diff options
| author |   Nicolas Iooss <nicolas.iooss@m4x.org> | 2018-08-03 21:27:51 +0200 |
|---|---|---|
| committer |   Jason Zaman <jason@perfinion.com> | 2018-09-09 11:07:46 +0800 |
| commit | 084110a7f93df028ea36a61c3f10d6747d5d2cd2 (patch) | |
| tree | bdf66533ef643c661b5cf101d7355d7824d6f890 /policy/modules/system/fstools.fc | |
| parent | ipsec: Module version bump. (diff) | |
| download | hardened-refpolicy-084110a7f93df028ea36a61c3f10d6747d5d2cd2.tar.gz hardened-refpolicy-084110a7f93df028ea36a61c3f10d6747d5d2cd2.tar.bz2 hardened-refpolicy-084110a7f93df028ea36a61c3f10d6747d5d2cd2.zip | |
fstools: label e2mmpstatus as fsadm_exec_t
e2fsprogs 1.44.3 installs e2mmpstatus as a hard link to dumpe2fs. This
makes "restorecon -Rv /usr/bin" relabels this file with conflicting
contexts:
Relabeled /usr/bin/e2mmpstatus from system_u:object_r:fsadm_exec_t to system_u:object_r:bin_t
Relabeled /usr/bin/dumpe2fs from system_u:object_r:bin_t to system_u:object_r:fsadm_exec_t
Fix this by labelling e2mmpstatus like dumpe2fs.
Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
Diffstat (limited to 'policy/modules/system/fstools.fc')
| -rw-r--r-- | policy/modules/system/fstools.fc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc index 494d021e7..2f4d6cd88 100644 --- a/policy/modules/system/fstools.fc +++ b/policy/modules/system/fstools.fc @@ -11,6 +11,7 @@ /usr/bin/e2fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/e4fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/e2label -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/bin/e2mmpstatus -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/efibootmgr -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/fdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0) @@ -67,6 +68,7 @@ /usr/sbin/e2fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/e4fsck -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/e2label -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/e2mmpstatus -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/efibootmgr -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0) |