids($1) read_files_pattern($1, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t) ') a��######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_var_run_t; ') files_search_pids($1) stream_connect_pattern($1, TEMPLATETYPE_var_run_t, TEMPLATETYPE_var_run_t, TEMPLATETYPE_t) ') z type TEMPLATETYPE_var_run_t;zC files_search_pids($1) admin_pattern($1, TEMPLATETYPE_var_run_t) zFFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) zFFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) zIFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_var_run_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_sock_fileZfc_dir��r��r��>/usr/lib/python3.9/site-packages/sepolicy/templates/var_run.py�<module>��s��	2.02 KB	2025-09-21 09:25
📄 var_spool.cpython-39.opt-1.pyc a ��ye.��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z= type TEMPLATETYPE_spool_t; files_type(TEMPLATETYPE_spool_t) aJ�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) files_spool_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) files_spool_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE spool directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_spool',` gen_require(` type TEMPLATETYPE_spool_t; ') allow $1 TEMPLATETYPE_spool_t:dir search_dir_perms; files_search_spool($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_spool_files',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) read_files_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_spool_files',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) manage_files_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE spool dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_spool_dirs',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) manage_dirs_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_spool_t; ') stream_connect_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') z type TEMPLATETYPE_spool_t;zB files_search_spool($1) admin_pattern($1, TEMPLATETYPE_spool_t) zDFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_spool_t,s0) zGFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_spool_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/var_spool.py�<module>��s��O	2.98 KB	2025-09-21 09:25
📄 var_spool.cpython-39.pyc a ��ye.��@��s(��d�Z�dZdZdZdZdZdZdZdZd S�) z= type TEMPLATETYPE_spool_t; files_type(TEMPLATETYPE_spool_t) aJ�� manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) files_spool_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, { dir file lnk_file }) z�manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) files_spool_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_spool_t, sock_file) a�� ######################################## ## <summary> ## Search TEMPLATETYPE spool directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_search_spool',` gen_require(` type TEMPLATETYPE_spool_t; ') allow $1 TEMPLATETYPE_spool_t:dir search_dir_perms; files_search_spool($1) ') ######################################## ## <summary> ## Read TEMPLATETYPE spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_read_spool_files',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) read_files_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_spool_files',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) manage_files_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') ######################################## ## <summary> ## Manage TEMPLATETYPE spool dirs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_manage_spool_dirs',` gen_require(` type TEMPLATETYPE_spool_t; ') files_search_spool($1) manage_dirs_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') a�� ######################################## ## <summary> ## Connect to TEMPLATETYPE over a unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`TEMPLATETYPE_stream_connect',` gen_require(` type TEMPLATETYPE_t, TEMPLATETYPE_spool_t; ') stream_connect_pattern($1, TEMPLATETYPE_spool_t, TEMPLATETYPE_spool_t) ') z type TEMPLATETYPE_spool_t;zB files_search_spool($1) admin_pattern($1, TEMPLATETYPE_spool_t) zDFILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_spool_t,s0) zGFILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_spool_t,s0) N) Zte_typesZte_rulesZte_stream_rulesZif_rulesZif_stream_rulesZif_admin_typesZif_admin_rulesZfc_fileZfc_dir��r��r��@/usr/lib/python3.9/site-packages/sepolicy/templates/var_spool.py�<module>��s��O	2.98 KB	2025-09-21 09:25

Edit File:

Terminal