selinux-refpolicy/policy/modules/services/knot.fc
Nicolas Iooss e399c7f642
Label programs in /usr/bin like /usr/sbin
Some recent modifications added patterns in .fc files for programs in
/usr/sbin without adding the patterns for /usr/bin. On Arch Linux, where
/usr/sbin is a symlink to /usr/bin, such patterns are never matched.

Add the missing patterns.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-09-04 22:28:09 +02:00

14 lines
557 B
Plaintext

/etc/knot(/.*)? gen_context(system_u:object_r:knot_conf_t,s0)
/etc/rc\.d/init\.d/knot -- gen_context(system_u:object_r:knot_initrc_exec_t,s0)
/run/knot(/.*)? gen_context(system_u:object_r:knot_runtime_t,s0)
/usr/bin/knotc -- gen_context(system_u:object_r:knotc_exec_t,s0)
/usr/bin/knotd -- gen_context(system_u:object_r:knotd_exec_t,s0)
/usr/sbin/knotc -- gen_context(system_u:object_r:knotc_exec_t,s0)
/usr/sbin/knotd -- gen_context(system_u:object_r:knotd_exec_t,s0)
/var/lib/knot(/.*)? gen_context(system_u:object_r:knot_var_lib_t,s0)