From: aranea@aixah.de (Luis Ressel) Date: Mon, 11 Aug 2014 14:31:33 +0200 Subject: [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t In-Reply-To: <1407760293-23258-1-git-send-email-aranea@aixah.de> References: <1407760293-23258-1-git-send-email-aranea@aixah.de> Message-ID: <1407760293-23258-2-git-send-email-aranea@aixah.de> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com These are seldomly-used tools from the util-linux package. Please check if they are located in /sbin instead of /usr/sbin on other distributions. Signed-off-by: Luis Ressel --- policy/modules/system/fstools.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc index 634388b..3101274 100644 --- a/policy/modules/system/fstools.fc +++ b/policy/modules/system/fstools.fc @@ -48,7 +48,9 @@ /usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) -- 2.0.4