2020-03-19 16:14:16

by Laurent Bigonville

[permalink] [raw]
Subject: [PATCH] Label bluetooth daemon as bluetooth_exec_t

From: Laurent Bigonville <[email protected]>

---
policy/modules/services/bluetooth.fc | 3 +++
1 file changed, 3 insertions(+)

diff --git a/policy/modules/services/bluetooth.fc b/policy/modules/services/bluetooth.fc
index 3d66914f..e167e93f 100644
--- a/policy/modules/services/bluetooth.fc
+++ b/policy/modules/services/bluetooth.fc
@@ -15,9 +15,12 @@
/usr/bin/rfcomm -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
/usr/bin/sdpd -- gen_context(system_u:object_r:bluetooth_exec_t,s0)

+/usr/lib/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
# Systemd unit file
/usr/lib/systemd/system/[^/]*bluetooth.* -- gen_context(system_u:object_r:bluetooth_unit_t,s0)

+/usr/libexec/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
+
/usr/sbin/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
/usr/sbin/hciattach -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
/usr/sbin/hcid -- gen_context(system_u:object_r:bluetooth_exec_t,s0)
--
2.26.0.rc2