2014-04-13 21:46:09

by Laurent Bigonville

Subject: [refpolicy] [PATCH] Label /etc/locale.alias as locale_t on Debian

From: Laurent Bigonville <[email protected]>

On Debian, /usr/share/locale/locale.alias is a symlink to
/etc/locale.alias, properly label this file.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707246
---
policy/modules/system/miscfiles.fc | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
index e917c2e..fb7e7b2 100644
--- a/policy/modules/system/miscfiles.fc
+++ b/policy/modules/system/miscfiles.fc
@@ -15,6 +15,10 @@ ifdef(`distro_gentoo',`
/etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
/etc/timezone -- gen_context(system_u:object_r:locale_t,s0)

+ifdef(`distro_debian',`
+/etc/locale.alias -- gen_context(system_u:object_r:locale_t,s0)
+')
+
ifdef(`distro_redhat',`
/etc/sysconfig/clock -- gen_context(system_u:object_r:locale_t,s0)
')
--
1.9.2

2014-04-21 13:07:46

by cpebenito

Subject: [refpolicy] [PATCH] Label /etc/locale.alias as locale_t on Debian

On 04/13/2014 05:46 PM, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>
> On Debian, /usr/share/locale/locale.alias is a symlink to
> /etc/locale.alias, properly label this file.
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707246
> ---
> policy/modules/system/miscfiles.fc | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
> index e917c2e..fb7e7b2 100644
> --- a/policy/modules/system/miscfiles.fc
> +++ b/policy/modules/system/miscfiles.fc
> @@ -15,6 +15,10 @@ ifdef(`distro_gentoo',`
> /etc/ssl(/.*)? gen_context(system_u:object_r:cert_t,s0)
> /etc/timezone -- gen_context(system_u:object_r:locale_t,s0)
>
> +ifdef(`distro_debian',`
> +/etc/locale.alias -- gen_context(system_u:object_r:locale_t,s0)
> +')
> +
> ifdef(`distro_redhat',`
> /etc/sysconfig/clock -- gen_context(system_u:object_r:locale_t,s0)
> ')

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com