From: dominick.grift@gmail.com (grift)
Date: Sat, 08 Dec 2012 22:46:31 +0100
Subject: [refpolicy] [PATCH 07/11] Mark make.profile entry as
 portage_conf_t
In-Reply-To: <1355000222-7297-8-git-send-email-sven.vermeulen@siphos.be>
References: <1355000222-7297-1-git-send-email-sven.vermeulen@siphos.be>
	<1355000222-7297-8-git-send-email-sven.vermeulen@siphos.be>
Message-ID: <1355003191.1797.44.camel@localhost>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sat, 2012-12-08 at 21:56 +0100, Sven Vermeulen wrote:
> Although the /etc/make.profile symlink is going to be removed in a matter of
> time, it is currently still very much in use and should be marked as
> portage_conf_t.
> 
> Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
> ---
>  portage.fc |    1 +
>  1 files changed, 1 insertions(+), 0 deletions(-)
> 
> diff --git a/portage.fc b/portage.fc
> index d044552..50ac5a1 100644
> --- a/portage.fc
> +++ b/portage.fc
> @@ -1,5 +1,6 @@
>  /etc/make\.conf	--	gen_context(system_u:object_r:portage_conf_t,s0)
>  /etc/make\.globals	--	gen_context(system_u:object_r:portage_conf_t,s0)
> +/etc/make\.profile	-s	gen_context(system_u:object_r:portage_conf_t,s0)
>  /etc/portage(/.*)?	gen_context(system_u:object_r:portage_conf_t,s0)
>  /etc/portage/gpg(/.*)?	gen_context(system_u:object_r:portage_gpg_t,s0)
>  
 
-s means sock_file , use -l instead