summaryrefslogtreecommitdiff
blob: a61ba8a0eefa89323949752e6a1bd6b9f5bcc312 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
From a611a39cabab9836b51d1fc4326c3747cbdcd29a Mon Sep 17 00:00:00 2001
From: Mark Wright <gienah@gentoo.org>
Date: Fri, 6 Dec 2019 16:23:51 +0100
Subject: Improve SELinux compatibility

Closes: https://bugs.gentoo.org/697074
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
---
 gen_funcs.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gen_funcs.sh b/gen_funcs.sh
index 107f02b..f5dd0cd 100755
--- a/gen_funcs.sh
+++ b/gen_funcs.sh
@@ -728,7 +728,7 @@ dropbear_create_key() {
 
 	if isTrue "${SANDBOX}"
 	then
-		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
 	fi
 
 	# set up worker signal handler
@@ -805,7 +805,7 @@ dropbear_generate_key_info_file() {
 
 	if isTrue "${SANDBOX}"
 	then
-		envvars+=( SANDBOX_WRITE="${LOGFILE}:${TEMP}" )
+		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
 	fi
 
 	# set up worker signal handler
@@ -1397,7 +1397,7 @@ gkbuild() {
 
 	if isTrue "${SANDBOX}"
 	then
-		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
 	fi
 
 	# set up gkbuild signal handler
@@ -1452,7 +1452,7 @@ unpack() {
 
 	if isTrue "${SANDBOX}"
 	then
-		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+		envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
 	fi
 
 	# set up unpack signal handler
-- 
cgit v1.2.1