2014-02-15 12:07:45

by Mira Ressel

Subject: [refpolicy] [PATCH] Label fatsort as fsadm_exec_t.

FATsort is an utility to sort directory entries on FAT partitions, see
http://fatsort.sourceforge.net/ . It requires direct access to the
block devices.
---
policy/modules/system/fstools.fc | 1 +
policy/modules/system/fstools.te | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index 4b5327f..f27eb42 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -49,6 +49,7 @@
/usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)

/usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)

diff --git a/policy/modules/system/fstools.te b/policy/modules/system/fstools.te
index 5aff100..653d0b9 100644
--- a/policy/modules/system/fstools.te
+++ b/policy/modules/system/fstools.te
@@ -1,4 +1,4 @@
-policy_module(fstools, 1.16.5)
+policy_module(fstools, 1.16.6)

########################################
#
--
1.8.5.4

2014-02-15 19:39:52

by cpebenito

Subject: [refpolicy] [PATCH] Label fatsort as fsadm_exec_t.

On 2/15/2014 7:07 AM, Luis Ressel wrote:
> FATsort is an utility to sort directory entries on FAT partitions, see
> http://fatsort.sourceforge.net/ . It requires direct access to the
> block devices.
> ---
> policy/modules/system/fstools.fc | 1 +
> policy/modules/system/fstools.te | 2 +-
> 2 files changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index 4b5327f..f27eb42 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -49,6 +49,7 @@
> /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
>
> /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)

Merged.


> diff --git a/policy/modules/system/fstools.te b/policy/modules/system/fstools.te
> index 5aff100..653d0b9 100644
> --- a/policy/modules/system/fstools.te
> +++ b/policy/modules/system/fstools.te
> @@ -1,4 +1,4 @@
> -policy_module(fstools, 1.16.5)
> +policy_module(fstools, 1.16.6)
>
> ########################################
> #
>


--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com