nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Label /lib symlink as lib_t for every distro 

As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file
context definition outside of ifdef blocks.
This commit is contained in:
Nicolas Iooss 2014-07-05 18:35:26 +02:00 committed by Chris PeBenito
parent d7acf5d3c5
commit 74ec2d61b2
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
policy/modules/system/libraries.fc
View File

@ -36,19 +36,12 @@ ifdef(`distro_redhat',`
# /lib(64)? # /lib(64)?
# #
/lib -d gen_context(system_u:object_r:lib_t,s0) /lib -d gen_context(system_u:object_r:lib_t,s0)
/lib -l gen_context(system_u:object_r:lib_t,s0)
/lib/.* gen_context(system_u:object_r:lib_t,s0) /lib/.* gen_context(system_u:object_r:lib_t,s0)
/lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0) /lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0)
/lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) /lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
ifdef(`distro_debian',`
/lib -l gen_context(system_u:object_r:lib_t,s0)
')
ifdef(`distro_gentoo',`
/lib -l gen_context(system_u:object_r:lib_t,s0)
')
# #
# /opt # /opt
# #