2013-09-21 07:56:46

by dominick.grift

Subject: [refpolicy] [PATCH] These regular expressions were not matched

Signed-off-by: Dominick Grift <[email protected]>
diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
index d1f64a0..bbbbfb0 100644
--- a/policy/modules/services/xserver.fc
+++ b/policy/modules/services/xserver.fc
@@ -56,10 +56,10 @@
# /usr
#

-/usr/(s)?bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
-/usr/(s)?bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
-/usr/(s)?bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
-/usr/(s)?bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
/usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
/usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
/usr/bin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)
@@ -69,6 +69,11 @@

/usr/lib/qt-.*/etc/settings(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)

+/usr/sbin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/sbin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/sbin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
+/usr/sbin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
+
/usr/X11R6/bin/[xgkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
/usr/X11R6/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
/usr/X11R6/bin/X -- gen_context(system_u:object_r:xserver_exec_t,s0)

2013-09-23 19:05:45

by cpebenito

Subject: [refpolicy] [PATCH] These regular expressions were not matched

On 09/21/2013 03:56 AM, Dominick Grift wrote:
>
> Signed-off-by: Dominick Grift <[email protected]>
> diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
> index d1f64a0..bbbbfb0 100644
> --- a/policy/modules/services/xserver.fc
> +++ b/policy/modules/services/xserver.fc
> @@ -56,10 +56,10 @@
> # /usr
> #
>
> -/usr/(s)?bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> -/usr/(s)?bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
> -/usr/(s)?bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> -/usr/(s)?bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> /usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> /usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
> /usr/bin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)

When you encountered this, did you try just removing the parentheses round the s?, for example:

/usr/(s)?bin/[xkw]dm -> /usr/s?bin/[xkw]dm

or is this another fc sorting issue?

> @@ -69,6 +69,11 @@
>
> /usr/lib/qt-.*/etc/settings(/.*)? gen_context(system_u:object_r:xdm_var_run_t,s0)
>
> +/usr/sbin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/sbin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/sbin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +/usr/sbin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> +
> /usr/X11R6/bin/[xgkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> /usr/X11R6/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
> /usr/X11R6/bin/X -- gen_context(system_u:object_r:xserver_exec_t,s0)

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com

2013-09-23 20:22:54

by dominick.grift

Subject: [refpolicy] [PATCH] These regular expressions were not matched

On Mon, 2013-09-23 at 15:05 -0400, Christopher J. PeBenito wrote:
> On 09/21/2013 03:56 AM, Dominick Grift wrote:
> >
> > Signed-off-by: Dominick Grift <[email protected]>
> > diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
> > index d1f64a0..bbbbfb0 100644
> > --- a/policy/modules/services/xserver.fc
> > +++ b/policy/modules/services/xserver.fc
> > @@ -56,10 +56,10 @@
> > # /usr
> > #
> >
> > -/usr/(s)?bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > -/usr/(s)?bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > -/usr/(s)?bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > -/usr/(s)?bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > +/usr/bin/gdm(3)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > +/usr/bin/gdm-binary -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > +/usr/bin/lxdm(-binary)? -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > +/usr/bin/[xkw]dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > /usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0)
> > /usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0)
> > /usr/bin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)
>
> When you encountered this, did you try just removing the parentheses round the s?, for example:

I have not tried it without parentheses, will do that asap