mirror of
https://github.com/siderolabs/talos.git
synced 2025-12-13 21:41:56 +01:00
087a85f409
Add more rules alongside supporting code. Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
34 lines
1.6 KiB
Plaintext
34 lines
1.6 KiB
Plaintext
/etc(/.*)? system_u:object_r:etc_t:s0
|
|
/opt(/.*)? system_u:object_r:opt_t:s0
|
|
/usr(/.*)? system_u:object_r:usr_t:s0
|
|
/etc/cni(/.*)? system_u:object_r:cni_conf_t:s0
|
|
/opt/cni(/.*)? system_u:object_r:cni_plugin_t:s0
|
|
/usr/bin(/.*)? system_u:object_r:bin_exec_t:s0
|
|
/usr/lib(/.*)? system_u:object_r:lib_t:s0
|
|
/usr/lib/udev(/.*)? system_u:object_r:udev_exec_t:s0
|
|
/etc/kubernetes(/.*)? system_u:object_r:k8s_conf_t:s0
|
|
/opt/containerd(/.*)? system_u:object_r:containerd_plugin_t:s0
|
|
/usr/lib/modules(/.*)? system_u:object_r:module_t:s0
|
|
/usr/share/zoneinfo(/.*)? system_u:object_r:etc_t:s0
|
|
/usr/lib/udev/rules.d(/.*)? system_u:object_r:udev_rules_t:s0
|
|
/usr/libexec/kubernetes(/.*)? system_u:object_r:k8s_plugin_t:s0
|
|
/usr/local/lib/kubelet/credentialproviders(/.*)? system_u:object_r:k8s_credentialproviders_t:s0
|
|
/ system_u:object_r:rootfs_t:s0
|
|
/bin system_u:object_r:bin_exec_t:s0
|
|
/lib system_u:object_r:lib_t:s0
|
|
/sbin system_u:object_r:bin_exec_t:s0
|
|
/lib64 system_u:object_r:lib_t:s0
|
|
/usr/sbin system_u:object_r:bin_exec_t:s0
|
|
/usr/lib64 system_u:object_r:lib_t:s0
|
|
/lib/modules system_u:object_r:module_t:s0
|
|
/usr/bin/runc system_u:object_r:containerd_exec_t:s0
|
|
/usr/bin/init -- system_u:object_r:init_exec_t:s0
|
|
/usr/bin/udevadm -- system_u:object_r:udev_exec_t:s0
|
|
/usr/bin/poweroff system_u:object_r:init_exec_t:s0
|
|
/usr/bin/shutdown system_u:object_r:init_exec_t:s0
|
|
/usr/bin/modprobe -- system_u:object_r:modprobe_exec_t:s0
|
|
/usr/bin/dashboard system_u:object_r:init_exec_t:s0
|
|
/usr/bin/containerd system_u:object_r:containerd_exec_t:s0
|
|
/usr/bin/systemd-udevd -- system_u:object_r:udev_exec_t:s0
|
|
/usr/bin/containerd-shim-runc-v2 system_u:object_r:containerd_exec_t:s0
|