nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fstools: label e2mmpstatus as fsadm_exec_t

Browse Source 
e2fsprogs 1.44.3 installs e2mmpstatus as a hard link to dumpe2fs. This
makes "restorecon -Rv /usr/bin" relabels this file with conflicting
contexts:

Relabeled /usr/bin/e2mmpstatus from system_u:object_r:fsadm_exec_t to system_u:object_r:bin_t
Relabeled /usr/bin/dumpe2fs from system_u:object_r:bin_t to system_u:object_r:fsadm_exec_t

Fix this by labelling e2mmpstatus like dumpe2fs.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
This commit is contained in:
Nicolas Iooss 2018-08-03 21:27:51 +02:00 committed by Chris PeBenito
parent e1caae17a2
commit 094409b735
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/fstools.fc
View File

@ -11,6 +11,7 @@
/usr/bin/e2fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/e4fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/e2label -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/e2mmpstatus -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/efibootmgr -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/fdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0)
@ -67,6 +68,7 @@
/usr/sbin/e2fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/e4fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/e2label -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/e2mmpstatus -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/efibootmgr -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0)