selinux-refpolicy/policy/modules/services/gssproxy.fc
Nicolas Iooss 80fb19a9ba
Label service binaries in /usr/bin like /usr/sbin
For some services, the program responsible for the service has a file
context which is defined only when it is installed in /usr/sbin. This
does not work on Arch Linux, where every program is in /usr/bin
(/usr/sbin is a symlink to /usr/bin).

Add relevant file contexts for /usr/bin/$PROG when /usr/sbin/$PROG
exists.
2019-01-12 17:08:09 +01:00

11 lines
477 B
Plaintext

/usr/bin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)
/usr/lib/systemd/system/gssproxy.service -- gen_context(system_u:object_r:gssproxy_unit_t,s0)
/usr/sbin/gssproxy -- gen_context(system_u:object_r:gssproxy_exec_t,s0)
/var/lib/gssproxy(/.*)? gen_context(system_u:object_r:gssproxy_var_lib_t,s0)
/run/gssproxy\.pid -- gen_context(system_u:object_r:gssproxy_run_t,s0)
/run/gssproxy\.sock -s gen_context(system_u:object_r:gssproxy_run_t,s0)