1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
<Comment># Sample SELinux Labeling Policy File</Comment><br/>
<Normal Text></Normal Text><br/>
<Comment># Syntax of 'file_contexts' file and other SELinux configuration files:</Comment><br/>
<Normal Text></Normal Text><br/>
<Path>/usr/lib/</Path><Special Char>.*</Special Char><Path>/program/foo</Path><Escape Char>\.</Escape Char><Path>so</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c0</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>dsds</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>sd</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>sdsd</MLS/MCS Level><br/>
<Path>/</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>default_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/sys</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>sysfs_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/xen</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>xen_image_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s1</MLS/MCS Level><br/>
<Path>/mnt</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><File Type> -d</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>mnt_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s1-5</MLS/MCS Level><br/>
<Path>/mnt</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><File Type> -l</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>mnt_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>s2</MLS/MCS Level><br/>
<Path>/tmp/</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><Other Keywords><<none>></Other Keywords><br/>
<Path>/root</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>admin_home_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/dev/</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>0-9</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>.*</Special Char><Normal Text> </Normal Text><File Type> -c</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>usb_device_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/run/</Path><Special Char>.*</Special Char><Escape Char>\.</Escape Char><Special Char>*</Special Char><Path>pid</Path><Normal Text> </Normal Text><Other Keywords><<none>></Other Keywords><br/>
<Path>/mnt/</Path><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><Path>/</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><Other Keywords><<none>></Other Keywords><br/>
<Path>/etc/</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>mg</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Path>dm</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>xdm_etc_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s5</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>s6</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c0</MLS/MCS Level><br/>
<Path>/dev/</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>misc/</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Path>psaux</Path><Normal Text> </Normal Text><File Type> -c</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>mouse_device_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>s3</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c0</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>c5</MLS/MCS Level><br/>
<Normal Text></Normal Text><br/>
<Variable>HOME_DIR</Variable><Path>/</Path><Special Char>.+</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>user_home_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Variable>HOME_DIR</Variable><Path>/</Path><RegExp Brackets>((</RegExp Brackets><RegExp Brackets Content>www</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char of Brackets>|</Special Char of Brackets><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>web</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char of Brackets>|</Special Char of Brackets><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>public_html</RegExp Brackets Content><RegExp Brackets>))(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.+</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>httpd_user_content_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Variable>HOME_DIR</Variable><Path>/</Path><Escape Char>\.</Escape Char><Path>cache/google-chrome</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>chrome_sandbox_home_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Normal Text></Normal Text><br/>
<Path>/dev/</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>misc/</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Path>rtc</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>0-9</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><Normal Text> </Normal Text><File Type> -c</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>clock_device_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>s2</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c1</MLS/MCS Level><br/>
