* [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable
@ 2012-09-13 11:44 Laurent Bigonville
2012-10-02 15:01 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Laurent Bigonville @ 2012-09-13 11:44 UTC (permalink / raw)
To: refpolicy
From: Laurent Bigonville <bigon@bigon.be>
lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to
the kmod executable
---
policy/modules/system/modutils.fc | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/modutils.fc b/policy/modules/system/modutils.fc
index 2410551..31f1378 100644
--- a/policy/modules/system/modutils.fc
+++ b/policy/modules/system/modutils.fc
@@ -20,3 +20,5 @@ ifdef(`distro_gentoo',`
/sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0)
/sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0)
/sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0)
+
+/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0)
--
1.7.10.4
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable
2012-09-13 11:44 [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable Laurent Bigonville
@ 2012-10-02 15:01 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2012-10-02 15:01 UTC (permalink / raw)
To: refpolicy
On 09/13/12 07:44, Laurent Bigonville wrote:
> From: Laurent Bigonville <bigon@bigon.be>
>
> lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to
> the kmod executable
> ---
> policy/modules/system/modutils.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/policy/modules/system/modutils.fc b/policy/modules/system/modutils.fc
> index 2410551..31f1378 100644
> --- a/policy/modules/system/modutils.fc
> +++ b/policy/modules/system/modutils.fc
> @@ -20,3 +20,5 @@ ifdef(`distro_gentoo',`
> /sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0)
> /sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0)
> /sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0)
> +
> +/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-10-02 15:01 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-09-13 11:44 [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable Laurent Bigonville
2012-10-02 15:01 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.