Properly label git-shell and other git commands for Debian
PATCH 1/2 Properly label git-shell and other git commands for Debian
From: Laurent Bigonville <[email protected]>
--- policy/modules/kernel/corecommands.fc | 2 ++ 1 file changed, 2 insertions(+)
policy/modules/kernel/corecommands.fc +2 -0
@@ -210,6 +210,8 @@ ifdef(`distro_gentoo',` /usr/lib/dpkg/.+ -- gen_context(system_u:object_r:bin_t,s0) /usr/lib/emacsen-common/.* gen_context(system_u:object_r:bin_t,s0) /usr/lib/gimp/.*/plug-ins(/.*)? gen_context(system_u:object_r:bin_t,s0) +/usr/lib/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0) +/usr/lib/git-core(/.*) -- gen_context(system_u:object_r:bin_t,s0) /usr/lib/gnome-settings-daemon/.* -- gen_context(system_u:object_r:bin_t,s0) /usr/lib/gvfs/.* -- gen_context(system_u:object_r:bin_t,s0) /usr/lib/ipsec/.* -- gen_context(system_u:object_r:bin_t,s0)
Signature · 1 line
1.9.0
PATCH 1/2 Properly label git-shell and other git commands for Debian
Ping?
Le Mon, 3 Mar 2014 23:59:24 +0100,
Laurent Bigonville <[email protected]> a ?crit :
Quoted 23 lines
From: Laurent Bigonville <[email protected]>
--- policy/modules/kernel/corecommands.fc | 2 ++ 1 file changed, 2 insertions(+)(quoted diff) +0
-0b/policy/modules/kernel/corecommands.fc index e100be3..acc9ddc 100644
policy/modules/kernel/corecommands.fc +0
-0@@ -210,6 +210,8 @@ ifdef(`distro_gentoo',` /usr/lib/dpkg/.+ --
gen_context(system_u:object_r:bin_t,s0)/usr/lib/emacsen-common/.*gen_context(system_u:object_r:bin_t,s0)/usr/lib/gimp/.*/plug-ins(/.*)?gen_context(system_u:object_r:bin_t,s0)
+/usr/lib/git-core/git-shell --gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/lib/git-core(/.*) --gen_context(system_u:object_r:bin_t,s0)/usr/lib/gnome-settings-daemon/.*--gen_context(system_u:object_r:bin_t,s0)/usr/lib/gvfs/.*--gen_context(system_u:object_r:bin_t,s0)/usr/lib/ipsec/.*--gen_context(system_u:object_r:bin_t,s0)
PATCH 1/2 Properly label git-shell and other git commands for Debian
Quoted 1 line · Laurent Bigonville
Ping?
This set is merged.
Quoted 32 lines
Le Mon, 3 Mar 2014 23:59:24 +0100,
Laurent Bigonville <[email protected]> a ?crit :Quoted 15 lines
From: Laurent Bigonville <[email protected]>
--- policy/modules/kernel/corecommands.fc | 2 ++ 1 file changed, 2 insertions(+)(quoted diff) +0
-0b/policy/modules/kernel/corecommands.fc index e100be3..acc9ddc 100644
policy/modules/kernel/corecommands.fc +0
-0@@ -210,6 +210,8 @@ ifdef(`distro_gentoo',` /usr/lib/dpkg/.+ --
gen_context(system_u:object_r:bin_t,s0)/usr/lib/emacsen-common/.*gen_context(system_u:object_r:bin_t,s0)/usr/lib/gimp/.*/plug-ins(/.*)?gen_context(system_u:object_r:bin_t,s0)Quoted 8 lines
+/usr/lib/git-core/git-shell --
gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/lib/git-core(/.*) --gen_context(system_u:object_r:bin_t,s0)/usr/lib/gnome-settings-daemon/.*--gen_context(system_u:object_r:bin_t,s0)/usr/lib/gvfs/.*--gen_context(system_u:object_r:bin_t,s0)/usr/lib/ipsec/.*--gen_context(system_u:object_r:bin_t,s0)_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 2/2 Label /usr/sbin/lightdm as xdm_exec_t
In reply to Laurent BigonvilleFrom: Laurent Bigonville <[email protected]>
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739163
--- policy/modules/services/xserver.fc | 1 + 1 file changed, 1 insertion(+)
policy/modules/services/xserver.fc +1 -0
@@ -66,6 +66,7 @@ HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0) /usr/bin/Xair -- gen_context(system_u:object_r:xserver_exec_t,s0) /usr/bin/xauth -- gen_context(system_u:object_r:xauth_exec_t,s0) /usr/bin/Xorg -- gen_context(system_u:object_r:xserver_exec_t,s0) +/usr/sbin/lightdm -- gen_context(system_u:object_r:xdm_exec_t,s0) /usr/lib/qt-.*/etc/settings(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
Signature · 1 line
1.9.0