RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Label service binaries in /usr/bin like /usr/sbin 

For some services, the program responsible for the service has a file
context which is defined only when it is installed in /usr/sbin. This
does not work on Arch Linux, where every program is in /usr/bin
(/usr/sbin is a symlink to /usr/bin).

Add relevant file contexts for /usr/bin/$PROG when /usr/sbin/$PROG
exists.
This commit is contained in:
Nicolas Iooss 2019-01-11 21:13:47 +01:00
parent 143ed2cc1b
commit 80fb19a9ba
No known key found for this signature in database
GPG Key ID: C191415F340DAAA0
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/cgmanager.fc
View File

@ -4,6 +4,9 @@
/run/cgmanager.pid gen_context(system_u:object_r:cgmanager_run_t,s0)
/run/cgmanager/fs(/.*)? <<none>>
/usr/bin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/bin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/libexec/cgmanager/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)

2
policy/modules/services/gssproxy.fc
View File

@ -1,3 +1,5 @@
/usr/bin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)
/usr/lib/systemd/system/gssproxy.service -- gen_context(system_u:object_r:gssproxy_unit_t,s0)
/usr/sbin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)