====== Ubuntu - SELinux - ShareWiz Default Policies ======

===== dbus_contexts =====

<code selinux>
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <selinux>
  </selinux>
</busconfig>
</code>


----

===== default_contexts =====


<code selinux>
system_r:crond_t	user_r:user_crond_t staff_r:staff_crond_t sysadm_r:sysadm_crond_t system_r:system_crond_t unconfined_r:unconfined_crond_t
system_r:local_login_t	user_r:user_t staff_r:staff_t sysadm_r:sysadm_t unconfined_r:unconfined_t
system_r:remote_login_t	user_r:user_t staff_r:staff_t unconfined_r:unconfined_t
system_r:sshd_t		user_r:user_t staff_r:staff_t sysadm_r:sysadm_t unconfined_r:unconfined_t
system_r:sulogin_t	sysadm_r:sysadm_t
system_r:xdm_t		user_r:user_t staff_r:staff_t sysadm_r:sysadm_t unconfined_r:unconfined_t

staff_r:staff_su_t	user_r:user_t staff_r:staff_t sysadm_r:sysadm_t
staff_r:staff_sudo_t	sysadm_r:sysadm_t staff_r:staff_t

sysadm_r:sysadm_su_t	user_r:user_t staff_r:staff_t sysadm_r:sysadm_t
sysadm_r:sysadm_sudo_t	sysadm_r:sysadm_t

user_r:user_su_t	user_r:user_t staff_r:staff_t sysadm_r:sysadm_t
user_r:user_sudo_t	sysadm_r:sysadm_t user_r:user_t
</code>

----

===== default_type =====

<code selinux>
sysadm_r:sysadm_t
staff_r:staff_t
unconfined_r:unconfined_t
user_r:user_t
</code>

----

===== failsafe_context =====

<code selinux>
sysadm_r:sysadm_t
</code>

----

===== initrc_context =====

<code selinux>
system_u:system_r:initrc_t
</code>

----

===== media =====

<code selinux>
cdrom system_u:object_r:removable_device_t
floppy system_u:object_r:removable_device_t
disk system_u:object_r:fixed_disk_device_t
</code>

----

===== removable_context =====

<code selinux>
system_u:object_r:removable_t
</code>

----

===== root_default_contexts =====
 
<code selinux>
system_r:crond_t	unconfined_r:unconfined_t sysadm_r:sysadm_crond_t staff_r:staff_crond_t user_r:user_crond_t
system_r:local_login_t  unconfined_r:unconfined_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t

staff_r:staff_su_t	unconfined_r:unconfined_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
sysadm_r:sysadm_su_t	unconfined_r:unconfined_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
user_r:user_su_t	unconfined_r:unconfined_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t

#
# Uncomment if you want to automatically login as sysadm_r
#
#system_r:sshd_t	unconfined_r:unconfined_t sysadm_r:sysadm_t staff_r:staff_t user_r:user_t
</code>

----

===== securetty_types =====

<code selinux>
staff_tty_device_t
sysadm_tty_device_t
unconfined_tty_device_t
user_tty_device_t
</code>

----

===== seusers =====

<code selinux>
system_u:system_u
root:root
__default__:user_u
</code>

----

===== staff_u_default_contexts =====

<code selinux>
system_r:local_login_t		staff_r:staff_t sysadm_r:sysadm_t
system_r:remote_login_t		staff_r:staff_t
system_r:sshd_t			staff_r:staff_t sysadm_r:sysadm_t
system_r:crond_t		staff_r:staff_crond_t
system_r:xdm_t			staff_r:staff_t
staff_r:staff_su_t		staff_r:staff_t
staff_r:staff_sudo_t		staff_r:staff_t
sysadm_r:sysadm_su_t		sysadm_r:sysadm_t 
sysadm_r:sysadm_sudo_t		sysadm_r:sysadm_t
</code>

----

===== user_u_default_contexts =====

<code selinux>
system_r:local_login_t		user_r:user_t
system_r:remote_login_t		user_r:user_t
system_r:sshd_t			user_r:user_t
system_r:crond_t		user_r:user_crond_t
system_r:xdm_t			user_r:user_t
user_r:user_su_t		user_r:user_t
user_r:user_sudo_t		user_r:user_t
</code>

----

===== userhelper_context =====

<code selinux>
system_u:sysadm_r:sysadm_t
</code>

----