2012-08-05 01:04:24

by Guido Trentalancia

[permalink] [raw]
Subject: [refpolicy] [PATCH v2]: extend mcelog file context definitions

Mcelog triggers' default location appears to be /etc/mcelog, as /etc/mcelog/triggers
is specific to Fedora: try supporting such triggers in a more future-proof manner.
Add support for "local" scripts at the same location.

Signed-off-by: Guido Trentalancia <[email protected]>
---
policy/modules/kernel/corecommands.fc | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)

--- refpolicy-20072012/policy/modules/kernel/corecommands.fc 2012-07-20 17:39:21.156919570 +0200
+++ refpolicy-20072012-mcelog-fc/policy/modules/kernel/corecommands.fc 2012-08-05 04:03:32.887001425 +0200
@@ -72,8 +72,13 @@ ifdef(`distro_redhat',`
/etc/kde/shutdown(/.*)? gen_context(system_u:object_r:bin_t,s0)

/etc/mail/make -- gen_context(system_u:object_r:bin_t,s0)
-/etc/mcelog/cache-error-trigger -- gen_context(system_u:object_r:bin_t,s0)
+/etc/mcelog/.*-error-trigger -- gen_context(system_u:object_r:bin_t,s0)
+/etc/mcelog/.*.local -- gen_context(system_u:object_r:bin_t,s0)
+
+ifdef(`distro_redhat',`
/etc/mcelog/triggers(/.*)? gen_context(system_u:object_r:bin_t,s0)
+')
+
/etc/mgetty+sendfax/new_fax -- gen_context(system_u:object_r:bin_t,s0)

/etc/netplug.d(/.*)? gen_context(system_u:object_r:bin_t,s0)