Received: by 2002:a05:6a10:16a7:0:0:0:0 with SMTP id gp39csp3573554pxb; Mon, 16 Nov 2020 19:46:52 -0800 (PST) X-Google-Smtp-Source: ABdhPJxOlthOxGZk/XIXM6FqsRMjRm36DbFSn7A8KRXVseEliHF/NPW5wUTyWf3q9KNosZYWnoAH X-Received: by 2002:a17:906:7d1:: with SMTP id m17mr17644643ejc.98.1605584812130; Mon, 16 Nov 2020 19:46:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1605584812; cv=none; d=google.com; s=arc-20160816; b=ui09ZzlsDY3tzfTpeylkdjpg4VcUsdl/ifLy84Wo4uRC2fApE8rYnwEn5VD8crqk6F LTzYrkAE6AgmbfJudDo/A5VVcwnlX/aKiHlF3Mk55mBV8DVw0HnkRhaOmTWPU+fax247 ZAvnUdsYHv5wljMDvsYBGUwnHkVh8lcwSyEZbQQ5K+nVATYuQOfYWPW/4c98fBQtnQL6 OG6cUe3EoIoHXe0OKv/QZZzw9SYXUoCNjMkAdjrh0cjno+uoB5JaKZyKJX78m1ugETbN l9/1XDa8j3pzKlm7gDshHanBzSoZ/bBgCJqMvh+xQmm4XCpEw5eAW1agRbJZrTlEh02q KWrw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=Ns9al4Y3UZfn85r+lRcp+TjE+NqRL/0niti6OknLCTk=; b=kfU/T/6t9gLk5i8OHRgayvCeBpYQCgTkXcmksDx64S7rPuAywL3FM8AimopKv/DctF zuP5HDcq7IFYtCl6/yKtswQiVGLLBNdrITBvgPTmf+0vvaR9ncaXc76BHXiqJwmIFR0w hk+ErIiCIKrDssNX6Gx5namSLnEQ5Cd1yyPnryv6hZAERGIMFuX0kPd7+FBIkAGzIKJ+ aKCQbrYr2fUSZS8YwuaQtN+srroP8iGKaFbp+QBY4Z336botJCH5z2HpbJ1EFCeDgeoB vsEhKdXWbLfUMDhcT/FDnDF+jPFsOl/opzWRyA1WjSTe0WboZkrF7fu+arDGocud7CZv 0vAA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@perfinion-com.20150623.gappssmtp.com header.s=20150623 header.b=IOX1ekaX; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id v5si13284835ejy.703.2020.11.16.19.46.47; Mon, 16 Nov 2020 19:46:52 -0800 (PST) Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@perfinion-com.20150623.gappssmtp.com header.s=20150623 header.b=IOX1ekaX; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726279AbgKQDqq (ORCPT + 17 others); Mon, 16 Nov 2020 22:46:46 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55714 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725730AbgKQDqp (ORCPT ); Mon, 16 Nov 2020 22:46:45 -0500 Received: from mail-pg1-x52c.google.com (mail-pg1-x52c.google.com [IPv6:2607:f8b0:4864:20::52c]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 5E275C0613CF for ; Mon, 16 Nov 2020 19:46:44 -0800 (PST) Received: by mail-pg1-x52c.google.com with SMTP id p68so4666326pga.6 for ; Mon, 16 Nov 2020 19:46:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=perfinion-com.