2017-11-29 21:14:17

by Sugar, David

[permalink] [raw]
Subject: [refpolicy] RHEL 7.4 has moved the location of /usr/libexec/sesh to /usr/libexec/sudo/sesh

Update file context to include label for new location.
See https://bugzilla.redhat.com/show_bug.cgi?id=1480791

Signed-off-by: Dave Sugar <[email protected]>
---
policy/modules/kernel/corecommands.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
index cd2f8792..c2b93ecf 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -258,6 +258,7 @@ ifdef(`distro_gentoo',`
/usr/libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/libexec/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
/usr/libexec/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/libexec/sudo/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)

/usr/libexec/openssh/sftp-server -- gen_context(system_u:object_r:bin_t,s0)

--
2.13.6


2017-12-03 21:32:46

by Chris PeBenito

[permalink] [raw]
Subject: [refpolicy] RHEL 7.4 has moved the location of /usr/libexec/sesh to /usr/libexec/sudo/sesh

On 11/29/2017 04:14 PM, David Sugar via refpolicy wrote:
> Update file context to include label for new location.
> See https://bugzilla.redhat.com/show_bug.cgi?id=1480791
>
> Signed-off-by: Dave Sugar <[email protected]>
> ---
> policy/modules/kernel/corecommands.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
> index cd2f8792..c2b93ecf 100644
> --- a/policy/modules/kernel/corecommands.fc
> +++ b/policy/modules/kernel/corecommands.fc
> @@ -258,6 +258,7 @@ ifdef(`distro_gentoo',`
> /usr/libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
> /usr/libexec/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
> /usr/libexec/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
> +/usr/libexec/sudo/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
>
> /usr/libexec/openssh/sftp-server -- gen_context(system_u:object_r:bin_t,s0)

Merged.

--
Chris PeBenito