RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix use of buggy pattern (.*)? 

The pattern "(.*)?" means "match anything including the nothing, or
nothing": the question mark is redundant. This is likely to be a
mispelling for "(/.*)?", which means "match a slash and anthing, or
nothing", or for ".*", or for other patterns.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
This commit is contained in:
Nicolas Iooss 2019-08-29 19:57:05 +02:00
parent 0b2ab72127
commit d386950b0d
No known key found for this signature in database
GPG Key ID: C191415F340DAAA0
5 changed files with 33 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
policy/modules/apps/openoffice.fc
View File

@ -1,30 +1,30 @@
HOME_DIR/\.openoffice(\.org)?(/.*)? gen_context(system_u:object_r:ooffice_home_t,s0)
/opt/openoffice(.*)?/program/cde-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/gnome-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/gnome-open-url\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/javaldx -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/kde-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/pagein -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/regcomp\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/regmerge -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/regview -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/sbase -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/scalc -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/sdraw -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/senddoc -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/simpress -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/smath -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/soffice -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/soffice\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/spadmin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/spadmin\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/startup\.sh -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/swriter -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/uno\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/unoinfo -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/unopkg -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/unopkg\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/unpack_update -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice(.*)?/program/uri-encode -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/cde-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/gnome-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/gnome-open-url\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/javaldx -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/kde-open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/open-url -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/pagein -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/regcomp\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/regmerge -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/regview -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/sbase -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/scalc -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/sdraw -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/senddoc -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/simpress -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/smath -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/soffice -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/soffice\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/spadmin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/spadmin\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/startup\.sh -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/swriter -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/uno\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/unoinfo -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/unopkg -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/unopkg\.bin -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/unpack_update -- gen_context(system_u:object_r:ooffice_exec_t,s0)
/opt/openoffice[^/]*/program/uri-encode -- gen_context(system_u:object_r:ooffice_exec_t,s0)

2
policy/modules/kernel/devices.fc
View File

@ -198,7 +198,7 @@ ifdef(`distro_debian',`
# if you want to disable udev, you will have to boot permissive and relabel!
/dev/\.static -d gen_context(system_u:object_r:device_t,s0)
/dev/\.static/dev -d gen_context(system_u:object_r:device_t,s0)
/dev/\.static/dev/(.*)? <<none>>
/dev/\.static/dev/.+ <<none>>
')
/etc/udev/devices -d gen_context(system_u:object_r:device_t,s0)

2
policy/modules/services/apache.fc
View File

@ -195,7 +195,7 @@ ifdef(`distro_suse',`
/var/www/miq/vmdb/log(/.*)? gen_context(system_u:object_r:httpd_sys_ra_content_t,s0)
/var/www/moodledata(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/config(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/data(.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/data(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/apps(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www/perl(/.*)? gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
/var/www/sessions(/.*)? gen_context(system_u:object_r:httpd_cache_t,s0)

2
policy/modules/services/dnsmasq.fc
View File

@ -16,4 +16,4 @@
/var/lib/misc/dnsmasq\.leases -- gen_context(system_u:object_r:dnsmasq_lease_t,s0)
/var/lib/dnsmasq(/.*)? gen_context(system_u:object_r:dnsmasq_lease_t,s0)
/var/log/dnsmasq(.*)?\.log(\..+) -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
/var/log/dnsmasq.* -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0)

4
policy/modules/system/ipsec.fc
View File

@ -14,7 +14,7 @@
/etc/strongswan\.d(/.*)? gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/swanctl/(.*)? gen_context(system_u:object_r:ipsec_key_file_t,s0)
/etc/swanctl/.+ gen_context(system_u:object_r:ipsec_key_file_t,s0)
/etc/swanctl -d gen_context(system_u:object_r:ipsec_conf_file_t,s0)
/etc/swanctl/swanctl.conf -- gen_context(system_u:object_r:ipsec_conf_file_t,s0)
@ -58,6 +58,6 @@
/var/racoon(/.*)? gen_context(system_u:object_r:ipsec_var_run_t,s0)
/run/charon\.(.*)? -- gen_context(system_u:object_r:ipsec_var_run_t,s0)
/run/charon\.[^/]+ -- gen_context(system_u:object_r:ipsec_var_run_t,s0)
/run/pluto(/.*)? gen_context(system_u:object_r:ipsec_var_run_t,s0)
/run/racoon\.pid -- gen_context(system_u:object_r:ipsec_var_run_t,s0)