From: bigon@debian.org (Laurent Bigonville) Date: Sat, 5 Apr 2014 20:01:22 +0200 Subject: [refpolicy] [PATCH 2/3] Properly label the manpages installed by postgresql In-Reply-To: <1396720883-6183-1-git-send-email-bigon@debian.org> References: <1396720883-6183-1-git-send-email-bigon@debian.org> Message-ID: <1396720883-6183-2-git-send-email-bigon@debian.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com From: Laurent Bigonville The postgresql manpages are installed under a private directory, some of them are symlinked to the usual location. Properly labeling them ensure that mandb can read them. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740591 --- policy/modules/system/miscfiles.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc index 9fe8e01..b862663 100644 --- a/policy/modules/system/miscfiles.fc +++ b/policy/modules/system/miscfiles.fc @@ -50,6 +50,7 @@ ifdef(`distro_redhat',` /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0) /usr/share/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/man(/.*)? gen_context(system_u:object_r:man_t,s0) +/usr/share/postgresql/[^/]*/man(/.*)? gen_context(system_u:object_r:man_t,s0) /usr/share/X11/locale(/.*)? gen_context(system_u:object_r:locale_t,s0) /usr/share/zoneinfo(/.*)? gen_context(system_u:object_r:locale_t,s0) -- 1.9.1