games_srv_selinux(8)

✨ NAME ✨

Okay so <pink>games_srv_selinux</pink> is literally the Security Enhanced Linux Policy for the <purple>games_srv</purple> processes. Periodt. 💅

---

🌸 DESCRIPTION 🌸

Security-Enhanced Linux secures the <purple>games_srv</purple> processes via flexible mandatory access control. No cap, it's giving security. 🔥

The <purple>games_srv</purple> processes execute with the <cyan>games_srv_t</cyan> SELinux type. You can check if you have these processes running by executing the <cyan>ps</cyan> command with the <cyan>-Z</cyan> qualifier.

For example:

ps -eZ | grep games_srv_t

That's the vibe check, bestie. ✨

---

🎀 ENTRYPOINTS 🎀

The <cyan>games_srv_t</cyan> SELinux type can be entered via the <cyan>games_exec_t</cyan> file type. Iconic.

The default entrypoint paths for the <cyan>games_srv_t</cyan> domain are literally the following:

/usr/games/.*
/usr/lib/games(/.*)?
/usr/bin/civclient.*
/usr/bin/civserver.*
/usr/bin/sol
/usr/bin/kolf
/usr/bin/kpat
/usr/bin/micq
/usr/bin/gnect
/usr/bin/gtali
/usr/bin/iagno
/usr/bin/ksame
/usr/bin/ktron
/usr/bin/kwin4
/usr/bin/lskat
/usr/bin/gataxx
/usr/bin/glines
/usr/bin/klines
/usr/bin/kmines
/usr/bin/kpoker
/usr/bin/ksnake
/usr/bin/gnomine
/usr/bin/gnotski
/usr/bin/katomic
/usr/bin/kbounce
/usr/bin/kshisen
/usr/bin/ksirtet
/usr/bin/atlantik
/usr/bin/gnibbles
/usr/bin/gnobots2
/usr/bin/kenolaba
/usr/bin/klickety
/usr/bin/konquest
/usr/bin/kreversi
/usr/bin/ksokoban
/usr/bin/mahjongg
/usr/bin/Maelstrom
/usr/bin/blackjack
/usr/bin/gnotravex
/usr/bin/kblackbox
/usr/bin/kfouleggs
/usr/bin/kmahjongg
/usr/bin/kwin4proc
/usr/bin/lskatproc
/usr/bin/kasteroids
/usr/bin/ksmiletris
/usr/bin/kspaceduel
/usr/bin/ktuberling
/usr/bin/same-gnome
/usr/bin/kbackgammon
/usr/bin/kbattleship
/usr/bin/kgoldrunner
/usr/bin/gnome-stones
/usr/bin/kjumpingcube

---

🦋 PROCESS TYPES 🦋

SELinux defines process types (aka domains) for each process running on the system. You can see the context of a process using the <cyan>-Z</cyan> option to <cyan>ps</cyan>. No cap. 👑

Policy governs the access confined processes have to files. SELinux <purple>games_srv</purple> policy is very flexible, allowing users to setup their <purple>games_srv</purple> processes in as secure a method as possible. Periodt.

The following process types are defined for <purple>games_srv</purple>:

• <cyan>games_srv_t</cyan>

Note: <cyan>semanage permissive -a games_srv_t</cyan> can be used to make the process type <cyan>games_srv_t</cyan> permissive. SELinux does not deny access to permissive process types, but the AVC (SELinux denials) messages are still generated. So like, it's not a free pass, bestie. 😭

---

💅 BOOLEANS 💅

SELinux policy is customizable based on least access required. <purple>games_srv</purple> policy is extremely flexible and has several booleans that allow you to manipulate the policy and run <purple>games_srv</purple> with the tightest access possible. Slay! 💅

If you want to allow all domains to execute in <cyan>fips_mode</cyan>, you must turn on the <cyan>fips_mode</cyan> boolean. Enabled by default. Here's the command:

setsebool -P fips_mode 1

---

🌈 MANAGED FILES 🌈

The SELinux process type <cyan>games_srv_t</cyan> can manage files labeled with the following file types. The paths listed are the default paths for these file types. Note the process's UID still needs to have DAC permissions. Fr fr. 🧚

<yellow>games_data_t</yellow>

/var/games(/.*)?
/var/lib/games(/.*)?

<yellow>games_srv_var_run_t</yellow>

(No default paths listed for this one — it's giving mystery. 🕵️‍♀️)

---

⭐ COMMANDS ⭐

• semanage fcontext — can also be used to manipulate default file context mappings. Iykyk.
• semanage permissive — can also be used to manipulate whether or not a process type is permissive.
• semanage module — can also be used to enable/disable/install/remove policy modules. Iconic.
• semanage boolean — can also be used to manipulate the booleans. Ate.
• system-config-selinux — is a GUI tool available to customize SELinux policy settings. It's giving graphical realness. 🎨

---

👑 AUTHOR 👑

This manual page was auto-generated using <cyan>sepolicy manpage</cyan>. So you know it's official. 😌

---

🫶 SEE ALSO 🫶

Check out these other pages, bestie: <blue>selinux(8)</blue>, <blue>games_srv(8)</blue>, <blue>semanage(8)</blue>, <blue>restorecon(8)</blue>, <blue>chcon(1)</blue>, <blue>sepolicy(8)</blue>, <blue>setsebool(8)</blue>. Periodt. 📚

---

That's the whole vibe! This page was generated for <purple>games_srv</purple> version <yellow>26-10-06</yellow>, and that's also the date it was made. Catch you on the flip side! 💖✨