From: pebenito@ieee.org (Chris PeBenito) Date: Tue, 18 Apr 2017 21:49:50 -0400 Subject: [refpolicy] [PATCH] corecommands: new file contexts for Gnome applications In-Reply-To: <1492460927.20241.1.camel@trentalancia.net> References: <1492460927.20241.1.camel@trentalancia.net> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 04/17/2017 04:28 PM, Guido Trentalancia via refpolicy wrote: > This patch adds three new file contexts for script executables > belonging to new Gnome applications (weather application and > sound recorder). > > Signed-off-by: Guido Trentalancia > --- > policy/modules/kernel/corecommands.fc | 3 +++ > 1 file changed, 3 insertions(+) > > --- a/policy/modules/kernel/corecommands.fc 2016-12-28 20:30:19.000000000 +0100 > +++ b/policy/modules/kernel/corecommands.fc 2017-04-17 22:18:40.644373042 +0200 > @@ -322,12 +322,15 @@ ifdef(`distro_gentoo',` > /usr/share/gedit-2/plugins/externaltools/tools(/.*)? gen_context(system_u:object_r:bin_t,s0) > /usr/share/gitolite/hooks/common/update -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/gitolite/hooks/gitolite-admin/post-update -- gen_context(system_u:object_r:bin_t,s0) > +/usr/share/gnome-sound-recorder/org.gnome.SoundRecorder -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/gnucash/finance-quote-check -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/gnucash/finance-quote-helper -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/hal/device-manager/hal-device-manager -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/hal/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0) > /usr/share/mc/extfs/.* -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/Modules/init(/.*)? gen_context(system_u:object_r:bin_t,s0) > +/usr/share/org.gnome.Weather/org.gnome.Weather.Application -- gen_context(system_u:object_r:bin_t,s0) > +/usr/share/org.gnome.Weather/org.gnome.Weather.BackgroundService -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/printconf/util/print\.py -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/PackageKit/pk-upgrade-distro\.sh -- gen_context(system_u:object_r:bin_t,s0) > /usr/share/PackageKit/helpers(/.*)? gen_context(system_u:object_r:bin_t,s0) Merged. I added escaping. -- Chris PeBenito