selinux-refpolicy/policy/modules/services/cgmanager.fc
Nicolas Iooss 80fb19a9ba
Label service binaries in /usr/bin like /usr/sbin
For some services, the program responsible for the service has a file
context which is defined only when it is installed in /usr/sbin. This
does not work on Arch Linux, where every program is in /usr/bin
(/usr/sbin is a symlink to /usr/bin).

Add relevant file contexts for /usr/bin/$PROG when /usr/sbin/$PROG
exists.
2019-01-12 17:08:09 +01:00

14 lines
673 B
Plaintext

/sys/fs/cgroup/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_cgroup_t,s0)
/run/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_run_t,s0)
/run/cgmanager.pid gen_context(system_u:object_r:cgmanager_run_t,s0)
/run/cgmanager/fs(/.*)? <<none>>
/usr/bin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/bin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/libexec/cgmanager/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0)
/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0)