From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Thu, 14 Aug 2014 15:42:46 -0400 Subject: [refpolicy] [PATCH 2/2] Label /usr/sbin/{add, del}part as fsadm_exec_t In-Reply-To: <1407760293-23258-2-git-send-email-aranea@aixah.de> References: <1407760293-23258-1-git-send-email-aranea@aixah.de> <1407760293-23258-2-git-send-email-aranea@aixah.de> Message-ID: <53ED1136.8030504@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 8/11/2014 8:31 AM, Luis Ressel wrote: > These are seldomly-used tools from the util-linux package. > > Please check if they are located in /sbin instead of /usr/sbin on other > distributions. > > Signed-off-by: Luis Ressel > --- > policy/modules/system/fstools.fc | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc > index 634388b..3101274 100644 > --- a/policy/modules/system/fstools.fc > +++ b/policy/modules/system/fstools.fc > @@ -48,7 +48,9 @@ > /usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0) > > +/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0) > +/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) > /usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com