All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] [PATCH] Add Debian location for PKI files
@ 2012-09-17 11:45 Laurent Bigonville
  2012-10-02 15:01 ` Christopher J. PeBenito
  0 siblings, 1 reply; 4+ messages in thread
From: Laurent Bigonville @ 2012-09-17 11:45 UTC (permalink / raw)
  To: refpolicy

From: Laurent Bigonville <bigon@bigon.be>

---
 policy/modules/system/miscfiles.fc |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
index fe3427d..9116567 100644
--- a/policy/modules/system/miscfiles.fc
+++ b/policy/modules/system/miscfiles.fc
@@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
 /etc/httpd/alias/[^/]*\.db(\.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
 /etc/localtime		--	gen_context(system_u:object_r:locale_t,s0)
 /etc/pki(/.*)?			gen_context(system_u:object_r:cert_t,s0)
+/etc/ssl(/.*)?			gen_context(system_u:object_r:cert_t,s0)
 /etc/timezone		--	gen_context(system_u:object_r:locale_t,s0)
 
 ifdef(`distro_redhat',`
@@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
 
 /usr/man(/.*)?			gen_context(system_u:object_r:man_t,s0)
 
+/usr/share/ca-certificates(/.*)?	gen_context(system_u:object_r:cert_t,s0)
 /usr/share/fonts(/.*)?		gen_context(system_u:object_r:fonts_t,s0)
 /usr/share/X11/fonts(/.*)?	gen_context(system_u:object_r:fonts_t,s0)
 /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
-- 
1.7.10.4

^ permalink raw reply related	[flat|nested] 4+ messages in thread
* [refpolicy]  [PATCH] Add Debian location for PKI files
@ 2012-10-09 12:03 Guido Trentalancia
  2012-10-09 12:24 ` Dominick Grift
  0 siblings, 1 reply; 4+ messages in thread
From: Guido Trentalancia @ 2012-10-09 12:03 UTC (permalink / raw)
  To: refpolicy

> On 09/17/12 07:45, Laurent Bigonville wrote:
>> From: Laurent Bigonville <bigon@bigon.be>
>> 
>> ---
>>  policy/modules/system/miscfiles.fc |    2 ++
>>  1 file changed, 2 insertions(+)
>> 
>> diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
>> index fe3427d..9116567 100644
>> --- a/policy/modules/system/miscfiles.fc
>> +++ b/policy/modules/system/miscfiles.fc
>> @@ -12,6 +12,7 @@ ifdef(`distro_gentoo',`
>>  /etc/httpd/alias/[^/]*.db(.[^/]*)* -- gen_context(system_u:object_r:cert_t,s0)
>>  /etc/localtime		--	gen_context(system_u:object_r:locale_t,s0)
>>  /etc/pki(/.*)?			gen_context(system_u:object_r:cert_t,s0)
>> +/etc/ssl(/.*)?			gen_context(system_u:object_r:cert_t,s0)
>>  /etc/timezone		--	gen_context(system_u:object_r:locale_t,s0)
>>  
>>  ifdef(`distro_redhat',`
>> @@ -43,6 +44,7 @@ ifdef(`distro_redhat',`
>>  
>>  /usr/man(/.*)?			gen_context(system_u:object_r:man_t,s0)
>>  
>> +/usr/share/ca-certificates(/.*)?	gen_context(system_u:object_r:cert_t,s0)
>>  /usr/share/fonts(/.*)?		gen_context(system_u:object_r:fonts_t,s0)
>>  /usr/share/X11/fonts(/.*)?	gen_context(system_u:object_r:fonts_t,s0)
>>  /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
 
> Merged.

I was wondering whether the above entries should perhaps be added with an ifdef(distro_debian) ?

They are not the default locations for the OpenSSL project as far as I remember...

Regards,

Guido 

^ permalink raw reply	[flat|nested] 4+ messages in thread
end of thread, other threads:[~2012-10-09 12:24 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-09-17 11:45 [refpolicy] [PATCH] Add Debian location for PKI files Laurent Bigonville
2012-10-02 15:01 ` Christopher J. PeBenito
  -- strict thread matches above, loose matches on Subject: below --
2012-10-09 12:03 Guido Trentalancia
2012-10-09 12:24 ` Dominick Grift

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.