From mboxrd@z Thu Jan 1 00:00:00 1970 From: dominick.grift@gmail.com (Dominick Grift) Date: Mon, 26 Aug 2013 21:53:55 +0200 Subject: [refpolicy] [PATCH] Sudo file context specification did not catch paths Message-ID: <1377546835-8202-1-git-send-email-dominick.grift@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc index 28ad538..5d0f398 100644 --- a/policy/modules/system/authlogin.fc +++ b/policy/modules/system/authlogin.fc @@ -46,4 +46,4 @@ /var/run/sepermit(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0) /var/run/sudo(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0) /var/run/user(/.*)? gen_context(system_u:object_r:var_auth_t,s0) -/var/(db|lib|adm)/sudo(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0) +/var/((db)|(lib)|(adm))/sudo(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0)