security_classes 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155
  1. # FLASK
  2. #
  3. # Define the security object classes
  4. #
  5. # Classes marked as userspace are classes
  6. # for userspace object managers
  7. class security
  8. class process
  9. class system
  10. class capability
  11. # file-related classes
  12. class filesystem
  13. class file
  14. class dir
  15. class fd
  16. class lnk_file
  17. class chr_file
  18. class blk_file
  19. class sock_file
  20. class fifo_file
  21. # network-related classes
  22. class socket
  23. class tcp_socket
  24. class udp_socket
  25. class rawip_socket
  26. class node
  27. class netif
  28. class netlink_socket
  29. class packet_socket
  30. class key_socket
  31. class unix_stream_socket
  32. class unix_dgram_socket
  33. # sysv-ipc-related classes
  34. class sem
  35. class msg
  36. class msgq
  37. class shm
  38. class ipc
  39. # extended netlink sockets
  40. class netlink_route_socket
  41. class netlink_tcpdiag_socket
  42. class netlink_nflog_socket
  43. class netlink_xfrm_socket
  44. class netlink_selinux_socket
  45. class netlink_audit_socket
  46. class netlink_dnrt_socket
  47. # IPSec association
  48. class association
  49. # Updated Netlink class for KOBJECT_UEVENT family.
  50. class netlink_kobject_uevent_socket
  51. class appletalk_socket
  52. class packet
  53. # Kernel access key retention
  54. class key
  55. class dccp_socket
  56. class memprotect
  57. # network peer labels
  58. class peer
  59. # Capabilities >= 32
  60. class capability2
  61. # kernel services that need to override task security, e.g. cachefiles
  62. class kernel_service
  63. class tun_socket
  64. class binder
  65. # Updated netlink classes for more recent netlink protocols.
  66. class netlink_iscsi_socket
  67. class netlink_fib_lookup_socket
  68. class netlink_connector_socket
  69. class netlink_netfilter_socket
  70. class netlink_generic_socket
  71. class netlink_scsitransport_socket
  72. class netlink_rdma_socket
  73. class netlink_crypto_socket
  74. # Infiniband
  75. class infiniband_pkey
  76. class infiniband_endport
  77. # Capability checks when on a non-init user namespace
  78. class cap_userns
  79. class cap2_userns
  80. # New socket classes introduced by extended_socket_class policy capability.
  81. # These two were previously mapped to rawip_socket.
  82. class sctp_socket
  83. class icmp_socket
  84. # These were previously mapped to socket.
  85. class ax25_socket
  86. class ipx_socket
  87. class netrom_socket
  88. class atmpvc_socket
  89. class x25_socket
  90. class rose_socket
  91. class decnet_socket
  92. class atmsvc_socket
  93. class rds_socket
  94. class irda_socket
  95. class pppox_socket
  96. class llc_socket
  97. class can_socket
  98. class tipc_socket
  99. class bluetooth_socket
  100. class iucv_socket
  101. class rxrpc_socket
  102. class isdn_socket
  103. class phonet_socket
  104. class ieee802154_socket
  105. class caif_socket
  106. class alg_socket
  107. class nfc_socket
  108. class vsock_socket
  109. class kcm_socket
  110. class qipcrtr_socket
  111. class smc_socket
  112. class process2
  113. class bpf
  114. class xdp_socket
  115. # Property service
  116. class property_service # userspace
  117. # Service manager
  118. class service_manager # userspace
  119. # hardware service manager # userspace
  120. class hwservice_manager
  121. # Keystore Key
  122. class keystore_key # userspace
  123. class drmservice # userspace
  124. # FLASK