From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Fri, 7 Sep 2012 09:07:54 -0400
Subject: [refpolicy] [PATCH 5/9] Label /usr/lib/udisks/udisks-helper-*
 with bin_t
In-Reply-To: <1346794648-27101-5-git-send-email-bigon@debian.org>
References: <1346794648-27101-1-git-send-email-bigon@debian.org>
	<1346794648-27101-5-git-send-email-bigon@debian.org>
Message-ID: <5049F1AA.102@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 09/04/12 17:37, Laurent Bigonville wrote:
> From: Laurent Bigonville <bigon@bigon.be>
> 
> ---
>  devicekit.fc |    1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/devicekit.fc b/devicekit.fc
> index 9af85c8..ae2d805 100644
> --- a/devicekit.fc
> +++ b/devicekit.fc
> @@ -1,4 +1,5 @@
>  /usr/lib/udisks/udisks-daemon	--	gen_context(system_u:object_r:devicekit_disk_exec_t,s0)
> +/usr/lib/udisks/udisks-helper-.* --     gen_context(system_u:object_r:bin_t,s0)
>  
>  /usr/libexec/devkit-daemon	--	gen_context(system_u:object_r:devicekit_exec_t,s0)
>  /usr/libexec/devkit-disks-daemon --	gen_context(system_u:object_r:devicekit_disk_exec_t,s0)
> 

This belongs in corecommands, if bin_t is appropriate.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com