From: guido@trentalancia.net (Guido Trentalancia) Date: Mon, 08 Aug 2016 17:26:10 +0200 Subject: [refpolicy] [PATCH] fc_sort must be explicitly labeled as executable upon creation Message-ID: <1470669970.10405.3.camel@trentalancia.net> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Force a bin_t label on the fc_sort executable after creating it, to avoid execution denials (e.g. misplaced generic default labels). Signed-off-by: Guido Trentalancia --- Makefile | 1 + 1 file changed, 1 insertion(+) --- refpolicy-04062012/Makefile 2012-05-29 21:13:09.413703575 +0200 +++ refpolicy-04062012-chcon-fc_sort/Makefile 2012-08-04 21:35:57.396092798 +0200 @@ -400,6 +400,7 @@ $(mod_conf) $(booleans): $(polxml) # $(fcsort) : $(support)/fc_sort.c $(verbose) $(CC) $(CFLAGS) $^ -o $@ + chcon system_u:object_r:bin_t:s0 $(tmpdir)/fc_sort ######################################## #