Label /usr/local/share/ca-certificates(/.*)? as cert_t

On Debian, this directory can contain locally trusted certificates that
will be then be symlinked to /etc/ssl/certs by
update-ca-certificates(8), the files should be labelled as cert_t.
This commit is contained in:
Laurent Bigonville 2014-04-05 20:01:23 +02:00 committed by Chris PeBenito
parent b7bd94f923
commit d30d36a2fe
1 changed files with 2 additions and 0 deletions

View File

@ -37,6 +37,8 @@ ifdef(`distro_redhat',`
/usr/lib/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0)
/usr/local/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/local/man(/.*)? gen_context(system_u:object_r:man_t,s0)
/usr/local/share/man(/.*)? gen_context(system_u:object_r:man_t,s0)