* [refpolicy] [PATCH] Label /lib symlink as lib_t for every distro
@ 2014-07-05 16:35 Nicolas Iooss
2014-07-08 12:55 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Nicolas Iooss @ 2014-07-05 16:35 UTC (permalink / raw)
To: refpolicy
As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file
context definition outside of ifdef blocks.
---
policy/modules/system/libraries.fc | 9 +--------
1 file changed, 1 insertion(+), 8 deletions(-)
diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc
index bea3bdf..b532946 100644
--- a/policy/modules/system/libraries.fc
+++ b/policy/modules/system/libraries.fc
@@ -36,19 +36,12 @@ ifdef(`distro_redhat',`
# /lib(64)?
#
/lib -d gen_context(system_u:object_r:lib_t,s0)
+/lib -l gen_context(system_u:object_r:lib_t,s0)
/lib/.* gen_context(system_u:object_r:lib_t,s0)
/lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0)
/lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-ifdef(`distro_debian',`
-/lib -l gen_context(system_u:object_r:lib_t,s0)
-')
-
-ifdef(`distro_gentoo',`
-/lib -l gen_context(system_u:object_r:lib_t,s0)
-')
-
#
# /opt
#
--
2.0.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH] Label /lib symlink as lib_t for every distro
2014-07-05 16:35 [refpolicy] [PATCH] Label /lib symlink as lib_t for every distro Nicolas Iooss
@ 2014-07-08 12:55 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2014-07-08 12:55 UTC (permalink / raw)
To: refpolicy
On 7/5/2014 12:35 PM, Nicolas Iooss wrote:
> As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file
> context definition outside of ifdef blocks.
Merged.
> ---
> policy/modules/system/libraries.fc | 9 +--------
> 1 file changed, 1 insertion(+), 8 deletions(-)
>
> diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc
> index bea3bdf..b532946 100644
> --- a/policy/modules/system/libraries.fc
> +++ b/policy/modules/system/libraries.fc
> @@ -36,19 +36,12 @@ ifdef(`distro_redhat',`
> # /lib(64)?
> #
> /lib -d gen_context(system_u:object_r:lib_t,s0)
> +/lib -l gen_context(system_u:object_r:lib_t,s0)
> /lib/.* gen_context(system_u:object_r:lib_t,s0)
> /lib/ld-[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0)
>
> /lib/security/pam_poldi\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
>
> -ifdef(`distro_debian',`
> -/lib -l gen_context(system_u:object_r:lib_t,s0)
> -')
> -
> -ifdef(`distro_gentoo',`
> -/lib -l gen_context(system_u:object_r:lib_t,s0)
> -')
> -
> #
> # /opt
> #
>
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2014-07-08 12:55 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-07-05 16:35 [refpolicy] [PATCH] Label /lib symlink as lib_t for every distro Nicolas Iooss
2014-07-08 12:55 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.