diff options
Diffstat (limited to 'src/file/misc')
-rw-r--r-- | src/file/misc/lostfoundfile.cil | 10 | ||||
-rw-r--r-- | src/file/misc/mediafile.cil | 10 | ||||
-rw-r--r-- | src/file/misc/rootfile.cil | 13 | ||||
-rw-r--r-- | src/file/misc/unknownfile.cil | 30 |
4 files changed, 63 insertions, 0 deletions
diff --git a/src/file/misc/lostfoundfile.cil b/src/file/misc/lostfoundfile.cil new file mode 100644 index 0000000..cb1d82a --- /dev/null +++ b/src/file/misc/lostfoundfile.cil @@ -0,0 +1,10 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-License-Identifier: Unlicense + +(block lostfound + + (blockinherit .file.base_template) + (blockinherit .file.macro_template_dirs) + (blockinherit .file.macro_template_files) + + (call .xattr.associate_fs (file))) diff --git a/src/file/misc/mediafile.cil b/src/file/misc/mediafile.cil new file mode 100644 index 0000000..60b31a8 --- /dev/null +++ b/src/file/misc/mediafile.cil @@ -0,0 +1,10 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-License-Identifier: Unlicense + +(block media + + (blockinherit .file.base_template) + (blockinherit .file.macro_template_dirs) + (blockinherit .file.macro_template_lnk_files) + + (call .xattr.associate_fs (file))) diff --git a/src/file/misc/rootfile.cil b/src/file/misc/rootfile.cil new file mode 100644 index 0000000..3e0799c --- /dev/null +++ b/src/file/misc/rootfile.cil @@ -0,0 +1,13 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-License-Identifier: Unlicense + +(block root + + (filecon "/" dir file_context) + (filecon "/[^/]+" symlink file_context) + + (blockinherit .file.base_template) + (blockinherit .file.macro_template_dirs) + (blockinherit .file.macro_template_lnk_files) + + (call .xattr.associate_fs (file))) diff --git a/src/file/misc/unknownfile.cil b/src/file/misc/unknownfile.cil new file mode 100644 index 0000000..f6fb47c --- /dev/null +++ b/src/file/misc/unknownfile.cil @@ -0,0 +1,30 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-License-Identifier: Unlicense + +(block unknown + + (filecon "/.*" any file_context) + + (macro root_file_type_transition_file ((type ARG1)(class ARG2)(name ARG3)) + (call .root.file_type_transition + (ARG1 file ARG2 ARG3))) + + (blockinherit .file.base_template) + (blockinherit .file.macro_template_blk_files) + (blockinherit .file.macro_template_chr_files) + (blockinherit .file.macro_template_dirs) + (blockinherit .file.macro_template_fifo_files) + (blockinherit .file.macro_template_files) + (blockinherit .file.macro_template_lnk_files) + (blockinherit .file.macro_template_sock_files) + + (call .xattr.associate_fs (file))) + +(in file.unconfined + + (call .unknown.root_file_type_transition_file (typeattr blk_file "*")) + (call .unknown.root_file_type_transition_file (typeattr chr_file "*")) + (call .unknown.root_file_type_transition_file (typeattr dir "*")) + (call .unknown.root_file_type_transition_file (typeattr fifo_file "*")) + (call .unknown.root_file_type_transition_file (typeattr file "*")) + (call .unknown.root_file_type_transition_file (typeattr sock_file "*"))) |