This repository has been archived by the owner on Jul 1, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 1
/
gravity.statedir.fc.template
61 lines (60 loc) · 7.92 KB
/
gravity.statedir.fc.template
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# Planet
{{.StateDir}}(/.*)? gen_context(system_u:object_r:gravity_home_t,s0)
{{.StateDir}}/logrange(/.*)? gen_context(system_u:object_r:gravity_container_logger_home_t,s0)
{{.StateDir}}/planet(/.*)? gen_context(system_u:object_r:gravity_container_home_t,s0)
{{.StateDir}}/planet/kubelet(/.*)? gen_context(system_u:object_r:gravity_kubelet_home_t,s0)
{{.StateDir}}/planet/kubelet/device-plugins(/.*)? gen_context(system_u:object_r:container_file_t,s0)
{{.StateDir}}/planet/kubelet/plugins_registry(/.*)? gen_context(system_u:object_r:container_file_t,s0)
{{.StateDir}}/planet/kubelet/plugins(/.*)? gen_context(system_u:object_r:container_file_t,s0)
{{.StateDir}}/planet/kubelet/pods(/.*)? gen_context(system_u:object_r:container_file_t,s0)
{{.StateDir}}/planet/kubelet/pod-resources(/.*)? gen_context(system_u:object_r:container_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs(/.*)? gen_context(system_u:object_r:gravity_container_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/planet -- gen_context(system_u:object_r:gravity_container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/gravity -- gen_context(system_u:object_r:gravity_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/nsenter -- gen_context(system_u:object_r:container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/registry -- gen_context(system_u:object_r:container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/coredns -- gen_context(system_u:object_r:gravity_service_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/serf -- gen_context(system_u:object_r:gravity_service_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/etcdctl-cmd -l gen_context(system_u:object_r:gravity_service_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/etcd.* -- gen_context(system_u:object_r:gravity_service_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/flannel -- gen_context(system_u:object_r:gravity_service_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/kube.* -- gen_context(system_u:object_r:gravity_kubernetes_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/node-problem-detector -- gen_context(system_u:object_r:gravity_kubernetes_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/local/bin/kubectl -- gen_context(system_u:object_r:gravity_kubernetes_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/journalctl -- gen_context(system_u:object_r:gravity_container_systemctl_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/systemd-.* -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/docker.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/runc -- gen_context(system_u:object_r:container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/containerd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/bin/dbus-.* -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/usr/sbin/rpcbind -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/bin/udevadm -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/bin/systemd -l gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/bin/systemctl -- gen_context(system_u:object_r:gravity_container_systemctl_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/bin/journalctl -- gen_context(system_u:object_r:gravity_container_systemctl_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/bin/systemd-.* -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/systemd.* -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system-generators/system.* -- gen_context(system_u:object_r:gravity_container_init_exec_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/etcd.*\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/flanneld\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/coredns\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/kube-apiserver\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/kube-controller-manager\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/kube-kubelet\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/kube-proxy\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/kube-scheduler\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/planet-agent\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/serf\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/docker\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/registry\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
{{.StateDir}}/local/packages/unpacked/gravitational\.io/planet/.*/rootfs/lib/systemd/system/offline-container-import\.service -- gen_context(system_u:object_r:gravity_unit_file_t,s0)
# Docker
{{.StateDir}}/planet/registry(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0)
{{.StateDir}}/planet/docker(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0)
{{.StateDir}}/planet/docker/.*/config\.env gen_context(system_u:object_r:container_share_t,s0)
{{.StateDir}}/planet/docker/containers/.*/.*\.log gen_context(system_u:object_r:container_log_t,s0)
{{.StateDir}}/planet/docker/containers/.*/hostname gen_context(system_u:object_r:container_share_t,s0)
{{.StateDir}}/planet/docker/containers/.*/hosts gen_context(system_u:object_r:container_share_t,s0)
{{.StateDir}}/planet/docker/init(/.*)? gen_context(system_u:object_r:container_share_t,s0)
{{.StateDir}}/planet/docker/overlay(/.*)? gen_context(system_u:object_r:container_share_t,s0)
{{.StateDir}}/planet/docker/overlay2(/.*)? gen_context(system_u:object_r:container_share_t,s0)