From: pebenito@ieee.org (Chris PeBenito) Date: Tue, 2 Aug 2016 20:22:25 -0400 Subject: [refpolicy] [PATCH] Systemd by version 231 starts using shared library and systemd daemons execute it. For this reason lib_t type is needed. In-Reply-To: <1470147600-17850-1-git-send-email-lvrabec@redhat.com> References: <1470147600-17850-1-git-send-email-lvrabec@redhat.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 08/02/16 10:20, Lukas Vrabec wrote: > --- > policy/modules/system/libraries.fc | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc > index b532946..d61728f 100644 > --- a/policy/modules/system/libraries.fc > +++ b/policy/modules/system/libraries.fc > @@ -148,6 +148,8 @@ ifdef(`distro_debian',` > /usr/lib/nvidia/libGL(core)?\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) > /usr/lib/xorg/modules/glesx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) > > +/usr/lib/systemd/libsystemd-shared-[0-9]+\.so.* -- gen_context(system_u:object_r:lib_t,s0) > + > /usr/(local/)?.*\.so(\.[^/]*)* -- gen_context(system_u:object_r:lib_t,s0) > /usr/(local/)?lib(64)?/wine/.+\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0) > /usr/(local/)?lib(64)?/(sse2/)?libfame-.*\.so.* -- gen_context(system_u:object_r:textrel_shlib_t,s0) Merged. -- Chris PeBenito