Add insmod_exec_t label for kmod executable
PATCH 1/1 Add insmod_exec_t label for kmod executable
From: Laurent Bigonville <[email protected]>
lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to the kmod executable
--- policy/modules/system/modutils.fc | 2 ++ 1 file changed, 2 insertions(+)
policy/modules/system/modutils.fc +2 -0
@@ -20,3 +20,5 @@ ifdef(`distro_gentoo',` /sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0) /sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0) /sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0) + +/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0)
Signature · 1 line
1.7.10.4
PATCH 1/1 Add insmod_exec_t label for kmod executable
Quoted 13 lines · Laurent Bigonville
From: Laurent Bigonville <[email protected]>
lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to the kmod executable
--- policy/modules/system/modutils.fc | 2 ++ 1 file changed, 2 insertions(+)policy/modules/system/modutils.fc +0
-0
policy/modules/system/modutils.fc ifdef(`distro_gentoo',` · line 24
Quoted 5 lines
policy/modules/system/modutils.fc +2
-0@@ -20,3 +20,5 @@ ifdef(`distro_gentoo',` /sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0) /sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0) /sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0) + +/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com