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=Ns9al4Y3UZfn85r+lRcp+TjE+NqRL/0niti6OknLCTk=; b=IOX1ekaXUSIHiFHJOvm57SM8tK0M7qlIZsd0RwtBH0o1EsII3zKlWfK4DNjc0QG2aH YCiwr9FpgpPs+w7DWEQ3jAFrPYDArudhmwo2Qt+M8/Iwj3b1TEz1r18m+9yRrOkDKf+5 JsluWj9Hmttrf6yIAZiFb1G9oz+H/2yBgcayWXqXZ8JSQ41gscyDsIHhw8G0NT9G3mOq a7t7H+CrFXhrWOpXLbHjnxS+VrANGXOV9KreQADBBNRTR/6xJOm5MEWefag0QFNWUet6 zHNoKhZndi37ZzUzyfSfSPxyGXVGrI/dngfPahquJx9XkVWRObtON7nDESto6LAQBUvV d1Og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=Ns9al4Y3UZfn85r+lRcp+TjE+NqRL/0niti6OknLCTk=; b=F0AxOEJAEkJa78aFFeA5giQte9PN+m1EgzYV6bJdwWMMKDb+cx14TumwZUsqSUFcBC KuNfb7EnbFnxrffTWIn1OPsWN/ImhPaCfhlR+TdofWmn1XDv+Lq+auNffUHfOHPSdIYf LSyfdDMDkQTLLM3binFqku4FNOh5/mj4qmP8u66fLNloVdIM5KyXzU7bPIFdF5e71S5K X6PuBDsL5K7S9/Y2LKUoocLPZfrvubKRHbQriOu9fSjL5mn4Sa0FPcm8YSTLsXvAwkD2 Ftc7+2OPELjsu/RAeM8CLgFIYflSuVwjZHuXUpWw59SSr0mwG1RVFn5rb+DcjV154eoi Sc4w== X-Gm-Message-State: AOAM530BbTBxafmRmVs/AXvgQ+cXQszKa8DcUoK3BW6YhuRRb6fF+/UZ Nir2DRsmWv5rZHaiOYOYdx+/bovE5Bfpzscs X-Received: by 2002:a17:90a:7647:: with SMTP id s7mr2356989pjl.23.1605584803628; Mon, 16 Nov 2020 19:46:43 -0800 (PST) Received: from localhost (115.42.24.136.in-addr.arpa. [136.24.42.115]) by smtp.gmail.com with ESMTPSA id w4sm981933pjh.47.2020.11.16.19.46.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 16 Nov 2020 19:46:43 -0800 (PST) From: Jason Zaman To: selinux-refpolicy@vger.kernel.org Cc: Jonathan Davies , Jason Zaman , Jason Zaman Subject: [PATCH 3/8] portage: Added /var/cache/distfiles path. Date: Mon, 16 Nov 2020 19:46:23 -0800 Message-Id: <20201117034628.2461-3-jason@perfinion.com> X-Mailer: git-send-email 2.26.2 In-Reply-To: <20201117034628.2461-1-jason@perfinion.com> References: <20201117034628.2461-1-jason@perfinion.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org From: Jonathan Davies Closes: https://github.com/perfinion/hardened-refpolicy/pull/1 Signed-off-by: Jason Zaman Signed-off-by: Jason Zaman --- policy/modules/admin/portage.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/admin/portage.fc b/policy/modules/admin/portage.fc index 3b6b9bf89..0567dfdc5 100644 --- a/policy/modules/admin/portage.fc +++ b/policy/modules/admin/portage.fc @@ -27,6 +27,7 @@ /var/db/pkg(/.*)? gen_context(system_u:object_r:portage_db_t,s0) /var/db/repos(/.*)? gen_context(system_u:object_r:portage_ebuild_t,s0) /var/cache/binpkgs(/.*)? gen_context(system_u:object_r:portage_ebuild_t,s0) +/var/cache/distfiles(/.*)? gen_context(system_u:object_r:portage_ebuild_t,s0) /var/cache/distfiles/cvs-src(/.*)? gen_context(system_u:object_r:portage_srcrepo_t,s0) /var/cache/distfiles/egit-src(/.*)? gen_context(system_u:object_r:portage_srcrepo_t,s0) /var/cache/distfiles/git[0-9]-src(/.*)? gen_context(system_u:object_r:portage_srcrepo_t,s0) -- 2.26.2