From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 6 Dec 2013 09:50:47 -0500 Subject: [refpolicy] [PATCH 27/39] libraries: for now i can only confirm mmap, might need to be changed to bin_t later if it turns out to need execute_no_trans In-Reply-To: <1383990320-3340-27-git-send-email-dominick.grift@gmail.com> References: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com> <1383990320-3340-27-git-send-email-dominick.grift@gmail.com> Message-ID: <52A1E447.4060903@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/09/13 04:45, Dominick Grift wrote: > Signed-off-by: Dominick Grift > --- > policy/modules/system/libraries.fc | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc > index 73bb3c0..d9408e6 100644 > --- a/policy/modules/system/libraries.fc > +++ b/policy/modules/system/libraries.fc > @@ -117,6 +117,10 @@ ifdef(`distro_redhat',` > > /usr/(.*/)?nvidia/.+\.so(\..*)? -- gen_context(system_u:object_r:textrel_shlib_t,s0) > > +ifdef(`distro_debian',` > +/usr/(.*/)?dh-python/dh_pypy -- gen_context(system_u:object_r:lib_t,s0) > +') > + > /usr/lib/altivec/libavcodec\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) > /usr/lib/cedega/.+\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) > /usr/lib/dovecot/(.*/)?lib.*\.so.* -- gen_context(system_u:object_r:lib_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com