diff options
| author |   Nicolas Iooss <nicolas.iooss@m4x.org> | 2017-04-15 20:49:07 +0200 |
|---|---|---|
| committer |   Jason Zaman <jason@perfinion.com> | 2017-05-07 23:53:18 +0800 |
| commit | ad561b6028cb137e4169876737059997eec4b2ee (patch) | |
| tree | 5f9f70c11cf715605fbf9560cc39a538e86003b0 /policy/modules/system/getty.fc | |
| parent | Synchronize file patterns for /usr/bin/mount... and /usr/sbin/mount... (diff) | |
| download | hardened-refpolicy-ad561b6028cb137e4169876737059997eec4b2ee.tar.gz hardened-refpolicy-ad561b6028cb137e4169876737059997eec4b2ee.tar.bz2 hardened-refpolicy-ad561b6028cb137e4169876737059997eec4b2ee.zip | |
Support systems with a single /usr/bin directory
On systems such as Arch Linux, all programs which are usually located in
/bin, /sbin, /usr/bin and /usr/sbin are present in /usr/bin and the
other locations are symbolic links to this directory. With such a
configuration, the file contexts which define types for files in
/bin, /sbin and /usr/sbin need to be duplicated to provide definitions
for /usr/bin/...
As the "/bin vs. /usr/bin" part of the needed definitions has already
been done with the "usr merge" patches, the next step consists in
duplicating file contexts for /usr/sbin. This is what this patch does
for all modules which are not in contrib.
This is the second iteration of an idea I have previously posted on
http://oss.tresys.com/pipermail/refpolicy/2017-March/009176.html
Diffstat (limited to 'policy/modules/system/getty.fc')
| -rw-r--r-- | policy/modules/system/getty.fc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/system/getty.fc b/policy/modules/system/getty.fc index 90fa20f7..116ea642 100644 --- a/policy/modules/system/getty.fc +++ b/policy/modules/system/getty.fc @@ -3,6 +3,8 @@ /run/mgetty\.pid.* -- gen_context(system_u:object_r:getty_runtime_t,s0) /run/agetty\.reload -- gen_context(system_u:object_r:getty_runtime_t,s0) +/usr/bin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0) + /usr/sbin/.*getty -- gen_context(system_u:object_r:getty_exec_t,s0) /var/log/mgetty\.log.* -- gen_context(system_u:object_r:getty_log_t,s0) |