aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@ieee.org>2016-08-02 20:21:24 -0400
committerJason Zaman <jason@perfinion.com>2016-08-14 02:23:03 +0800
commit724b835c2a91634d237a5c9854ed773f78e58f6e (patch)
treea2771eb6dc9ed8fade5f78f53962e0e870f5706a
parentSystemd by version 231 starts using shared library and systemd daemons execut... (diff)
downloadhardened-refpolicy-724b835c.tar.gz
hardened-refpolicy-724b835c.tar.bz2
hardened-refpolicy-724b835c.zip
libraries: Move libsystemd fc entry.
-rw-r--r--policy/modules/system/libraries.fc3
1 files changed, 1 insertions, 2 deletions
diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc
index 2467d4585..2e92f7ee8 100644
--- a/policy/modules/system/libraries.fc
+++ b/policy/modules/system/libraries.fc
@@ -140,6 +140,7 @@ ifdef(`distro_debian',`
/usr/lib/fglrx/.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib/libjs\.so.* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib/sse2/libx264\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
+/usr/lib/systemd/libsystemd-shared-[0-9]+\.so.* -- gen_context(system_u:object_r:lib_t,s0)
/usr/lib(/.*)?/libnvidia.+\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib(/.*)?/nvidia_drv.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib/nero/plug-ins/libMP3\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
@@ -149,8 +150,6 @@ ifdef(`distro_debian',`
/usr/lib/nvidia/libGL(core)?\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib/xorg/modules/glesx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-/usr/lib/systemd/libsystemd-shared-[0-9]+\.so.* -- gen_context(system_u:object_r:lib_t,s0)
-
/usr/.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:lib_t,s0)
/usr/lib/wine/.+\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
/usr/lib/(sse2/)?libfame-.*\.so.* -- gen_context(system_u:object_r:textrel_shlib_t,s0)