[refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin

Christopher J. PeBenito cpebenito at tresys.com
Thu Aug 14 15:42:44 EDT 2014


On 8/11/2014 8:31 AM, Luis Ressel wrote:
> Signed-off-by: Luis Ressel <aranea at aixah.de>
> ---
>  policy/modules/system/fstools.fc | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index f27eb42..634388b 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -50,7 +50,11 @@
>  
>  /usr/sbin/clubufflush	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
>  /usr/sbin/fatsort	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/fsck.*	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/mkfs.*	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
>  /usr/sbin/parted	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partprobe	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partx		--	gen_context(system_u:object_r:fsadm_exec_t,s0)
>  /usr/sbin/smartctl	--	gen_context(system_u:object_r:fsadm_exec_t,s0)
>  
>  /var/log/fsck(/.*)?		gen_context(system_u:object_r:fsadm_log_t,s0)

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com


More information about the refpolicy mailing list