swtpm/.gitignore
Stefan Berger 3fe7895f9b selinux: Redevelop SELinux policy for Fedora 40 (ditch old rules)
Due to a significant change in the targeted SELinux policy re-develop
the SELinux policy for swtpm. New rules in swtpm_libvirt.te are needed
when libvirt causes new interactions between swtpm and other types.
Also consider extensions to the SELinux policy previously added due to
domain XML and command lines described in the following patches:

- 63825b296c
- 7dac1dbf6f

Also:
- add rules related to user_tmp_t are due to the following paths being used
  in session mode: /run/user/*/libvirt/qemu/run/swtpm
- add rules for swtpm_t accessing qemu_var_run_t file/dir/sockfile
- add rules for swtpm_localca (newly installed F40 system) needed once when
  /var/lib/swtpm-localca is empty and files there are created

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2024-05-27 20:06:17 -04:00

82 lines
1.3 KiB
Plaintext

*.egg-info
*.exe
*.exe.stackdump
*.gcda
*.gch
*.gcno
*.gcov
*.la
*.lo
*.o
*~
.deps
.libs
__pycache__
configure
Makefile.in
Makefile
/aclocal.m4
/autom4te.cache
/compile
/config.guess
/config.h
/config.h.in
/config.log
/config.status
/config.sub
/depcomp
/dist
/install-sh
/libtool
/ltmain.sh
/missing
/stamp-h1
/swtpm-*.tar.gz
/m4/*
/.pc/*
/patches/*
/include/swtpm.h
/man/man3/*.3
/man/man5/*.5
/man/man8/*.8
!/man/man8/swtpm-localca.8
/samples/swtpm-create-user-config-files
/samples/swtpm-localca
/samples/swtpm-localca.conf
/samples/swtpm_setup.conf
/src/selinux/*.pp.bz2
/src/selinux/swtpm.pp
/src/selinux/swtpm.fc
/src/selinux/swtpm_libvirt.fc
/src/selinux/swtpm_libvirt.if
/src/selinux/swtpm_libvirt.pp
/src/selinux/swtpm_svirt.fc
/src/selinux/swtpm_svirt.if
/src/selinux/swtpm_svirt.pp
/src/selinux/swtpmcuse.fc
/src/selinux/swtpmcuse.pp
/src/selinux/tmp
/src/swtpm/swtpm
/src/swtpm/swtpm_cuse
/src/swtpm_bios/swtpm_bios
/src/swtpm_cert/swtpm_cert
/src/swtpm_ioctl/swtpm_ioctl
/src/swtpm_localca/swtpm_localca
/src/swtpm_setup/swtpm_setup
/src/utils/swtpm_conf.h
/test-driver
tests/*.log
tests/*.trs
tests/test_config
/debian/*debhelper*
/debian/*substvars
/debian/autoreconf.*
/debian/files
/debian/swtpm
/debian/swtpm-cuse
/debian/swtpm-dev
/debian/swtpm-libs
/debian/swtpm-tools
/debian/swtpm-tools.postinst
/debian/tmp