* [refpolicy] [PATCH] Add Debian location for PKI files
@ 2012-09-17 11:45 Laurent Bigonville
2012-10-02 15:01 ` Christopher J. PeBenito
0 siblings, 1 reply; 4+ messages in thread
From: Laurent Bigonville @ 2012-09-17 11:45 UTC (permalink / raw)
To: refpolicy
From: Laurent Bigonville <bigon@bigon.be>
---
policy/modules/system/miscfiles.fc | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
index fe3427d..9116567 100644
--- a/policy/modules/system/miscfiles.fc
+++ b/policy/modules/system/miscfiles.fc
@@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
/etc/httpd/alias/[^/]*\.db(\.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
/etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
/etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
+/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
/etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
ifdef(`distro_redhat',`
@@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
/usr/man(/.*)? gen_context(system_u:object_r:man_t,s0)
+/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
/usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
/usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
--
1.7.10.4
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [refpolicy] [PATCH] Add Debian location for PKI files
2012-09-17 11:45 [refpolicy] [PATCH] Add Debian location for PKI files Laurent Bigonville
@ 2012-10-02 15:01 ` Christopher J. PeBenito
0 siblings, 0 replies; 4+ messages in thread
From: Christopher J. PeBenito @ 2012-10-02 15:01 UTC (permalink / raw)
To: refpolicy
On 09/17/12 07:45, Laurent Bigonville wrote:
> From: Laurent Bigonville <bigon@bigon.be>
>
> ---
> policy/modules/system/miscfiles.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
> index fe3427d..9116567 100644
> --- a/policy/modules/system/miscfiles.fc
> +++ b/policy/modules/system/miscfiles.fc
> @@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
> /etc/httpd/alias/[^/]*\.db(\.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
> /etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
> /etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
> +/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
> /etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
>
> ifdef(`distro_redhat',`
> @@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
>
> /usr/man(/.*)? gen_context(system_u:object_r:man_t,s0)
>
> +/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
> /usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
> /usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
> /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] [PATCH] Add Debian location for PKI files
@ 2012-10-09 12:03 Guido Trentalancia
2012-10-09 12:24 ` Dominick Grift
0 siblings, 1 reply; 4+ messages in thread
From: Guido Trentalancia @ 2012-10-09 12:03 UTC (permalink / raw)
To: refpolicy
> On 09/17/12 07:45, Laurent Bigonville wrote:
>> From: Laurent Bigonville <bigon@bigon.be>
>>
>> ---
>> policy/modules/system/miscfiles.fc | 2 ++
>> 1 file changed, 2 insertions(+)
>>
>> diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
>> index fe3427d..9116567 100644
>> --- a/policy/modules/system/miscfiles.fc
>> +++ b/policy/modules/system/miscfiles.fc
>> @@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
>> /etc/httpd/alias/[^/]*.db(.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
>> /etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
>> /etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
>> +/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
>> /etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
>>
>> ifdef(`distro_redhat',`
>> @@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
>>
>> /usr/man(/.*)? gen_context(system_u:object_r:man_t,s0)
>>
>> +/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
>> /usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
>> /usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
>> /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
> Merged.
I was wondering whether the above entries should perhaps be added with an ifdef(distro_debian) ?
They are not the default locations for the OpenSSL project as far as I remember...
Regards,
Guido
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] [PATCH] Add Debian location for PKI files
2012-10-09 12:03 Guido Trentalancia
@ 2012-10-09 12:24 ` Dominick Grift
0 siblings, 0 replies; 4+ messages in thread
From: Dominick Grift @ 2012-10-09 12:24 UTC (permalink / raw)
To: refpolicy
On Tue, 2012-10-09 at 14:03 +0200, Guido Trentalancia wrote:
> > On 09/17/12 07:45, Laurent Bigonville wrote:
> >> From: Laurent Bigonville <bigon@bigon.be>
> >>
> >> ---
> >> policy/modules/system/miscfiles.fc | 2 ++
> >> 1 file changed, 2 insertions(+)
> >>
> >> diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
> >> index fe3427d..9116567 100644
> >> --- a/policy/modules/system/miscfiles.fc
> >> +++ b/policy/modules/system/miscfiles.fc
> >> @@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
> >> /etc/httpd/alias/[^/]*.db(.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
> >> /etc/localtime -- gen_context(system_u:object_r:locale_t,s0)
> >> /etc/pki(/.*)? gen_context(system_u:object_r:cert_t,s0)
> >> +/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
> >> /etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
> >>
> >> ifdef(`distro_redhat',`
> >> @@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
> >>
> >> /usr/man(/.*)? gen_context(system_u:object_r:man_t,s0)
> >>
> >> +/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
> >> /usr/share/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
> >> /usr/share/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
> >> /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
>
> > Merged.
>
> I was wondering whether the above entries should perhaps be added with an ifdef(distro_debian) ?
>
> They are not the default locations for the OpenSSL project as far as I remember...
We decided that if the location is not in use by something else in other
distros that it should be added unconditional
> Regards,
>
> Guido
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2012-10-09 12:24 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-09-17 11:45 [refpolicy] [PATCH] Add Debian location for PKI files Laurent Bigonville
2012-10-02 15:01 ` Christopher J. PeBenito
-- strict thread matches above, loose matches on Subject: below --
2012-10-09 12:03 Guido Trentalancia
2012-10-09 12:24 ` Dominick Grift
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.