2014-08-11 12:31:32

by Mira Ressel

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin

Signed-off-by: Luis Ressel <[email protected]>
---
policy/modules/system/fstools.fc | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index f27eb42..634388b 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -50,7 +50,11 @@

/usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)

/var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0)
--
2.0.4


2014-08-11 12:31:33

by Mira Ressel

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t

These are seldomly-used tools from the util-linux package.

Please check if they are located in /sbin instead of /usr/sbin on other
distributions.

Signed-off-by: Luis Ressel <[email protected]>
---
policy/modules/system/fstools.fc | 2 ++
1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index 634388b..3101274 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -48,7 +48,9 @@
/usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)

+/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
--
2.0.4

2014-08-14 19:42:44

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin

On 8/11/2014 8:31 AM, Luis Ressel wrote:
> Signed-off-by: Luis Ressel <[email protected]>
> ---
> policy/modules/system/fstools.fc | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index f27eb42..634388b 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -50,7 +50,11 @@
>
> /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0)
>
> /var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com

2014-08-14 19:42:46

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t

On 8/11/2014 8:31 AM, Luis Ressel wrote:
> These are seldomly-used tools from the util-linux package.
>
> Please check if they are located in /sbin instead of /usr/sbin on other
> distributions.
>
> Signed-off-by: Luis Ressel <[email protected]>
> ---
> policy/modules/system/fstools.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
> index 634388b..3101274 100644
> --- a/policy/modules/system/fstools.fc
> +++ b/policy/modules/system/fstools.fc
> @@ -48,7 +48,9 @@
> /usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
>
> +/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> +/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
> /usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com