From mboxrd@z Thu Jan 1 00:00:00 1970 From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 2 Oct 2012 11:01:29 -0400 Subject: [refpolicy] [PATCH] Add insmod_exec_t label for kmod executable In-Reply-To: <1347536675-15671-1-git-send-email-bigon@debian.org> References: <1347536675-15671-1-git-send-email-bigon@debian.org> Message-ID: <506B01C9.3010208@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/13/12 07:44, Laurent Bigonville wrote: > From: Laurent Bigonville > > lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to > the kmod executable > --- > policy/modules/system/modutils.fc | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/policy/modules/system/modutils.fc b/policy/modules/system/modutils.fc > index 2410551..31f1378 100644 > --- a/policy/modules/system/modutils.fc > +++ b/policy/modules/system/modutils.fc > @@ -20,3 +20,5 @@ ifdef(`distro_gentoo',` > /sbin/modules-update -- gen_context(system_u:object_r:update_modules_exec_t,s0) > /sbin/rmmod.* -- gen_context(system_u:object_r:insmod_exec_t,s0) > /sbin/update-modules -- gen_context(system_u:object_r:update_modules_exec_t,s0) > + > +/(usr/)?bin/kmod -- gen_context(system_u:object_r:insmod_exec_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com