* [refpolicy] [PATCH 1/1] Extend slim /var/run expression
@ 2013-09-25 18:26 Sven Vermeulen
2013-09-26 14:49 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Sven Vermeulen @ 2013-09-25 18:26 UTC (permalink / raw)
To: refpolicy
On Gentoo, slim files are not in /var/run/slim, but directly in
/var/run. All names start with slim though, so changing the expression
to match those as well.
There is already a file transition in place (xdm_t writing files in
var_run_t -> xdm_var_run_t) so that needs no further changes.
Reported-by: Luis Ressel <aranea@aixah.de>
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
---
policy/modules/services/xserver.fc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
index d1f64a0..340f44e 100644
--- a/policy/modules/services/xserver.fc
+++ b/policy/modules/services/xserver.fc
@@ -107,7 +107,7 @@ ifndef(`distro_debian',`
/var/run/lxdm\.auth -- gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/lxdm\.pid -- gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/lxdm(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
-/var/run/slim(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
+/var/run/slim.* gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/xauth(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
/var/run/xdmctl(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
--
1.8.1.5
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH 1/1] Extend slim /var/run expression
2013-09-25 18:26 [refpolicy] [PATCH 1/1] Extend slim /var/run expression Sven Vermeulen
@ 2013-09-26 14:49 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2013-09-26 14:49 UTC (permalink / raw)
To: refpolicy
On Wed 25 Sep 2013 02:26:31 PM EDT, Sven Vermeulen wrote:
>
> On Gentoo, slim files are not in /var/run/slim, but directly in
> /var/run. All names start with slim though, so changing the expression
> to match those as well.
>
> There is already a file transition in place (xdm_t writing files in
> var_run_t -> xdm_var_run_t) so that needs no further changes.
>
> Reported-by: Luis Ressel <aranea@aixah.de>
> Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
> ---
> policy/modules/services/xserver.fc | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
> index d1f64a0..340f44e 100644
> --- a/policy/modules/services/xserver.fc
> +++ b/policy/modules/services/xserver.fc
> @@ -107,7 +107,7 @@ ifndef(`distro_debian',`
> /var/run/lxdm\.auth -- gen_context(system_u:object_r:xdm_var_run_t,s0)
> /var/run/lxdm\.pid -- gen_context(system_u:object_r:xdm_var_run_t,s0)
> /var/run/lxdm(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
> -/var/run/slim(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
> +/var/run/slim.* gen_context(system_u:object_r:xdm_var_run_t,s0)
> /var/run/xauth(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
> /var/run/xdmctl(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
>
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-09-26 14:49 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-09-25 18:26 [refpolicy] [PATCH 1/1] Extend slim /var/run expression Sven Vermeulen
2013-09-26 14:49 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.