Tryag File Manager
Home
-
Turbo Force
Current Path :
/
proc
/
self
/
root
/
var
/
lib
/
sepolgen
/
Upload File :
New :
File
Dir
//proc/self/root/var/lib/sepolgen/perm_map
# This is a permission map file for use in policy analysis. This # file maps object permissions (read, getattr, setattr, ..., etc.) # for an object class, to exactly one of the following: read, write, # both, or none. This file may be edited as long as the specific # syntax rules are obeyed. # # For each object class, there is a set of object permissions that are # individually mapped to read, write, both, or none. If a new object # class is added, make sure that the current number of object classes # is increased. # # The syntax for an object class definition is: # class <class_name> <num_permissions> # # This is followed by each permission and its individual mapping to one # of the following: # # r = Read # w = Write # n = None # b = Both # # Additionally, you can choose to follow the mapping with an optional # permission weight value from 1 (less importance) to 10 (higher importance). # 10 is the default weight value if one is not provided. # # Look to the examples below for further clarification. # # Number of object classes. 58 class security 11 compute_av n 1 compute_create n 1 compute_member n 1 check_context n 1 load_policy n 1 compute_relabel n 1 compute_user n 1 setenforce n 1 setbool n 1 setsecparam n 1 setcheckreqprot n 1 class process 29 fork n 1 transition w 5 sigchld w 1 sigkill w 1 sigstop w 1 signull n 1 signal w 5 ptrace b 10 getsched r 1 setsched w 1 getsession r 1 getpgid r 1 setpgid w 5 getcap r 3 setcap w 1 share b 1 getattr r 1 setexec w 1 setfscreate w 1 noatsecure n 1 siginh n 1 setrlimit n 1 rlimitinh n 1 dyntransition w 10 setcurrent w 1 execmem n 1 execstack n 1 execheap n 1 setkeycreate w 1 class system 4 ipc_info n 1 syslog_read n 1 syslog_mod n 1 syslog_console n 1 class capability 31 chown n 3 dac_override n 1 dac_read_search n 1 fowner n 1 fsetid n 1 kill n 1 setgid n 3 setuid n 1 setpcap n 3 linux_immutable n 1 net_bind_service n 1 net_broadcast n 1 net_admin n 1 net_raw n 1 ipc_lock n 1 ipc_owner n 1 sys_module n 1 sys_rawio n 1 sys_chroot n 1 sys_ptrace n 1 sys_pacct n 1 sys_admin n 3 sys_boot n 1 sys_nice n 1 sys_resource n 1 sys_time n 1 sys_tty_config n 1 mknod n 1 lease n 1 audit_write n 3 audit_control n 1 class filesystem 10 mount w 1 remount w 1 unmount w 1 getattr r 1 relabelfrom r 10 relabelto w 10 transition w 1 associate n 1 quotamod w 1 quotaget r 1 class file 20 execute_no_trans r 1 entrypoint r 1 execmod n 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 10 unlink w 1 link w 1 rename w 5 execute r 100 swapon b 1 quotaon b 1 mounton b 1 class dir 22 add_name w 5 remove_name w 1 reparent w 1 search r 1 rmdir b 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 5 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class fd 1 use b 1 class lnk_file 17 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 1 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class chr_file 20 execute_no_trans r 1 entrypoint r 1 execmod n 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 5 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class blk_file 17 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 5 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class sock_file 17 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 1 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class fifo_file 17 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 unlink w 1 link w 1 rename w 5 execute r 1 swapon b 1 quotaon b 1 mounton b 1 class socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class tcp_socket 27 connectto w 1 newconn w 1 acceptfrom r 1 node_bind n 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 name_connect w 1 class udp_socket 23 node_bind n 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class rawip_socket 23 node_bind n 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 1 setattr w 1 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class