Label /lib symlink as lib_t for every distro
PATCH 1/1 Label /lib symlink as lib_t for every distro
As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file context definition outside of ifdef blocks.
--- policy/modules/system/libraries.fc | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-)
policy/modules/system/libraries.fc +1 -8
@@ -36,19 +36,12 @@ ifdef(`distro_redhat',` # /lib(64)? # /lib -d gen_context(system_u:object_r:lib_t,s0) +/lib -l gen_context(system_u:object_r:lib_t,s0) /lib/.* gen_context(system_u:object_r:lib_t,s0) /lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0) /lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) -ifdef(`distro_debian',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - -ifdef(`distro_gentoo',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - # # /opt #
Signature · 1 line
2.0.1
PATCH 1/1 Label /lib symlink as lib_t for every distro
Quoted 2 lines · Nicolas Iooss
As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file context definition outside of ifdef blocks.
Merged.
Quoted 30 lines
--- policy/modules/system/libraries.fc | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-)policy/modules/system/libraries.fc +1
-8@@ -36,19 +36,12 @@ ifdef(`distro_redhat',` # /lib(64)? # /lib -d gen_context(system_u:object_r:lib_t,s0) +/lib -l gen_context(system_u:object_r:lib_t,s0) /lib/.* gen_context(system_u:object_r:lib_t,s0) /lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0) /lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) -ifdef(`distro_debian',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - -ifdef(`distro_gentoo',` -/lib -l gen_context(system_u:object_r:lib_t,s0) -') - # # /opt #
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com