Add telepathy role for user_r and staff_r
PATCH 1/3 Add telepathy role for user_r and staff_r
From: Laurent Bigonville <[email protected]>
--- policy/modules/roles/staff.te | 4 ++++ policy/modules/roles/unprivuser.te | 4 ++++ 2 files changed, 8 insertions(+)
policy/modules/roles/staff.te +4 -0
@@ -86,6 +86,10 @@ ifndef(`distro_redhat',` optional_policy(` pulseaudio_role(staff_r, staff_t) ') + + optional_policy(` + telepathy_role_template(staff, staff_r, staff_t) + ') ') optional_policy(`
policy/modules/roles/unprivuser.te +4 -0
@@ -59,6 +59,10 @@ ifndef(`distro_redhat',` optional_policy(` pulseaudio_role(user_r, user_t) ') + + optional_policy(` + telepathy_role_template(user, user_r, user_t) + ') ') optional_policy(`
Signature · 1 line
1.9.1
PATCH 2/3 Properly label the manpages installed by postgresql
From: Laurent Bigonville <[email protected]>
The postgresql manpages are installed under a private directory, some of them are symlinked to the usual location.
Properly labeling them ensure that mandb can read them.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740591
--- policy/modules/system/miscfiles.fc | 1 + 1 file changed, 1 insertion(+)
policy/modules/system/miscfiles.fc +1 -0
@@ -50,6 +50,7 @@ ifdef(`distro_redhat',` /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0) /usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/man(/.*)? gen_context(system_u:object_r:man_t,s0) +/usr/share/postgresql/[^/]*/man(/.*)? gen_context(system_u:object_r:man_t,s0) /usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0)
Signature · 1 line
1.9.1
PATCH 2/3 Properly label the manpages installed by postgresql
Quoted 17 lines · Laurent Bigonville
From: Laurent Bigonville <[email protected]>
The postgresql manpages are installed under a private directory, some of them are symlinked to the usual location.
Properly labeling them ensure that mandb can read them.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740591
--- policy/modules/system/miscfiles.fc | 1 + 1 file changed, 1 insertion(+)policy/modules/system/miscfiles.fc +0
-0
policy/modules/system/miscfiles.fc ifdef(`distro_redhat',` · line 55
Quoted 6 lines
policy/modules/system/miscfiles.fc +1
-0@@ -50,6 +50,7 @@ ifdef(`distro_redhat',` /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0) /usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/man(/.*)? gen_context(system_u:object_r:man_t,s0) +/usr/share/postgresql/[^/]*/man(/.*)? gen_context(system_u:object_r:man_t,s0) /usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 3/3 Label /usr/local/share/ca-certificates(/.*)? as cert_t
In reply to Laurent BigonvilleFrom: Laurent Bigonville <[email protected]>
On Debian, this directory can contain locally trusted certificates that will be then be symlinked to /etc/ssl/certs by update-ca-certificates(8), the files should be labelled as cert_t.
--- policy/modules/system/miscfiles.fc | 2 ++ 1 file changed, 2 insertions(+)
policy/modules/system/miscfiles.fc +2 -0
@@ -37,6 +37,8 @@ ifdef(`distro_redhat',` /usr/lib/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0) +/usr/local/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0) + /usr/local/man(/.*)? gen_context(system_u:object_r:man_t,s0) /usr/local/share/man(/.*)? gen_context(system_u:object_r:man_t,s0)
Signature · 1 line
1.9.1
PATCH 3/3 Label /usr/local/share/ca-certificates(/.*)? as cert_t
Quoted 14 lines · Laurent Bigonville
From: Laurent Bigonville <[email protected]>
On Debian, this directory can contain locally trusted certificates that will be then be symlinked to
/etc/ssl/certsby update-ca-certificates(8), the files should be labelled ascert_t.--- policy/modules/system/miscfiles.fc | 2 ++ 1 file changed, 2 insertions(+)policy/modules/system/miscfiles.fc +0
-0
policy/modules/system/miscfiles.fc ifdef(`distro_redhat',` · line 43
Quoted 7 lines
policy/modules/system/miscfiles.fc +2
-0@@ -37,6 +37,8 @@ ifdef(`distro_redhat',` /usr/lib/perl5/man(/.*)? gen_context(system_u:object_r:man_t,s0) +/usr/local/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0) + /usr/local/man(/.*)? gen_context(system_u:object_r:man_t,s0) /usr/local/share/man(/.*)? gen_context(system_u:object_r:man_t,s0)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 1/3 Add telepathy role for user_r and staff_r
In reply to Laurent BigonvilleQuoted 27 lines · Laurent Bigonville
From: Laurent Bigonville <[email protected]>
--- policy/modules/roles/staff.te | 4 ++++ policy/modules/roles/unprivuser.te | 4 ++++ 2 files changed, 8 insertions(+)policy/modules/roles/staff.te +4
-0@@ -86,6 +86,10 @@ ifndef(`distro_redhat',` optional_policy(` pulseaudio_role(staff_r, staff_t) ') + + optional_policy(` + telepathy_role_template(staff, staff_r, staff_t) + ') ') optional_policy(`policy/modules/roles/unprivuser.te +0
-0
policy/modules/roles/unprivuser.te ifndef(`distro_redhat',` · line 68
Quoted 10 lines
policy/modules/roles/unprivuser.te +4
-0@@ -59,6 +59,10 @@ ifndef(`distro_redhat',` optional_policy(` pulseaudio_role(user_r, user_t) ') + + optional_policy(` + telepathy_role_template(user, user_r, user_t) + ') ') optional_policy(`
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com