RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Label programs in /usr/bin like /usr/sbin 

Some recent modifications added patterns in .fc files for programs in
/usr/sbin without adding the patterns for /usr/bin. On Arch Linux, where
/usr/sbin is a symlink to /usr/bin, such patterns are never matched.

Add the missing patterns.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
This commit is contained in:
Nicolas Iooss 2019-09-04 22:25:25 +02:00
parent 51c4812c23
commit e399c7f642
No known key found for this signature in database
GPG Key ID: C191415F340DAAA0
3 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/hostapd.fc
View File

@ -1,3 +1,5 @@
/usr/bin/hostapd -- gen_context(system_u:object_r:hostapd_exec_t,s0)
/usr/sbin/hostapd -- gen_context(system_u:object_r:hostapd_exec_t,s0)
/var/run/hostapd(/.*)? gen_context(system_u:object_r:hostapd_var_run_t,s0)

3
policy/modules/services/knot.fc
View File

@ -4,6 +4,9 @@
/run/knot(/.*)? gen_context(system_u:object_r:knot_runtime_t,s0)
/usr/bin/knotc -- gen_context(system_u:object_r:knotc_exec_t,s0)
/usr/bin/knotd -- gen_context(system_u:object_r:knotd_exec_t,s0)
/usr/sbin/knotc -- gen_context(system_u:object_r:knotc_exec_t,s0)
/usr/sbin/knotd -- gen_context(system_u:object_r:knotd_exec_t,s0)

2
policy/modules/services/tpm2.fc
View File

@ -1,3 +1,5 @@
/usr/bin/tpm2-abrmd -- gen_context(system_u:object_r:tpm2_abrmd_exec_t,s0)
/usr/sbin/tpm2-abrmd -- gen_context(system_u:object_r:tpm2_abrmd_exec_t,s0)
/usr/lib/systemd/system/[^/]*tpm2-abrmd\.service -- gen_context(system_u:object_r:tpm2_abrmd_unit_t,s0)