foreman.fc

# vim: sw=4:ts=4:et
#
# Copyright 2013 Red Hat, Inc.
#
# This program and entire repository is free software: you can redistribute it
# and/or modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation, either version 3 of the License,
# or any later version.
#
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
# details.
#
# You should have received a copy of the GNU General Public License along with
# this program. If not, see http://www.gnu.org/licenses/.
#

# Foreman and Ruby on Rails

/usr/lib/systemd/system/foreman.*               --  gen_context(system_u:object_r:foreman_rails_unit_file_t,s0)
/etc/systemd/system/foreman.*                   --  gen_context(system_u:object_r:foreman_rails_unit_file_t,s0)

/etc/foreman(/.*)?                                  gen_context(system_u:object_r:foreman_config_t,s0)
/etc/puppet/node.rb                             --  gen_context(system_u:object_r:foreman_enc_t, s0)
/etc/puppetlabs/puppet/node.rb                  --  gen_context(system_u:object_r:foreman_enc_t, s0)

/var/lib/foreman(/.*)?                              gen_context(system_u:object_r:foreman_lib_t,s0)

/var/log/foreman(/.*)?                              gen_context(system_u:object_r:foreman_log_t,s0)

/var/run/foreman(/.*)?                              gen_context(system_u:object_r:foreman_var_run_t,s0)
/var/run/foreman\.sock                              gen_context(system_u:object_r:foreman_var_run_t,s0)

/usr/share/foreman/.ssh(/.*)?                       gen_context(system_u:object_r:ssh_home_t,s0)
/usr/bin/websockify                                 gen_context(system_u:object_r:websockify_exec_t,s0)

/usr/share/foreman/bin/rails                    --  gen_context(system_u:object_r:foreman_rails_exec_t,s0)
/usr/libexec/foreman/.*-selinux                 --  gen_context(system_u:object_r:foreman_rails_exec_t,s0)

# Foreman Remote Execution

/usr/sbin/foreman-cockpit-session       gen_context(system_u:object_r:foreman_cockpit_session_exec_t,s0)

# Foreman Hooks plugin

/usr/share/foreman/config/hooks(/.*)?   gen_context(system_u:object_r:foreman_hook_t,s0)

# Foreman Tasks plugin

/usr/share/gems/gems/foreman-tasks-.*/bin/foreman-tasks -- gen_context(system_u:object_r:foreman_tasks_exec_t,s0)