<Path>/var/</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>db</RegExp Brackets Content><Special Char of Brackets>|</Special Char of Brackets><RegExp Brackets Content>adm</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Path>/sudo</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>pam_var_run_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/dev/pcd</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>0-3</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Normal Text> </Normal Text><File Type> -b</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>removable_device_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/etc/ppp</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>pppd_etc_rw_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/var/www</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>httpd_sys_content_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/usr/lib</Path><RegExp Brackets>(</RegExp Brackets><Special Char>.*</Special Char><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Path>bin</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>bin_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/dev/shm/</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><Other Keywords><<none>></Other Keywords><br/>
<Path>/usr/lib/</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>sse2/</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Path>hello-</Path><Special Char>.*</Special Char><Escape Char>\.</Escape Char><Path>so</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>textrel_shlib_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/sbin/grub</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>bootloader_exec_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>s3</MLS/MCS Level><br/>
<Path>/sbin/lilo</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>bootloader_exec_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>/etc/group</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>-</RegExp Brackets Content><Escape Char>\+</Escape Char><RegExp Brackets>]</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>passwd_file_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c1</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>c5</MLS/MCS Level><br/>
<Path>/etc/rc</Path><Escape Char>\.</Escape Char><Path>d/init</Path><Escape Char>\.</Escape Char><Path>d/mpd</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>mpd_initrc_exec_t</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Normal Text></Normal Text><br/>
<Normal Text></Normal Text><br/>
<Comment># Syntax of *.fc files, from the SELinux reference policy:</Comment><br/>
<Normal Text></Normal Text><br/>
<Path>/run/sudo/ts/</Path><Variable>%{USERNAME}</Variable><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>pam_var_run_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>c0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Path>/etc/aiccu</Path><Escape Char>\.</Escape Char><Path>conf</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>aiccu_etc_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>s2</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>c1</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>c5</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Variable>HOME_DIR</Variable><Path>/</Path><Escape Char>\.</Escape Char><Path>mtpz-data</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>libmtp_home_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Path>/var/log/mariadb</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>/</RegExp Brackets Content><Special Char>.*</Special Char><RegExp Brackets>)</RegExp Brackets><Special Char>?</Special Char><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>mysqld_log_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Path>/dev/dasd</Path><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><Normal Text> </Normal Text><File Type> -b</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>fixed_disk_device_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>mls_systemhigh</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Path>/dev/dasd</Path><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>/</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>*</Special Char><Normal Text> </Normal Text><File Type> -c</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>fixed_disk_device_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>mls_systemhigh</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Variable>HOME_ROOT</Variable><Normal Text> </Normal Text><File Type> -d</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>home_root_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>mls_systemhigh</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>s1</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Variable>HOME_ROOT</Variable><Normal Text> </Normal Text><File Type> -l</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>home_root_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text></Normal Text><br/>
<M4 Built-in Keywords>ifdef</M4 Built-in Keywords><Normal Text>(</Normal Text><Text Quoted>`distro_debian'</Text Quoted><Symbol>,</Symbol><Default M4 Quote>`</Default M4 Quote><br/>
