sysadm_g..._selinux(8)

💖 NAME 💖

okay bestie, welcome to sysadm_g..._selinux(8) — this is the manual page for sysadm_gkeyringd_selinux, aka the Security Enhanced Linux Policy for the sysadm_gkeyringd processes. ✨

🦋 DESCRIPTION 🦋

Security-Enhanced Linux secures the sysadm_gkeyringd processes via flexible mandatory access control. periodt.

The sysadm_gkeyringd processes execute with the sysadm_gkeyringd_t SELinux type. Wanna check if you have these processes running? Execute the ps command with the -Z qualifier, like this:

ps -eZ | grep sysadm_gkeyringd_t

🌸 ENTRYPOINTS 🌸

The sysadm_gkeyringd_t SELinux type can be entered via the gkeyringd_exec_t file type. iconic.

The default entrypoint paths for the sysadm_gkeyringd_t domain are:

/usr/bin/mate-keyring-daemon
/usr/bin/gnome-keyring-daemon

👑 PROCESS TYPES 👑

SELinux defines process types (domains) for each process running on the system. You can see the context of a process using the -Z option to ps. ✨

Policy governs the access confined processes have to files. SELinux sysadm_gkeyringd policy is very flexible, allowing users to setup their sysadm_gkeyringd processes in as secure a method as possible. lowkey powerful.

The following process types are defined for sysadm_gkeyringd:

sysadm_gkeyringd_t

Note: semanage permissive -a sysadm_gkeyringd_t can be used to make the process type sysadm_gkeyringd_t permissive. SELinux does not deny access to permissive process types, but the AVC (SELinux denials) messages are still generated.

💅 BOOLEANS 💅

SELinux policy is customizable based on least access required. sysadm_gkeyringd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run sysadm_gkeyringd with the tightest access possible. 🫶

If you want to allow all domains to execute in fips_mode, you must turn on the fips_mode boolean. Enabled by default.

setsebool -P fips_mode 1

If you want to allow system to run with NIS, you must turn on the nis_enabled boolean. Disabled by default.

setsebool -P nis_enabled 1

🎀 MANAGED FILES 🎀

The SELinux process type sysadm_gkeyringd_t can manage files labeled with the following file types. The paths listed are the default paths for these file types. Note: the processes UID still need to have DAC permissions. 🔥

cache_home_t

/root/.cache(/.*)?
/home/[^/]+/.nv(/.*)?
/home/[^/]+/.cache(/.*)?

cifs_t

no paths listed on this page 🫶

config_home_t

/root/.kde(/.*)?
/root/.xine(/.*)?
/root/.config(/.*)?
/root/.Xdefaults
/home/[^/]+/.kde(/.*)?
/home/[^/]+/.xine(/.*)?
/home/[^/]+/.config(/.*)?
/home/[^/]+/.cache/dconf(/.*)?
/home/[^/]+/.Xdefaults
/run/user/[0-9]+/dconf(/.*)?

ecryptfs_t

/home/[^/]+/.Private(/.*)?
/home/[^/]+/.ecryptfs(/.*)?

fusefs_t

/run/user/[0-9]+/gvfs

gkeyringd_gnome_home_t

/root/.gnome2/keyrings(/.*)?
/home/[^/]+/.gnome2/keyrings(/.*)?
/home/[^/]+/.local/share/keyrings(/.*)?

krb5_host_rcache_t

/var/tmp/krb5_0.rcache2
/var/cache/krb5rcache(/.*)?
/var/tmp/nfs_0
/var/tmp/DNS_25
/var/tmp/host_0
/var/tmp/imap_0
/var/tmp/HTTP_23
/var/tmp/HTTP_48
/var/tmp/ldap_55
/var/tmp/ldap_487
/var/tmp/ldapmap1_0

nfs_t

no paths listed on this page either 💀

🌈 COMMANDS 🌈

semanage fcontext can also be used to manipulate default file context mappings.

semanage permissive can also be used to manipulate whether or not a process type is permissive.

semanage module can also be used to enable/disable/install/remove policy modules.

semanage boolean can also be used to manipulate the booleans.

system-config-selinux is a GUI tool available to customize SELinux policy settings. 💅

⭐ AUTHOR ⭐

This manual page was auto-generated using sepolicy manpage. ✨

🫶 SEE ALSO 🫶

selinux(8), sysadm_gkeyringd(8), semanage(8), restorecon(8), chcon(1), sepolicy(8), setsebool(8)

---

that’s the whole vibe check, bestie 💖 this page’s source/version is sysadm_gkeyringd, it’s dated 26-10-06, and the manual is sysadm_g..._selinux(8). slay and stay secure ✨