From c6efc3ada1515dbc16790f92b4b779cbde7de8a0 Mon Sep 17 00:00:00 2001 From: Laurent Bigonville Date: Thu, 26 Nov 2015 21:45:34 +0100 Subject: [PATCH] Properly label utempter helper on debian --- policy/modules/system/authlogin.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc index 247958765..bb11be57f 100644 --- a/policy/modules/system/authlogin.fc +++ b/policy/modules/system/authlogin.fc @@ -18,6 +18,8 @@ ifdef(`distro_suse', ` /usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0) +/usr/lib/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) + /usr/sbin/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) /usr/sbin/validate -- gen_context(system_u:object_r:chkpwd_exec_t,s0) ifdef(`distro_gentoo', `