<Normal Text> </Normal Text><Path>/run/shm</Path><Normal Text> </Normal Text><File Type> -d</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>tmpfs_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text> </Normal Text><Path>/run/shm/</Path><Special Char>.*</Special Char><Normal Text> </Normal Text><Other Keywords><<none>></Other Keywords><br/>
<Default M4 Quote>'</Default M4 Quote><Normal Text>)</Normal Text><br/>
<M4 Built-in Keywords>ifdef</M4 Built-in Keywords><Normal Text>(</Normal Text><Text Quoted>`distro_suse'</Text Quoted><Symbol>,</Symbol><Default M4 Quote>`</Default M4 Quote><br/>
<Normal Text> </Normal Text><Path>/success</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>etc_runtime_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Default M4 Quote>'</Default M4 Quote><Normal Text>)</Normal Text><br/>
<M4 Built-in Keywords>ifdef</M4 Built-in Keywords><Normal Text>(</Normal Text><Text Quoted>`init_systemd'</Text Quoted><Symbol>,</Symbol><Default M4 Quote>`</Default M4 Quote><br/>
<Normal Text> </Normal Text><Path>/run/tmpfiles</Path><Escape Char>\.</Escape Char><Path>d/kmod</Path><Escape Char>\.</Escape Char><Path>conf</Path><Normal Text> </Normal Text><File Type> --</File Type><Normal Text> </Normal Text><Refpolicy Keywords>gen_context</Refpolicy Keywords><Normal Text>(</Normal Text><User>system_u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>kmod_tmpfiles_conf_t</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Default M4 Quote>'</Default M4 Quote><Normal Text>)</Normal Text><br/>
<Normal Text></Normal Text><br/>
<Comment># Android contexts</Comment><br/>
<Normal Text></Normal Text><br/>
<Path>android.hardware.light::ILight</Path><Normal Text> </Normal Text><User>u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>hal_light_hwservice</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>android.hardware.nfc::INfc</Path><Normal Text> </Normal Text><User>u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>hal_nfc_hwservice</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Special Char>*</Special Char><Normal Text> </Normal Text><User>u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>default_android_hwservice</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><br/>
<Path>ro.boot.bootloader</Path><Normal Text> </Normal Text><User>u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>exported2_default_prop</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text> exact string</Normal Text><br/>
<Path>sys.usb.mtp.device_type</Path><Normal Text> </Normal Text><User>u</User><Normal Text>:</Normal Text><Role>object_r</Role><Normal Text>:</Normal Text><Type Enforcement>exported2_system_prop</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text> exact int</Normal Text><br/>
<Normal Text></Normal Text><br/>
<Comment># Tests</Comment><br/>
<Normal Text></Normal Text><br/>
<Comment># Variables</Comment><br/>
<Variable>HOME_DIR</Variable><Path>/path</Path><br/>
<Variable>HOME_ROOT</Variable><Path>/path</Path><br/>
<Path>/path/</Path><Variable>HOME_DIR</Variable><Path>/</Path><Variable>HOME_ROOT</Variable><br/>
<Normal Text></Normal Text><br/>
<Comment># Open brackets</Comment><br/>
<Path>/hello</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>worl</RegExp Brackets Content><Open RegExp Brackets>d</Open RegExp Brackets><br/>
<Path>/hello</Path><RegExp Brackets>[</RegExp Brackets><RegExp Brackets Content>w</RegExp Brackets Content><Open RegExp Brackets>o</Open RegExp Brackets><br/>
<Normal Text></Normal Text><br/>
<Path>/path</Path><RegExp Brackets>[</RegExp Brackets><Special Char of Brackets>^</Special Char of Brackets><RegExp Brackets Content>0-8</RegExp Brackets Content><RegExp Brackets>]</RegExp Brackets><Special Char>+</Special Char><br/>
<Path>/path</Path><RegExp Brackets>(</RegExp Brackets><RegExp Brackets Content>hello</RegExp Brackets Content><Special Char of Brackets>|</Special Char of Brackets><RegExp Brackets Content>bye</RegExp Brackets Content><RegExp Brackets>)</RegExp Brackets><br/>
<Path>/path</Path><Special Char>.*</Special Char><Path>a</Path><Special Char>+</Special Char><Path>b</Path><Special Char>?</Special Char><br/>
<Path>/path</Path><Escape Char>\w</Escape Char><Path>a</Path><Escape Char>\W</Escape Char><Path>a</Path><Escape Char>\s</Escape Char><Path>a</Path><Escape Char>\d</Escape Char><Path>a</Path><Escape Char>\b</Escape Char><Path>a</Path><Escape Char>\B</Escape Char><Path>a</Path><Escape Char>\(</Escape Char><Path>a</Path><br/>
<Path>/usr/hi</Path><Escape Char>\"</Escape Char><Path>esc</Path><Escape Char>\s</Escape Char><Path>esc</Path><Escape Char>\032</Escape Char><Path>esc</Path><Escape Char>\*</Escape Char><Path>3esds</Path><br/>
<Normal Text></Normal Text><br/>
<Comment># Security contexts</Comment><br/>
<Normal Text>user:role</Normal Text><br/>
