From: guido@trentalancia.com (Guido Trentalancia) Date: Sun, 05 Aug 2012 03:04:24 +0200 Subject: [refpolicy] [PATCH v2]: extend mcelog file context definitions Message-ID: <201208050104.q7514Pfd012584@vivaldi45.register.it> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Mcelog triggers' default location appears to be /etc/mcelog, as /etc/mcelog/triggers is specific to Fedora: try supporting such triggers in a more future-proof manner. Add support for "local" scripts at the same location. Signed-off-by: Guido Trentalancia --- policy/modules/kernel/corecommands.fc | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) --- refpolicy-20072012/policy/modules/kernel/corecommands.fc 2012-07-20 17:39:21.156919570 +0200 +++ refpolicy-20072012-mcelog-fc/policy/modules/kernel/corecommands.fc 2012-08-05 04:03:32.887001425 +0200 @@ -72,8 +72,13 @@ ifdef(`distro_redhat',` /etc/kde/shutdown(/.*)? gen_context(system_u:object_r:bin_t,s0) /etc/mail/make -- gen_context(system_u:object_r:bin_t,s0) -/etc/mcelog/cache-error-trigger -- gen_context(system_u:object_r:bin_t,s0) +/etc/mcelog/.*-error-trigger -- gen_context(system_u:object_r:bin_t,s0) +/etc/mcelog/.*.local -- gen_context(system_u:object_r:bin_t,s0) + +ifdef(`distro_redhat',` /etc/mcelog/triggers(/.*)? gen_context(system_u:object_r:bin_t,s0) +') + /etc/mgetty+sendfax/new_fax -- gen_context(system_u:object_r:bin_t,s0) /etc/netplug.d(/.*)? gen_context(system_u:object_r:bin_t,s0)