From: aranea@aixah.de (Luis Ressel) Date: Mon, 11 Aug 2014 14:31:32 +0200 Subject: [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin Message-ID: <1407760293-23258-1-git-send-email-aranea@aixah.de> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Luis Ressel --- policy/modules/system/fstools.fc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc index f27eb42..634388b 100644 --- a/policy/modules/system/fstools.fc +++ b/policy/modules/system/fstools.fc @@ -50,7 +50,11 @@ /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0) /var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0) -- 2.0.4