* [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin
@ 2014-08-11 12:31 Luis Ressel
2014-08-11 12:31 ` [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t Luis Ressel
2014-08-14 19:42 ` [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Christopher J. PeBenito
0 siblings, 2 replies; 4+ messages in thread
From: Luis Ressel @ 2014-08-11 12:31 UTC (permalink / raw)
To: refpolicy
Signed-off-by: Luis Ressel <aranea@aixah.de>
---
policy/modules/system/fstools.fc | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index f27eb42..634388b 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -50,7 +50,11 @@
/usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0)
--
2.0.4
^ permalink raw reply related [flat|nested] 4+ messages in thread* [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t
2014-08-11 12:31 [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Luis Ressel
@ 2014-08-11 12:31 ` Luis Ressel
2014-08-14 19:42 ` Christopher J. PeBenito
2014-08-14 19:42 ` [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Christopher J. PeBenito
1 sibling, 1 reply; 4+ messages in thread
From: Luis Ressel @ 2014-08-11 12:31 UTC (permalink / raw)
To: refpolicy
These are seldomly-used tools from the util-linux package.
Please check if they are located in /sbin instead of /usr/sbin on other
distributions.
Signed-off-by: Luis Ressel <aranea@aixah.de>
---
policy/modules/system/fstools.fc | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index 634388b..3101274 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -48,7 +48,9 @@
/usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
--
2.0.4
^ permalink raw reply related [flat|nested] 4+ messages in thread* [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t
2014-08-11 12:31 ` [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t Luis Ressel
@ 2014-08-14 19:42 ` Christopher J. PeBenito
0 siblings, 0 replies; 4+ messages in thread
From: Christopher J. PeBenito @ 2014-08-14 19:42 UTC (permalink / raw)
To: refpolicy
On 8/11/2014 8:31 AM, Luis Ressel wrote:
> These are seldomly-used tools from the util-linux package.
>
> Please check if they are located in /sbin instead of /usr/sbin on other
> distributions.
>
> Signed-off-by: Luis Ressel <aranea@aixah.de>
> ---
> policy/modules/system/fstools.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index 634388b..3101274 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -48,7 +48,9 @@
> /usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
>
> +/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin
2014-08-11 12:31 [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Luis Ressel
2014-08-11 12:31 ` [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t Luis Ressel
@ 2014-08-14 19:42 ` Christopher J. PeBenito
1 sibling, 0 replies; 4+ messages in thread
From: Christopher J. PeBenito @ 2014-08-14 19:42 UTC (permalink / raw)
To: refpolicy
On 8/11/2014 8:31 AM, Luis Ressel wrote:
> Signed-off-by: Luis Ressel <aranea@aixah.de>
> ---
> policy/modules/system/fstools.fc | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index f27eb42..634388b 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -50,7 +50,11 @@
>
> /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)
>
> /var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2014-08-14 19:42 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-08-11 12:31 [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Luis Ressel
2014-08-11 12:31 ` [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t Luis Ressel
2014-08-14 19:42 ` Christopher J. PeBenito
2014-08-14 19:42 ` [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.