[refpolicy] [PATCH] Add insmod_exec_t label for kmod executable

Laurent Bigonville bigon at debian.org
Thu Sep 13 06:44:35 CDT 2012


From: Laurent Bigonville <bigon at bigon.be>

lsmod, rmmod, insmod, modinfo, modprobe and depmod are now symlinks to
the kmod executable
---
 policy/modules/system/modutils.fc |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/modutils.fc b/policy/modules/system/modutils.fc
index 2410551..31f1378 100644
--- a/policy/modules/system/modutils.fc
+++ b/policy/modules/system/modutils.fc
@@ -20,3 +20,5 @@ ifdef(`distro_gentoo',`
 /sbin/modules-update	--	gen_context(system_u:object_r:update_modules_exec_t,s0)
 /sbin/rmmod.*		--	gen_context(system_u:object_r:insmod_exec_t,s0)
 /sbin/update-modules	--	gen_context(system_u:object_r:update_modules_exec_t,s0)
+
+/(usr/)?bin/kmod	--	gen_context(system_u:object_r:insmod_exec_t,s0)
-- 
1.7.10.4



More information about the refpolicy mailing list