1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
This group of rules are meant to be used with the fagenrules program.
The fagenrules program expects rules to be located in /etc/fapolicyd/rules.d/
The rules will get processed in a specific order based on their natural
sort order. To make things easier to use, the files in this directory are
organized into groups with the following meanings:
10 - macros
20 - loop holes
30 - patterns
40 - ELF rules
50 - user/group access rules
60 - application access rules
70 - language rules
80 - trusted execute
90 - general open access to documents
that should be thought out and individual files copied to
/etc/fapolicyd/rules.d/
Once you have the rules in the rules.d directory, you can load them by running
fagenrules --load
You can reconstruct the old policy files by including the following:
fapolicyd.rules.known-libs
--------------------------
10-languages.rules
20-dracut.rules
21-updaters.rules
30-patterns.rules
40-bad-elf.rules
41-shared-obj.rules
42-trusted-elf.rules
70-trusted-lang.rules
72-shell.rules
90-deny-execute.rules
95-allow-open.rules
fapolicyd.rules.restrictive
---------------------------
10-languages.rules
20-dracut.rules
21-updaters.rules
30-patterns.rules
40-bad-elf.rules
41-shared-obj.rules
43-known-elf.rules
71-known-python.rules
72-shell.rules
73-known-perl.rules (optional)
74-known-ocaml.rules (optiona)
75-known-php.rules (optional)
76-known-ruby.rules (optional)
77-known-lua.rules (optional)
90-deny-execute.rules
91-deny-lang.rules
95-allow-open.rules
|
