selinux-refpolicy/policy/modules/services/gssproxy.fc
Nicolas Iooss f0cade07b2
Remove unescaped single dot from the policy
In a pattern, a dot can match any character, including slash. It makes
sense when it is combined with ?, + or *, but makes little sense when
left alone.

Most of the time, the label was for file containing dots, where the dot
was not escaped. A few times, the dot was really intended to match any
character. In such case, [^/] better suits the intent.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-27 23:38:09 +02:00

11 lines
478 B
Plaintext

/usr/bin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)
/usr/lib/systemd/system/gssproxy\.service -- gen_context(system_u:object_r:gssproxy_unit_t,s0)
/usr/sbin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)
/var/lib/gssproxy(/.*)? gen_context(system_u:object_r:gssproxy_var_lib_t,s0)
/run/gssproxy\.pid -- gen_context(system_u:object_r:gssproxy_run_t,s0)
/run/gssproxy\.sock -s gen_context(system_u:object_r:gssproxy_run_t,s0)