Skip to contentSkip to conversation

Properly label utempter helper on debian

PATCH New Laurent Bigonville 2 participants 2 messages Nov 26, 2015 – Dec 1, 2015

lore
Share & tools
lore

Laurent Bigonville

author
#0 lore raw

PATCH 1/1 Properly label utempter helper on debian

From: Laurent Bigonville <[email protected]>

---
 policy/modules/system/authlogin.fc | 2 ++
 1 file changed, 2 insertions(+)
policy/modules/system/authlogin.fc +2 -0
index 2479587..bb11be5 100644
@@ -18,6 +18,8 @@ ifdef(`distro_suse', `
 
 /usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0)
 
+/usr/lib/utempter/utempter --	gen_context(system_u:object_r:utempter_exec_t,s0)
+
 /usr/sbin/utempter	--	gen_context(system_u:object_r:utempter_exec_t,s0)
 /usr/sbin/validate	--	gen_context(system_u:object_r:chkpwd_exec_t,s0)
 ifdef(`distro_gentoo', `
Signature · 1 line
2.6.2
#1 lore raw

PATCH 1/1 Properly label utempter helper on debian

Quoted 11 lines · Laurent Bigonville

From: Laurent Bigonville <[email protected]>

---
 policy/modules/system/authlogin.fc | 2 ++
 1 file changed, 2 insertions(+)
policy/modules/system/authlogin.fc +0 -0
index 2479587..bb11be5 100644

policy/modules/system/authlogin.fc ifdef(`distro_suse', ` · line 25

Quoted 8 lines
policy/modules/system/authlogin.fc +2 -0
@@ -18,6 +18,8 @@ ifdef(`distro_suse', `
 
 /usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0)
 
+/usr/lib/utempter/utempter --	gen_context(system_u:object_r:utempter_exec_t,s0)
+
 /usr/sbin/utempter	--	gen_context(system_u:object_r:utempter_exec_t,s0)
 /usr/sbin/validate	--	gen_context(system_u:object_r:chkpwd_exec_t,s0)
 ifdef(`distro_gentoo', `

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com