summaryrefslogtreecommitdiffstats
path: root/selinux/ceph.fc
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 18:45:59 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 18:45:59 +0000
commit19fcec84d8d7d21e796c7624e521b60d28ee21ed (patch)
tree42d26aa27d1e3f7c0b8bd3fd14e7d7082f5008dc /selinux/ceph.fc
parentInitial commit. (diff)
downloadceph-19fcec84d8d7d21e796c7624e521b60d28ee21ed.tar.xz
ceph-19fcec84d8d7d21e796c7624e521b60d28ee21ed.zip
Adding upstream version 16.2.11+ds.upstream/16.2.11+dsupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'selinux/ceph.fc')
-rw-r--r--selinux/ceph.fc20
1 files changed, 20 insertions, 0 deletions
diff --git a/selinux/ceph.fc b/selinux/ceph.fc
new file mode 100644
index 000000000..395c7caa5
--- /dev/null
+++ b/selinux/ceph.fc
@@ -0,0 +1,20 @@
+/etc/rc\.d/init\.d/ceph -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
+/etc/rc\.d/init\.d/radosgw -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
+
+/usr/bin/ceph-mgr -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/ceph-mon -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/ceph-mds -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/ceph-fuse -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/ceph-osd -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/radosgw -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/rbd-target-gw -- gen_context(system_u:object_r:ceph_exec_t,s0)
+/usr/bin/rbd-target-api -- gen_context(system_u:object_r:ceph_exec_t,s0)
+
+/var/lib/ceph(/.*)? gen_context(system_u:object_r:ceph_var_lib_t,s0)
+
+/var/log/ceph(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
+/var/log/radosgw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
+/var/log/rbd-target-api(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
+/var/log/rbd-target-gw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
+
+/var/run/ceph(/.*)? gen_context(system_u:object_r:ceph_var_run_t,s0)