aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNicolas Iooss <nicolas.iooss@m4x.org>2016-12-27 17:06:54 +0100
committerJason Zaman <jason@perfinion.com>2017-01-02 00:31:26 +0800
commit11f4cab04f6f461074f6c216a192e3c196787805 (patch)
tree01b35c3bc9620a52a7f0daa27e523c8538b4459c /policy/modules/system/getty.fc
parentModule version bump for systemd patch from Nicolas Iooss. (diff)
downloadhardened-refpolicy-11f4cab04f6f461074f6c216a192e3c196787805.tar.gz
hardened-refpolicy-11f4cab04f6f461074f6c216a192e3c196787805.tar.bz2
hardened-refpolicy-11f4cab04f6f461074f6c216a192e3c196787805.zip
Add file contexts in /usr for /bin, /usr/sbin and /usr/lib
Some policy modules define file contexts in /bin, /sbin and /lib without defining similar file contexts in the same directory under /usr. Add these missing file contexts when there are outside ifdef blocks.
Diffstat (limited to 'policy/modules/system/getty.fc')
-rw-r--r--policy/modules/system/getty.fc2
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/system/getty.fc b/policy/modules/system/getty.fc
index 56e25f393..77dc8259f 100644
--- a/policy/modules/system/getty.fc
+++ b/policy/modules/system/getty.fc
@@ -3,6 +3,8 @@
/sbin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0)
+/usr/sbin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0)
+
/var/log/mgetty\.log.* -- gen_context(system_u:object_r:getty_log_t,s0)
/var/log/vgetty\.log\..* -- gen_context(system_u:object_r:getty_log_t,s0)