<Normal Text>user:role:</Normal Text><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_sensitivity</MLS/MCS Level><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_sensitivity</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_category</MLS/MCS Level><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_sensitivity</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_category</MLS/MCS Level><Normal Text>:other:other</Normal Text><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_sensitivity</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_category</MLS/MCS Level><Normal Text>-</Normal Text><MLS/MCS Level>sens</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>cat</MLS/MCS Level><Normal Text>:other</Normal Text><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>s1</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>s3</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c0</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>c1</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>c2</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>c3</MLS/MCS Level><Normal Text> - </Normal Text><MLS/MCS Level>s5</MLS/MCS Level><Normal Text>.</Normal Text><MLS/MCS Level>s6</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>c4</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>c5</MLS/MCS Level><Normal Text>:other</Normal Text><br/>
<User>user </User><Normal Text>:</Normal Text><Role> role </Role><Normal Text>:</Normal Text><Type Enforcement> type</Type Enforcement><Normal Text> : </Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Normal Text> . </Normal Text><MLS/MCS Level>s1</MLS/MCS Level><Normal Text> . </Normal Text><MLS/MCS Level>s3</MLS/MCS Level><Normal Text> : </Normal Text><MLS/MCS Level>c0</MLS/MCS Level><Normal Text> . </Normal Text><MLS/MCS Level>c1</MLS/MCS Level><Normal Text> , </Normal Text><MLS/MCS Level>c2</MLS/MCS Level><Normal Text> , </Normal Text><MLS/MCS Level>c3</MLS/MCS Level><Normal Text> - </Normal Text><MLS/MCS Level>s5</MLS/MCS Level><Normal Text> . </Normal Text><MLS/MCS Level>s6</MLS/MCS Level><Normal Text> : </Normal Text><MLS/MCS Level>c4</MLS/MCS Level><Normal Text> , </Normal Text><MLS/MCS Level>c5</MLS/MCS Level><Normal Text> : other</Normal Text><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>s0</MLS/MCS Level><Symbol>,</Symbol><Normal Text>other</Normal Text><br/>
<Normal Text></Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>,)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>:other</Normal Text><Symbol>,</Symbol><Normal Text>other</Normal Text><Symbol>,</Symbol><Normal Text>other) </Normal Text><br/>
<Normal Text></Normal Text><br/>
<Normal Text>us </Normal Text><User>er</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><br/>
<Normal Text>user:ro </Normal Text><User>le</User><Normal Text>:</Normal Text><Role>type</Role><Normal Text>:</Normal Text><Type Enforcement>level_s</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>ty</Type Enforcement><Normal Text> </Normal Text><User>pe</User><Normal Text>:</Normal Text><Role>level_s</Role><Normal Text>:</Normal Text><Type Enforcement>level_c</Type Enforcement><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>lev</MLS/MCS Level><Normal Text> el_s:level_c</Normal Text><br/>
<User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>:</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>:</Normal Text><MLS/MCS Level>lev</MLS/MCS Level><Normal Text> el_c</Normal Text><br/>
<Normal Text></Normal Text><br/>
<Normal Text>(u </Normal Text><User>ser</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>(user:ro le:type</Normal Text><Symbol>,</Symbol><Normal Text>level_s</Normal Text><Symbol>,</Symbol><Normal Text>level_c</Normal Text><Symbol>,</Symbol><Normal Text>other</Normal Text><Symbol>,</Symbol><Normal Text>other)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>ty</Type Enforcement><Normal Text> pe</Normal Text><Symbol>,</Symbol><Normal Text>level_s</Normal Text><Symbol>,</Symbol><Normal Text>level_c</Normal Text><Symbol>,</Symbol><Normal Text>other</Normal Text><Symbol>,</Symbol><Normal Text>other)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>le vel_s</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>level_c</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>(</Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>,</Normal Text><MLS/MCS Level>level_s</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>le vel_c</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level>other</MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text></Normal Text><br/>
<Normal Text>( </Normal Text><User>user </User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>, </Normal Text><MLS/MCS Level>level_s </MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level> level_c </MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level> other </MLS/MCS Level><Normal Text>)</Normal Text><br/>
<Normal Text>( </Normal Text><User>user</User><Normal Text>:</Normal Text><Role>role</Role><Normal Text>:</Normal Text><Type Enforcement>type</Type Enforcement><Normal Text>, </Normal Text><MLS/MCS Level>level_s </MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level> level_c </MLS/MCS Level><Normal Text>,</Normal Text><MLS/MCS Level> other </MLS/MCS Level><Normal Text>)</Normal Text><br/>
|