node 7 tcp_recv r 10 tcp_send w 10 udp_recv r 10 udp_send w 10 rawip_recv r 10 rawip_send w 10 enforce_dest n 1 class netif 6 tcp_recv r 10 tcp_send w 10 udp_recv r 10 udp_send w 10 rawip_recv r 10 rawip_send w 10 class netlink_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class packet_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class key_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class unix_stream_socket 25 connectto w 1 newconn w 1 acceptfrom r 1 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class unix_dgram_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class sem 9 create w 1 destroy w 1 getattr r 1 setattr w 1 read r 10 write w 10 associate n 1 unix_read r 3 unix_write w 3 class msg 2 send w 10 receive r 10 class msgq 10 enqueue w 1 create w 1 destroy w 1 getattr r 1 setattr w 1 read r 10 write w 10 associate n 1 unix_read r 3 unix_write w 3 class shm 10 lock w 1 create w 1 destroy w 1 getattr r 1 setattr w 1 read r 10 write w 10 associate n 1 unix_read r 3 unix_write w 3 class ipc 9 create w 1 destroy w 1 getattr r 1 setattr w 1 read r 10 write w 10 associate n 1 unix_read r 3 unix_write w 3 class passwd 5 passwd w 1 chfn w 5 chsh w 5 rootok n 1 crontab w 5 class drawable 5 create w 1 destroy w 1 draw w 10 copy r 10 getattr r 7 class window 26 addchild w 1 create w 1 destroy w 1 map w 1 unmap w 1 chstack w 10 chproplist w 7 chprop w 10 listprop r 5 getattr r 5 setattr w 5 setfocus w 1 move w 10 chselection w 10 chparent w 5 ctrllife w 5 enumerate w 1 transparent w 1 mousemotion w 10 clientcomevent w 5 inputevent w 5 drawevent w 5 windowchangeevent w 5 windowchangerequest w 5 serverchangeevent w 5 extensionevent w 5 class gc 4 create w 1 free w 1 getattr r 5 setattr w 5 class font 4 load r 1 free w 1 getattr r 5 use r 1 class colormap 9 create w 1 free w 1 install w 10 uninstall w 1 list r 5 read r 10 store w 10 getattr r 5 setattr w 5 class property 4 create w 1 free w 1 read r 10 write w 10 class cursor 5 create w 1 createglyph w 10 free w 1 assign w 10 setattr w 5 class xclient 1 kill w 1 class xinput 11 lookup r 10 getattr r 5 setattr w 5 setfocus w 10 warppointer w 10 activegrab w 1 passivegrab w 1 ungrab w 1 bell w 3 mousemotion w 10 relabelinput b 3 class xserver 8 screensaver w 10 gethostlist r 7 sethostlist w 7 getfontpath r 7 setfontpath w 7 getattr r 7 grab w 10 ungrab w 1 class xextension 2 query r 10 use b 1 class pax 6 pageexec n 1 emutramp n 1 mprotect n 1 randmmap n 1 randexec n 1 segmexec n 1 class netlink_route_socket 24 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_firewall_socket 24 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_tcpdiag_socket 24 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_nflog_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_xfrm_socket 24 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_selinux_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_audit_socket 26 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 nlmsg_relay w 10 nlmsg_readpriv r 10 class netlink_ip6fw_socket 24 nlmsg_read r 10 nlmsg_write w 10 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_dnrt_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto r 10 recv_msg r 10 send_msg w 10 name_bind n 1 class netlink_kobject_uevent_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 7 setattr w 7 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class dbus 2 acquire_svc b 1 send_msg w 10 class nscd 8 getpwd r 7 getgrp r 7 gethost r 7 getstat r 7 admin w 5 shmempwd r 7 shmemgrp r 7 shmemhost r 7 class association 4 sendto w 10 recvfrom r 10 setcontext w 3 polmatch r 1 class appletalk_socket 22 ioctl n 1 read r 10 write w 10 create w 1 getattr r 1 setattr w 1 lock n 1 relabelfrom r 10 relabelto w 10 append w 1 bind w 1 connect w 1 listen r 1 accept r 1 getopt r 1 setopt w 1 shutdown w 1 recvfrom r 10 sendto w 10 recv_msg r 10 send_msg w 10 name_bind n 1 class key 7 view r 7 read r 10 write w 10 search r 5 link w 7 setattr w 7 create w 10 class packet 3 send w 10 recv r 10 relabelto w 3