From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Thu, 9 Aug 2012 19:43:52 +0200 Subject: [refpolicy] [PATCH v2 0/2] Introduce substitution for /usr/local/lib* and /etc/init.d Message-ID: <20120809174351.GA32628@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com This patchset contains the suggestion to also have a substitition for /usr/local/lib* towards /usr/lib since manually installed applications use /usr/local/lib* for their libraries (instead of /usr/lib) but *should* have the same structure otherwise. This is not only to clean up the defined file contexts a bit (there are not that many references to /usr/local) but mainly to support such installed applications almost out-of-the-box with our policies. A second substitution is for init scripts defined in /etc/init\.d, which we now map to /etc/rc\.d/init\.d (already used in the majority of cases in the policy). For those distributions that do use /etc/init\.d though they need to take care to always use /etc/rc\.d/init\.d since the translation (substitution) takes precedence before the file contexts are looked at. Changelog since v1 ------------------ - Removed translation of /usr/local to /usr - Added translation for /etc/init.d to /etc/rc.d/init.d