make firefox transition to mozilla_exec_t
PATCH 1/1 make firefox transition to mozilla_exec_t
I need the following to get firefox to run in mozilla_t. I'm not sure if the current behavior is intended (running it in user_t).
Signature · 10 lines
Eamon Walsh<[email protected]> National Security Agency -------------- next part -------------- A non-text attachment was scrubbed... Name: refpolicy_mozilla_exec_fix.patch Type: text/x-patch Size: 1377 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090828/af194a33/attachment.bin
PATCH 1/1 make firefox transition to mozilla_exec_t
Quoted 3 lines · Eamon Walsh
I need the following to get firefox to run in
mozilla_t. I'm not sure
if the current behavior is intended (running it inuser_t).
This doesn't apply. It looks like you're still using an svn checkout, rather than git.
Quoted 42 lines
differences
between files
attachment
(refpolicy_mozilla_exec_fix.patch)Index:
kernel/corecommands.fc
===================================================================corecommands.fc (working copy) renamed from corecommands.fc (revision 3012) +0
-2@@ -156,7 +156,6 @@ /usr/lib/ccache/bin(/.*)? gen_context(system_u:object_r:bin_t,s0) /usr/lib/pgsql/test/regress/.*\.sh -- gen_context(system_u:object_r:bin_t,s0) /usr/lib/qt.*/bin(/.*)? gen_context(system_u:object_r:bin_t,s0) -/usr/lib(64)?/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/apt/methods.+ -- gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/ConsoleKit/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/ConsoleKit/run-session.d(/.*)?
gen_context(system_u:object_r:bin_t,s0)
Index: apps/mozilla.fc
===================================================================mozilla.fc (working copy) renamed from mozilla.fc (revision 3012) +0
-1@@ -28,4 +28,5 @@ /usr/lib(64)?/mozilla[^/]*/reg.+ -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/lib(64)?/mozilla[^/]*/mozilla-.* -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/lib(64)?/firefox[^/]*/mozilla-.* --
gen_context(system_u:object_r:mozilla_exec_t,s0)
+/usr/lib(64)?/[^/]*firefox[^/]*/firefox --gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/lib(64)?/[^/]*firefox[^/]*/firefox-bin --gen_context(system_u:object_r:mozilla_exec_t,s0)
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150
PATCH 1/1 make firefox transition to mozilla_exec_t
Quoted 10 lines · Christopher J. PeBenito
Quoted 4 lines · Eamon Walsh
I need the following to get firefox to run in
mozilla_t. I'm not sure
if the current behavior is intended (running it inuser_t).This doesn't apply. It looks like you're still using an svn checkout, rather than git.
Whoa, I didn't get the memo on that. Thanks.
Signature · 2 lines
Eamon Walsh<[email protected]> National Security Agency