From 74ec2d61b2f892fd0d7a338a7595bdd74fb80541 Mon Sep 17 00:00:00 2001 From: Nicolas Iooss Date: Sat, 5 Jul 2014 18:35:26 +0200 Subject: [PATCH] Label /lib symlink as lib_t for every distro As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file context definition outside of ifdef blocks. --- policy/modules/system/libraries.fc | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc index bea3bdffa..b5329463f 100644 --- a/policy/modules/system/libraries.fc +++ b/policy/modules/system/libraries.fc @@ -36,19 +36,12 @@ ifdef(`distro_redhat',` # /lib(64)? # /lib -d gen_context(system_u:object_r:lib_t,s0) +/lib -l gen_context(system_u:object_r:lib_t,s0) /lib/.* gen_context(system_u:object_r:lib_t,s0) /lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0) /lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) -ifdef(`distro_debian',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - -ifdef(`distro_gentoo',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - # # /opt #