Debian refpolicy-trunk xen
PATCH 1/1 Debian refpolicy-trunk xen
Hello, patch for xen:
policy/modules/system/xen.fc 2007-11-17 16:39:12.755643344 +0100 renamed from policy/modules/system/xen.fc 2007-10-02 20:17:33.000000000 +0200 +7 -0
@@ -24,3 +24,10 @@ /var/run/xenstored(/.*)? gen_context(system_u:object_r:xenstored_var_run_t,s0) /xen(/.*)? gen_context(system_u:object_r:xen_image_t,s0) + +ifdef(`distro_debian',` +/usr/lib/xen-(.*)?/bin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xend -- gen_context(system_u:object_r:xend_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xm -- gen_context(system_u:object_r:xm_exec_t,s0) +')
regards,
Robert Litwiniec
LiNiO
Signature · 7 lines
http://debian.wonder.pl - Debian/GNU Linux wiki http://zamosc.wonder.pl - Wonders of Zamosc - Zamosc zadziwia -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.
Quoted 5 lines · Litwiniec Robert
Hello, patch for xen:
policy/modules/system/xen.fc 2007-11-17 16:39:12.755643344 +0100 line 33
Quoted 10 lines
policy/modules/system/xen.fc 2007-11-17 16:39:12.755643344 +0100 renamed from policy/modules/system/xen.fc 2007-10-02 20:17:33.000000000 +0200 +7
-0@@ -24,3 +24,10 @@ /var/run/xenstored(/.*)? gen_context(system_u:object_r:xenstored_var_run_t,s0) /xen(/.*)? gen_context(system_u:object_r:xen_image_t,s0) + +ifdef(`distro_debian',` +/usr/lib/xen-(.*)?/bin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xend -- gen_context(system_u:object_r:xend_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0) +/usr/lib/xen-(.*)?/bin/xm -- gen_context(system_u:object_r:xm_exec_t,s0) +')
The regex is redundant. The * already makes it optional, so the ? isn't needed, but I don't think we want it optional anyway. I'm guessing you want to match /usr/lib/xen-[version number]/ ?
Signature · 9 lines
Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.