aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Zaman <jason@perfinion.com>2018-09-12 00:13:24 +0800
committerJason Zaman <jason@perfinion.com>2018-12-09 19:45:31 +0800
commit1e96396dedf4d264ac02943157f34e0497671d9f (patch)
treedadab2578168a18618681a8e1b715b46162c0e19
parentEnable the tmpfiles_manage_all_non_security boolean by default (diff)
downloadhardened-refpolicy-1e96396dedf4d264ac02943157f34e0497671d9f.tar.gz
hardened-refpolicy-1e96396dedf4d264ac02943157f34e0497671d9f.tar.bz2
hardened-refpolicy-1e96396dedf4d264ac02943157f34e0497671d9f.zip
libraries: ldconfig is a shell script on Gentoo musl libcHEAD2.20180701-r2master
Signed-off-by: Jason Zaman <jason@perfinion.com>
-rw-r--r--policy/modules/system/libraries.te7
1 files changed, 7 insertions, 0 deletions
diff --git a/policy/modules/system/libraries.te b/policy/modules/system/libraries.te
index 422b0ea1..6812a58e 100644
--- a/policy/modules/system/libraries.te
+++ b/policy/modules/system/libraries.te
@@ -145,3 +145,10 @@ optional_policy(`
optional_policy(`
unconfined_domain(ldconfig_t)
')
+
+ifdef(`distro_gentoo',`
+ # on musl ldconfig is a shell script
+ allow ldconfig_t self:fifo_file rw_fifo_file_perms;
+ corecmd_exec_shell(ldconfig_t)
+ corecmd_exec_bin(ldconfig_t)
+')