2013-01-03 22:04:16

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH 0/3] Add some files contexts for debian location (contrib)

Hi,

Please find here some files contexts for debian location

Cheers

Laurent Bigonville


2013-01-03 22:04:17

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/3] gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian

From: Laurent Bigonville <[email protected]>

---
gnomeclock.fc | 2 ++
1 file changed, 2 insertions(+)

diff --git a/gnomeclock.fc b/gnomeclock.fc
index b687443..f9ba8cd 100644
--- a/gnomeclock.fc
+++ b/gnomeclock.fc
@@ -3,3 +3,5 @@
/usr/libexec/gsd-datetime-mechanism -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)

/usr/libexec/kde(3|4)/kcmdatetimehelper -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)
+
+/usr/lib/gnome-settings-daemon/gsd-datetime-mechanism -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)
--
1.7.10.4

2013-01-03 22:04:18

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/3] ptchown.fc: Properly label pt_chown executable in Debian

From: Laurent Bigonville <[email protected]>

---
ptchown.fc | 2 ++
1 file changed, 2 insertions(+)

diff --git a/ptchown.fc b/ptchown.fc
index 9fc398e..dd96822 100644
--- a/ptchown.fc
+++ b/ptchown.fc
@@ -1 +1,3 @@
/usr/libexec/pt_chown -- gen_context(system_u:object_r:ptchown_exec_t,s0)
+
+/usr/lib/pt_chown -- gen_context(system_u:object_r:ptchown_exec_t,s0)
--
1.7.10.4

2013-01-03 22:04:19

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH 3/3] Label /usr/bin/kvm as qemu_exec_t

From: Laurent Bigonville <[email protected]>

---
qemu.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/qemu.fc b/qemu.fc
index 6b53fa4..86ea53c 100644
--- a/qemu.fc
+++ b/qemu.fc
@@ -1,5 +1,6 @@
/usr/bin/qemu -- gen_context(system_u:object_r:qemu_exec_t,s0)
/usr/bin/qemu-system-.* -- gen_context(system_u:object_r:qemu_exec_t,s0)
/usr/bin/qemu-kvm -- gen_context(system_u:object_r:qemu_exec_t,s0)
+/usr/bin/kvm -- gen_context(system_u:object_r:qemu_exec_t,s0)

/usr/libexec/qemu.* -- gen_context(system_u:object_r:qemu_exec_t,s0)
--
1.7.10.4

2013-01-07 18:13:26

by dominick.grift

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/3] gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian

On Thu, 2013-01-03 at 23:04 +0100, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>

This was merged, thank you
>
> ---
> gnomeclock.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/gnomeclock.fc b/gnomeclock.fc
> index b687443..f9ba8cd 100644
> --- a/gnomeclock.fc
> +++ b/gnomeclock.fc
> @@ -3,3 +3,5 @@
> /usr/libexec/gsd-datetime-mechanism -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)
>
> /usr/libexec/kde(3|4)/kcmdatetimehelper -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)
> +
> +/usr/lib/gnome-settings-daemon/gsd-datetime-mechanism -- gen_context(system_u:object_r:gnomeclock_exec_t,s0)

2013-01-07 18:14:04

by dominick.grift

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/3] ptchown.fc: Properly label pt_chown executable in Debian

On Thu, 2013-01-03 at 23:04 +0100, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>

This was merged, thank you
>
> ---
> ptchown.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/ptchown.fc b/ptchown.fc
> index 9fc398e..dd96822 100644
> --- a/ptchown.fc
> +++ b/ptchown.fc
> @@ -1 +1,3 @@
> /usr/libexec/pt_chown -- gen_context(system_u:object_r:ptchown_exec_t,s0)
> +
> +/usr/lib/pt_chown -- gen_context(system_u:object_r:ptchown_exec_t,s0)

2013-01-07 18:15:14

by dominick.grift

[permalink] [raw]
Subject: [refpolicy] [PATCH 3/3] Label /usr/bin/kvm as qemu_exec_t

On Thu, 2013-01-03 at 23:04 +0100, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>

This was merged, thank you
> ---
> qemu.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/qemu.fc b/qemu.fc
> index 6b53fa4..86ea53c 100644
> --- a/qemu.fc
> +++ b/qemu.fc
> @@ -1,5 +1,6 @@
> /usr/bin/qemu -- gen_context(system_u:object_r:qemu_exec_t,s0)
> /usr/bin/qemu-system-.* -- gen_context(system_u:object_r:qemu_exec_t,s0)
> /usr/bin/qemu-kvm -- gen_context(system_u:object_r:qemu_exec_t,s0)
> +/usr/bin/kvm -- gen_context(system_u:object_r:qemu_exec_t,s0)
>
> /usr/libexec/qemu.* -- gen_context(system_u:object_r:qemu_exec_t,s0)