2015-11-26 20:45:34

by Laurent Bigonville

Subject: [refpolicy] [PATCH] Properly label utempter helper on debian

From: Laurent Bigonville <[email protected]>

---
policy/modules/system/authlogin.fc | 2 ++
1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc
index 2479587..bb11be5 100644
--- a/policy/modules/system/authlogin.fc
+++ b/policy/modules/system/authlogin.fc
@@ -18,6 +18,8 @@ ifdef(`distro_suse', `

/usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0)

+/usr/lib/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0)
+
/usr/sbin/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0)
/usr/sbin/validate -- gen_context(system_u:object_r:chkpwd_exec_t,s0)
ifdef(`distro_gentoo', `
--
2.6.2

2015-12-01 15:24:39

by cpebenito

Subject: [refpolicy] [PATCH] Properly label utempter helper on debian

On 11/26/2015 3:45 PM, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>
> ---
> policy/modules/system/authlogin.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc
> index 2479587..bb11be5 100644
> --- a/policy/modules/system/authlogin.fc
> +++ b/policy/modules/system/authlogin.fc
> @@ -18,6 +18,8 @@ ifdef(`distro_suse', `
>
> /usr/kerberos/sbin/login\.krb5 -- gen_context(system_u:object_r:login_exec_t,s0)
>
> +/usr/lib/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0)
> +
> /usr/sbin/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0)
> /usr/sbin/validate -- gen_context(system_u:object_r:chkpwd_exec_t,s0)
> ifdef(`distro_gentoo', `


Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com