policies

Documentation

Index

• Variables

Variables

var CustomDirectoriesPolicies = pathpolicy.NewPathPolicies(map[string]pathpolicy.PathPolicy{
	"/":    {Deny: true},
	"/etc": {},
})

CustomDirectoriesPolicies is a set of default policies for custom directories

var CustomFilesPolicies = pathpolicy.NewPathPolicies(map[string]pathpolicy.PathPolicy{
	"/":               {Deny: true},
	"/etc":            {},
	"/root":           {},
	"/usr/local/bin":  {},
	"/usr/local/sbin": {},
	"/etc/fstab":      {Deny: true},
	"/etc/shadow":     {Deny: true},
	"/etc/passwd":     {Deny: true},
	"/etc/group":      {Deny: true},
})

CustomFilesPolicies is a set of default policies for custom files

var MountpointPolicies = pathpolicy.NewPathPolicies(map[string]pathpolicy.PathPolicy{
	"/": {},

	"/etc": {Deny: true},

	"/usr": {Exact: true},

	"/sys":  {Deny: true},
	"/proc": {Deny: true},
	"/dev":  {Deny: true},
	"/run":  {Deny: true},

	"/bin":   {Deny: true},
	"/sbin":  {Deny: true},
	"/lib":   {Deny: true},
	"/lib64": {Deny: true},

	"/lost+found": {Deny: true},

	"/boot/efi": {Deny: true},

	"/sysroot": {Deny: true},

	"/var/run": {Deny: true},

	"/var/lock": {Deny: true},
})

MountpointPolicies is a set of default mountpoint policies used for filesystem customizations

var OstreeMountpointPolicies = pathpolicy.NewPathPolicies(map[string]pathpolicy.PathPolicy{
	"/":             {},
	"/ostree":       {Deny: true},
	"/home":         {Deny: true},
	"/var/home":     {Deny: true},
	"/var/opt":      {Deny: true},
	"/var/srv":      {Deny: true},
	"/var/roothome": {Deny: true},
	"/var/usrlocal": {Deny: true},
	"/var/mnt":      {Deny: true},
})

MountpointPolicies for ostree