From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Thu, 14 Aug 2014 15:42:44 -0400 Subject: [refpolicy] [PATCH 1/2] Some of the fsadm tools can also be in /usr/sbin instead of /sbin In-Reply-To: <1407760293-23258-1-git-send-email-aranea@aixah.de> References: <1407760293-23258-1-git-send-email-aranea@aixah.de> Message-ID: <53ED1134.7060405@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 8/11/2014 8:31 AM, Luis Ressel wrote: > Signed-off-by: Luis Ressel > --- > policy/modules/system/fstools.fc | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc > index f27eb42..634388b 100644 > --- a/policy/modules/system/fstools.fc > +++ b/policy/modules/system/fstools.fc > @@ -50,7 +50,11 @@ > > /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) > +/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) > +/usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/parted -- gen_context(system_u:object_r:fsadm_exec_t,s0) > +/usr/sbin/partprobe -- gen_context(system_u:object_r:fsadm_exec_t,s0) > +/usr/sbin/partx -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/smartctl -- gen_context(system_u:object_r:fsadm_exec_t,s0) > > /var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com