RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/cgmanager.fc

14 lines
674 B
Plaintext
Raw Normal View History

Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/sys/fs/cgroup/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_cgroup_t,s0)
/run/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_run_t,s0)
Remove unescaped single dot from the policy In a pattern, a dot can match any character, including slash. It makes sense when it is combined with ?, + or *, but makes little sense when left alone. Most of the time, the label was for file containing dots, where the dot was not escaped. A few times, the dot was really intended to match any character. In such case, [^/] better suits the intent. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-27 21:38:09 +00:00
/run/cgmanager\.pid gen_context(system_u:object_r:cgmanager_run_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/run/cgmanager/fs(/.*)? <<none>>
Label service binaries in /usr/bin like /usr/sbin For some services, the program responsible for the service has a file context which is defined only when it is installed in /usr/sbin. This does not work on Arch Linux, where every program is in /usr/bin (/usr/sbin is a symlink to /usr/bin). Add relevant file contexts for /usr/bin/$PROG when /usr/sbin/$PROG exists.
2019-01-11 20:13:47 +00:00
/usr/bin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/bin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/usr/libexec/cgmanager/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0)