Mark APR build scripts as bin_t

PATCH New Luis Ressel 2 participants 2 messages Aug 8, 2015 – Aug 11, 2015

Share & tools

Luis Ressel

author

2015-08-08 11:50 UTC #0 lore raw

PATCH 1/1 Mark APR build scripts as bin_t

I don't know why those are in /usr/share/build-1/ instead of /usr/share/apr-0/build/ here, but it doesn't appear to be Gentoo-specific.

---
 policy/modules/kernel/corecommands.fc | 2 ++
 1 file changed, 2 insertions(+)

policy/modules/kernel/corecommands.fc +2 -0

index 958fad7..fd4fe85 100644
@@ -282,6 +282,8 @@ ifdef(`distro_gentoo',`
 /usr/share/ajaxterm/qweb.py.* --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/[^/]+\.sh --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/libtool --	gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/[^/]+\.sh --		gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/libtool --		gen_context(system_u:object_r:bin_t,s0)
 /usr/share/dayplanner/dayplanner --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/debconf/.+		--	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/denyhosts/scripts(/.*)?	gen_context(system_u:object_r:bin_t,s0)

Signature · 1 line

2.5.0

Christopher J. PeBenito

2015-08-11 12:47 UTC #1 lore raw

PATCH 1/1 Mark APR build scripts as bin_t

Quoted 12 lines · Luis Ressel

I don't know why those are in /usr/share/build-1/ instead of /usr/share/apr-0/build/ here, but it doesn't appear to be Gentoo-specific.
---
 policy/modules/kernel/corecommands.fc | 2 ++
 1 file changed, 2 insertions(+)
policy/modules/kernel/corecommands.fc +0 -0
index 958fad7..fd4fe85 100644

policy/modules/kernel/corecommands.fc ifdef(`distro_gentoo',` · line 289

Quoted 8 lines

policy/modules/kernel/corecommands.fc +2 -0

@@ -282,6 +282,8 @@ ifdef(`distro_gentoo',`
 /usr/share/ajaxterm/qweb.py.* --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/[^/]+\.sh --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/libtool --	gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/[^/]+\.sh --		gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/libtool --		gen_context(system_u:object_r:bin_t,s0)
 /usr/share/dayplanner/dayplanner --	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/debconf/.+		--	gen_context(system_u:object_r:bin_t,s0)
 /usr/share/denyhosts/scripts(/.*)?	gen_context(system_u:object_r:bin_t,s0)

Merged.

Signature · 3 lines

Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com