RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/hostapd.fc

10 lines
436 B
Plaintext
Raw Normal View History

Label programs in /usr/bin like /usr/sbin Some recent modifications added patterns in .fc files for programs in /usr/sbin without adding the patterns for /usr/bin. On Arch Linux, where /usr/sbin is a symlink to /usr/bin, such patterns are never matched. Add the missing patterns. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-09-04 20:25:25 +00:00
/usr/bin/hostapd -- gen_context(system_u:object_r:hostapd_exec_t,s0)
Add hostapd service module Add a SELinux Reference Policy module for the hostapd IEEE 802.11 wireless LAN Host AP daemon.
2019-01-29 19:01:52 +00:00
/usr/sbin/hostapd -- gen_context(system_u:object_r:hostapd_exec_t,s0)
/var/run/hostapd(/.*)? gen_context(system_u:object_r:hostapd_var_run_t,s0)
/etc/hostapd(/.*)? gen_context(system_u:object_r:hostapd_conf_t,s0)
Remove unescaped single dot from the policy In a pattern, a dot can match any character, including slash. It makes sense when it is combined with ?, + or *, but makes little sense when left alone. Most of the time, the label was for file containing dots, where the dot was not escaped. A few times, the dot was really intended to match any character. In such case, [^/] better suits the intent. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-27 21:38:09 +00:00
/run/hostapd\.pid -- gen_context(system_u:object_r:hostapd_var_run_t,s0)