From mboxrd@z Thu Jan 1 00:00:00 1970 From: bigon@debian.org (Laurent Bigonville) Date: Thu, 13 Sep 2012 13:44:35 +0200 Subject: [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable Message-ID: <1347536675-15671-1-git-send-email-bigon@debian.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com From: Laurent Bigonville lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to the kmod executable --- policy/modules/system/modutils.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/modutils.fc b/policy/modules/system/modutils.fc index 2410551..31f1378 100644 --- a/policy/modules/system/modutils.fc +++ b/policy/modules/system/modutils.fc @@ -20,3 +20,5 @@ ifdef(`distro_gentoo',` /sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0) /sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0) /sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0) + +/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0) -- 1.7.10.4