From 81a130b0714767bbaaa34c628c0e69aa1c2cc3dc Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Tue, 2 Aug 2016 16:20:00 +0200 Subject: [PATCH] Systemd by version 231 starts using shared library and systemd daemons execute it. For this reason lib_t type is needed. --- policy/modules/system/libraries.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc index b5329463f..d61728f16 100644 --- a/policy/modules/system/libraries.fc +++ b/policy/modules/system/libraries.fc @@ -148,6 +148,8 @@ ifdef(`distro_debian',` /usr/lib/nvidia/libGL(core)?\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) /usr/lib/xorg/modules/glesx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) +/usr/lib/systemd/libsystemd-shared-[0-9]+\.so.* -- gen_context(system_u:object_r:lib_t,s0) + /usr/(local/)?.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:lib_t,s0) /usr/(local/)?lib(64)?/wine/.+\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) /usr/(local/)?lib(64)?/(sse2/)?libfame-.*\.so.* -- gen_context(system_u:object_r:textrel_shlib_t,s0)