Received: by 2002:a17:90b:8d0:0:0:0:0 with SMTP id ds16csp375757pjb; Wed, 22 Jul 2020 02:08:46 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzJ19iwnQDTJ5ubFVLpyrpMapvxkHSgDwMBxL0+V/PMZnyIPrK+5wkHCMUGxIBUYg4wyyv4 X-Received: by 2002:a05:6402:888:: with SMTP id e8mr30683711edy.210.1595408925879; Wed, 22 Jul 2020 02:08:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1595408925; cv=none; d=google.com; s=arc-20160816; b=IjECR0iapfbkt8dV8umPO1ljU4Z3HWfcyx+HWu61VztmO0n4iVnSzhN+MHKd4ZuM1O IM5RrDYNY3EEhI4fdm/tcMzur+AexsvWUBl53w582286FtZ8Q472ZNUtNyL0hmJS8yqX PSo/IjHqo/eI+4tFs/YPRXqT/v9zpvijU9KGq6jt5yp85pdiBuxmr3oANghqdKidtwEK 4SSbQ+rQYnPhcb0xfZD8d2JSZwqak3tk4TGCv4WhokW1+OyqSbcmWmHNymcjUgOUZ0wM GmpNyuj70142iaXmPtnENHibaDtVRinOOPVq7d8RF7DutwBtvXTnXO/uOl01oPJ61WGt XKNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :message-id:date:subject:to:from:dkim-signature; bh=fgpa3VbCj/HjDcTDTwJO9whblyEIlY81/U2PcL7re/c=; b=Pv1hTHgM2M3iPzmsdXHAFDG+9sY9MWHvGYfbC13zJ/dDsn/bco0F1YKjjOMKXiZ91B ecok986BpJdkBixEnyFSfdLSiA22Nb00gR219ZNFsW2K6S7gI3cyu2q+tKboh+wSt9uC SIFtDVC7zWWcgHXgI8HQNOeThU+Q93Y/m926ZzBCNCNWRYojeWsRGxZ3R9+kUcxv05I/ EkTQhEIAAMyIlrxaWNORemP3QdhMVAfAbiA5szaXfaZxXCzqs4GhJ/XR/wj4Xq5Amnkf 3dqEJBX20BDj+plGyogFvaG5UFzGM9Y7qa82vn+b7urJ5M1PBGQmyMY/8204J6NVB1o2 2oug== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@bigon.be header.s=key1 header.b=rPok8MPL; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id y16si14074213edv.476.2020.07.22.02.08.39; Wed, 22 Jul 2020 02:08:45 -0700 (PDT) Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@bigon.be header.s=key1 header.b=rPok8MPL; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726555AbgGVJIh (ORCPT + 15 others); Wed, 22 Jul 2020 05:08:37 -0400 Received: from ithil.bigon.be ([163.172.57.153]:52388 "EHLO ithil.bigon.be" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726153AbgGVJIg (ORCPT ); Wed, 22 Jul 2020 05:08:36 -0400 X-Greylist: delayed 561 seconds by postgrey-1.27 at vger.kernel.org; Wed, 22 Jul 2020 05:08:36 EDT Received: from localhost (localhost [IPv6:::1]) by ithil.bigon.be (Postfix) with ESMTP id 29A741FD29 for ; Wed, 22 Jul 2020 10:59:10 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bigon.be; h= content-transfer-encoding:mime-version:x-mailer:message-id:date :date:subject:subject:from:from:received:received:received; s= key1; t=1595408350; x=1597222751; bh=fd30GzJh4y6F9qdPo6bD5EKWIzW RaVJkV69AqD6Uuvk=; b=rPok8MPLMdPv3Yvec0LKx8nwTpVXO8jZ+CWtdCidNIx AEzoHVH9KmqHxGF0rip/B8BUQDmY5keTKthlwb3rDmo64uu8td0/HdOXvwFNVY/5 AquhAl/SUoZHonImNAYLatHHUQGYjDArRJbkBygGNaaXaap+BfyT8Zfzf6LyRbCU = Received: from ithil.bigon.be ([IPv6:::1]) by localhost (ithil.bigon.be [IPv6:::1]) (amavisd-new, port 10026) with ESMTP id mYaQVPaJ_-BH for ; Wed, 22 Jul 2020 10:59:10 +0200 (CEST) Received: from edoras.bigon.be (unknown [IPv6:2a02:a03f:65b8:4300:746b:cff:67dc:4fbd]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: bigon@bigon.be) by ithil.bigon.be (Postfix) with ESMTPSA for ; Wed, 22 Jul 2020 10:59:10 +0200 (CEST) Received: from bigon (uid 1000) (envelope-from bigon@bigon.be) id 202d7 by edoras.bigon.be (DragonFly Mail Agent v0.12); Wed, 22 Jul 2020 10:59:08 +0200 From: Laurent Bigonville To: selinux-refpolicy@vger.kernel.org Subject: [PATCH] Also label polkit-agent-helper-1 when installed directly in /usr/libexec Date: Wed, 22 Jul 2020 10:59:08 +0200 Message-Id: <20200722085908.57820-1-bigon@debian.org> X-Mailer: git-send-email 2.28.0.rc1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org From: Laurent Bigonville Debian now installs that executable directly in /usr/libexec for the version 0.105 Signed-off-by: Laurent Bigonville --- policy/modules/services/policykit.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/policykit.fc b/policy/modules/services/policykit.fc index e2782838..85814b95 100644 --- a/policy/modules/services/policykit.fc +++ b/policy/modules/services/policykit.fc @@ -11,6 +11,7 @@ # Systemd unit file /usr/lib/systemd/system/[^/]*polkit.* -- gen_context(system_u:object_r:policykit_unit_t,s0) +/usr/libexec/polkit-agent-helper-1 -- gen_context(system_u:object_r:policykit_auth_exec_t,s0) /usr/libexec/polkit-read-auth-helper -- gen_context(system_u:object_r:policykit_auth_exec_t,s0) /usr/libexec/polkit-grant-helper.* -- gen_context(system_u:object_r:policykit_grant_exec_t,s0) /usr/libexec/polkit-resolve-exe-helper.* -- gen_context(system_u:object_r:policykit_resolve_exec_t,s0) -- 2.28.0.rc1