FAPOLICYD.TRUST:(5)

NAME
fapolicyd.trust - fapolicyd's file of trust

DESCRIPTION
The file /etc/fapolicyd/fapolicyd.trust contains list of trusted files/binaries for the application whitelisting daemon. You may add comments to the file by starting the line with a '#' character. Each non-comment line contains a full path, size in bytes, and a valid SHA256 hash. Version 3 trust files write paths without escaping and find the size and hash by splitting at the final two spaces. A path may therefore contain spaces. The fapolicyd-cli --file commands receive ordinary shell arguments; quote a path containing a space in the shell, for example fapolicyd-cli --file add "/tmp/first last/". In a version 3 trust file, %20 is a literal percent sign followed by 20, not a space.

The size field is an unsigned 64-bit byte count written in decimal. This fixed representation is intentionally independent of the native C off_t and size_t types, so trust records retain the same syntax on 32-bit and 64-bit builds. A record whose size cannot be represented by the native file-size type used for a filesystem comparison is rejected.

Version 2 trust files are accepted for compatibility and use their legacy percent escaping, including %20 for a space. Newly rewritten trust files use version 3, so do not use version-2 percent escapes in new entries.

The directory /etc/fapolicyd/trust.d can be used to store multiple trust files. This way a privileged user can split the trust database into multiple files and manage them separately through fapolicyd-cli. Functionally, the fapolicy daemon will behave the same way as if the whole trust database has been defined inside fapolicyd.trust file. Syntax and semantics of trust files inside trust.d directory are the same as for fapolicyd.trust file (described above). Trust files can either be created manually inside trust.d directory or via fapolicyd-cli (the latter option is recommended).

EXAMPLE

    [root@Desktop ~]# cat /etc/fapolicyd/fapolicyd.trust
    /home/user/my-ls 157984 61a9960bf7d255a85811f4afcac51067b8f2e4c75e21cf4f2af95319d4ed1b87
    /home/user/my-ls2 5555 61a9960bf7d255a85811f4afcac51067b8f2e4c75e21cf4f2af95319d4ed1b87

FILES
/etc/fapolicyd/fapolicyd.trust - list of trusted files/binaries

SEE ALSO
fapolicyd(8), fapolicyd-cli(8) fapolicy.rules(5) and fapolicy.conf(5).

AUTHOR
Radovan Sroka