From mboxrd@z Thu Jan 1 00:00:00 1970 From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 1 Dec 2015 10:24:39 -0500 Subject: [refpolicy] [PATCH] Properly label utempter helper on debian In-Reply-To: <1448570734-19831-1-git-send-email-bigon@debian.org> References: <1448570734-19831-1-git-send-email-bigon@debian.org> Message-ID: <565DBBB7.30801@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/26/2015 3:45 PM, Laurent Bigonville wrote: > From: Laurent Bigonville > > --- > policy/modules/system/authlogin.fc | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc > index 2479587..bb11be5 100644 > --- a/policy/modules/system/authlogin.fc > +++ b/policy/modules/system/authlogin.fc > @@ -18,6 +18,8 @@ ifdef(`distro_suse', ` > > /usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0) > > +/usr/lib/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) > + > /usr/sbin/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) > /usr/sbin/validate -- gen_context(system_u:object_r:chkpwd_exec_t,s0) > ifdef(`distro_gentoo', ` Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com