From: lvrabec@redhat.com (Lukas Vrabec) Date: Tue, 2 Aug 2016 16:20:00 +0200 Subject: [refpolicy] [PATCH] Systemd by version 231 starts using shared library and systemd daemons execute it. For this reason lib_t type is needed. Message-ID: <1470147600-17850-1-git-send-email-lvrabec@redhat.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com --- policy/modules/system/libraries.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc index b532946..d61728f 100644 --- a/policy/modules/system/libraries.fc +++ b/policy/modules/system/libraries.fc @@ -148,6 +148,8 @@ ifdef(`distro_debian',` /usr/lib/nvidia/libGL(core)?\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) /usr/lib/xorg/modules/glesx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) +/usr/lib/systemd/libsystemd-shared-[0-9]+\.so.* -- gen_context(system_u:object_r:lib_t,s0) + /usr/(local/)?.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:lib_t,s0) /usr/(local/)?lib(64)?/wine/.+\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) /usr/(local/)?lib(64)?/(sse2/)?libfame-.*\.so.* -- gen_context(system_u:object_r:textrel_shlib_t,s0) -- 2.5.5