Fedora

SELinux:我在哪裡可以找到 Fedora Linux 上 google-chrome 的 selinux 政策?

  • January 13, 2021

如何在 Fedora Linux 上找到用於 Google Chrome 的所有 SELinux 策略?

grep /opt/google /var/lib/selinux/targeted/active/file_contexts 
/opt/google/[^/]*/.*\.so    --  system_u:object_r:textrel_shlib_t:s0
/opt/google/chrome(/.*)?    system_u:object_r:bin_t:s0
/opt/google-earth/.*\.so.*  --  system_u:object_r:textrel_shlib_t:s0
/opt/google/picasa(/.*)?/bin/wdi    --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/wine.* --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/msiexec    --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/notepad    --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/progman    --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/regedit    --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/regsvr32   --  system_u:object_r:wine_exec_t:s0
/opt/google/chrome[^/]*/chrome-sandbox  --  system_u:object_r:chrome_sandbox_exec_t:s0
/opt/google/picasa(/.*)?/Picasa3/.*exe  --  system_u:object_r:wine_exec_t:s0
/opt/google/picasa(/.*)?/bin/uninstaller    --  system_u:object_r:wine_exec_t:s0
/opt/google/chrome[^/]*/nacl_helper_bootstrap   --  system_u:object_r:chrome_sandbox_nacl_exec_t:s0
/opt/google/chrome/.*\.so   --  system_u:object_r:textrel_shlib_t:s0
/opt/google/picasa/.*\.dll  --  system_u:object_r:textrel_shlib_t:s0
/opt/google/picasa/.*\.yti  --  system_u:object_r:textrel_shlib_t:s0
/opt/google/talkplugin(/.*)?    system_u:object_r:bin_t:s0
/opt/google/talkplugin/.*\.so   --  system_u:object_r:textrel_shlib_t:s0
/opt/google/chrome/nacl_helper_bootstrap    --  system_u:object_r:chrome_sandbox_nacl_exec_t:s0

來源:https ://github.com/fedora-selinux/selinux-policy/search?q=%2Fopt%2Fgoogle

引用自:https://unix.stackexchange.com/questions/628851