Type aliases & sesearch

[Jorge Fábregas <jorge.fabregas@xxxxxxxxx>]

Hi,

I was using sesearch to verify the allow rule for sshd and how it transitions 
to unconfined_t:

# sesearch --allow -s sshd_t -c process -p transition
Found 12 semantic av rules:
   allow sshd_t oddjob_mkhomedir_t : process transition ; 
   allow domain abrt_helper_t : process transition ; 
   allow sshd_t chkpwd_t : process transition ; 
   allow sshd_t passwd_t : process transition ; 
   allow sshd_t updpwd_t : process transition ; 
   allow sshd_t mount_t : process transition ; 
   allow sshd_t rssh_t : process transition ; 
   allow sshd_t xauth_t : process transition ; 
   allow sshd_t nx_server_t : process transition ; 
   allow sshd_t unpriv_userdomain : process { transition signal } ; 
   allow polydomain setfiles_t : process transition ; 
   allow unconfined_login_domain unconfined_t : process transition ;

I see it transitions to unconfined_t by means of "unconfined_login_domain" that 
I guess it's a type alias.  How can I list all types that have 
"uncofnined_login_domain" as an alias?  Is there a way to do this with 
sesearch or without having the policy source installed?

Thanks,
Jorge
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux