From 6c810a07c9ec196bef0071f4cba28f707a1e4c33 Mon Sep 17 00:00:00 2001 From: Laurent Bigonville Date: Thu, 19 Mar 2020 17:00:54 +0100 Subject: [PATCH] Label bluetooth daemon as bluetooth_exec_t Signed-off-by: Laurent Bigonville --- policy/modules/services/bluetooth.fc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/services/bluetooth.fc b/policy/modules/services/bluetooth.fc index 3d66914f2..e167e93f7 100644 --- a/policy/modules/services/bluetooth.fc +++ b/policy/modules/services/bluetooth.fc @@ -15,9 +15,12 @@ /usr/bin/rfcomm -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/bin/sdpd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) +/usr/lib/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) # Systemd unit file /usr/lib/systemd/system/[^/]*bluetooth.* -- gen_context(system_u:object_r:bluetooth_unit_t,s0) +/usr/libexec/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) + /usr/sbin/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/sbin/hciattach -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/sbin/hcid -- gen_context(system_u:object_r:bluetooth_exec_t,s0)