aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKenton Groombridge <concord@gentoo.org>2021-11-13 12:41:37 -0500
committerKenton Groombridge <concord@gentoo.org>2022-06-06 11:15:16 -0400
commit29ab9f8b5974fbbc4deb98ff4482d577fb6e12a9 (patch)
tree4baf6d83f53560756c80a8c4f8b2ccd686b3f71c
parentphpfpm: various fixes and new tunables (diff)
downloadhardened-refpolicy-29ab9f8b.tar.gz
hardened-refpolicy-29ab9f8b.tar.bz2
hardened-refpolicy-29ab9f8b.zip
miscfiles: add file context for /usr/share/ca-certificates
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
-rw-r--r--policy/modules/system/miscfiles.fc3
1 files changed, 3 insertions, 0 deletions
diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
index 87a0cae1..3fa37471 100644
--- a/policy/modules/system/miscfiles.fc
+++ b/policy/modules/system/miscfiles.fc
@@ -58,6 +58,9 @@ ifdef(`distro_redhat',`
/usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0)
+ifdef(`distro_gentoo',`
+/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
+')
/usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)