2014-03-03 22:59:40

by Laurent Bigonville

Subject: [refpolicy] [PATCH] Add several fcontext for debian specific paths for ntp

From: Laurent Bigonville <[email protected]>

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740656
---
ntp.fc | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ntp.fc b/ntp.fc
index af3c91e..6682163 100644
--- a/ntp.fc
+++ b/ntp.fc
@@ -1,13 +1,15 @@
+/etc/cron\.daily/ntp -- gen_context(system_u:object_r:ntpd_exec_t,s0)
/etc/cron\.(daily|weekly)/ntp-simple -- gen_context(system_u:object_r:ntpd_exec_t,s0)
/etc/cron\.(daily|weekly)/ntp-server -- gen_context(system_u:object_r:ntpd_exec_t,s0)

+/etc/ntp\.conf -- gen_context(system_u:object_r:ntp_conf_t,s0)
/etc/ntpd.*\.conf.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
/etc/ntp/crypto(/.*)? gen_context(system_u:object_r:ntpd_key_t,s0)
/etc/ntp/data(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
/etc/ntp/keys -- gen_context(system_u:object_r:ntpd_key_t,s0)
/etc/ntp/step-tickers.* -- gen_context(system_u:object_r:ntp_conf_t,s0)

-/etc/rc\.d/init\.d/ntpd -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)
+/etc/rc\.d/init\.d/ntpd? -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)

/usr/sbin/ntpd -- gen_context(system_u:object_r:ntpd_exec_t,s0)
/usr/sbin/ntpdate -- gen_context(system_u:object_r:ntpdate_exec_t,s0)
--
1.9.0

2014-03-14 15:12:38

by cpebenito

Subject: [refpolicy] [PATCH] Add several fcontext for debian specific paths for ntp

On 03/03/2014 05:59 PM, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740656
> ---
> ntp.fc | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/ntp.fc b/ntp.fc
> index af3c91e..6682163 100644
> --- a/ntp.fc
> +++ b/ntp.fc
> @@ -1,13 +1,15 @@
> +/etc/cron\.daily/ntp -- gen_context(system_u:object_r:ntpd_exec_t,s0)
> /etc/cron\.(daily|weekly)/ntp-simple -- gen_context(system_u:object_r:ntpd_exec_t,s0)
> /etc/cron\.(daily|weekly)/ntp-server -- gen_context(system_u:object_r:ntpd_exec_t,s0)
>
> +/etc/ntp\.conf -- gen_context(system_u:object_r:ntp_conf_t,s0)
> /etc/ntpd.*\.conf.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
> /etc/ntp/crypto(/.*)? gen_context(system_u:object_r:ntpd_key_t,s0)
> /etc/ntp/data(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
> /etc/ntp/keys -- gen_context(system_u:object_r:ntpd_key_t,s0)
> /etc/ntp/step-tickers.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
>
> -/etc/rc\.d/init\.d/ntpd -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)
> +/etc/rc\.d/init\.d/ntpd? -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)
>
> /usr/sbin/ntpd -- gen_context(system_u:object_r:ntpd_exec_t,s0)
> /usr/sbin/ntpdate -- gen_context(system_u:object_r:ntpdate_exec_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com