2016-12-03 23:30:32

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH] Add debian path for fprintd daemon

From: Laurent Bigonville <[email protected]>

Add debian path for fprintd daemon (/usr/lib/fprintd/fprintd)
---
fprintd.fc | 2 ++
1 file changed, 2 insertions(+)

diff --git a/fprintd.fc b/fprintd.fc
index d861e88..81317ea 100644
--- a/fprintd.fc
+++ b/fprintd.fc
@@ -1,3 +1,5 @@
+/usr/lib/fprintd/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
+
/usr/libexec/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)

/var/lib/fprint(/.*)? gen_context(system_u:object_r:fprintd_var_lib_t,s0)
--
2.10.2


2016-12-04 12:01:37

by guido

[permalink] [raw]
Subject: [refpolicy] [PATCH] Add debian path for fprintd daemon

Hello!

I think the file context that you want to add should be enclosed within an ifdef block specific to your distribution.

Guido

On the 4th of December 2016 00:30:32 CET, Laurent Bigonville via refpolicy <[email protected]> wrote:
>From: Laurent Bigonville <[email protected]>
>
>Add debian path for fprintd daemon (/usr/lib/fprintd/fprintd)
>---
> fprintd.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
>diff --git a/fprintd.fc b/fprintd.fc
>index d861e88..81317ea 100644
>--- a/fprintd.fc
>+++ b/fprintd.fc
>@@ -1,3 +1,5 @@
>+/usr/lib/fprintd/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
>+
>/usr/libexec/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
>
>/var/lib/fprint(/.*)? gen_context(system_u:object_r:fprintd_var_lib_t,s0)

2016-12-04 17:12:14

by Dominick Grift

[permalink] [raw]
Subject: [refpolicy] [PATCH] Add debian path for fprintd daemon

On 12/04/2016 01:01 PM, Guido Trentalancia via refpolicy wrote:
> Hello!
>
> I think the file context that you want to add should be enclosed within an ifdef block specific to your distribution.
>

I believe we decided some time ago to no longer do that. Besides that
would inevitably favor one implementation over another.

> Guido
>
> On the 4th of December 2016 00:30:32 CET, Laurent Bigonville via refpolicy <[email protected]> wrote:
>> From: Laurent Bigonville <[email protected]>
>>
>> Add debian path for fprintd daemon (/usr/lib/fprintd/fprintd)
>> ---
>> fprintd.fc | 2 ++
>> 1 file changed, 2 insertions(+)
>>
>> diff --git a/fprintd.fc b/fprintd.fc
>> index d861e88..81317ea 100644
>> --- a/fprintd.fc
>> +++ b/fprintd.fc
>> @@ -1,3 +1,5 @@
>> +/usr/lib/fprintd/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
>> +
>> /usr/libexec/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
>>
>> /var/lib/fprint(/.*)? gen_context(system_u:object_r:fprintd_var_lib_t,s0)
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
>
g

--
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 648 bytes
Desc: OpenPGP digital signature
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20161204/3c477643/attachment.bin

2016-12-04 17:48:48

by Chris PeBenito

[permalink] [raw]
Subject: [refpolicy] [PATCH] Add debian path for fprintd daemon

On 12/03/16 18:30, Laurent Bigonville via refpolicy wrote:
> From: Laurent Bigonville <[email protected]>
>
> Add debian path for fprintd daemon (/usr/lib/fprintd/fprintd)
> ---
> fprintd.fc | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/fprintd.fc b/fprintd.fc
> index d861e88..81317ea 100644
> --- a/fprintd.fc
> +++ b/fprintd.fc
> @@ -1,3 +1,5 @@
> +/usr/lib/fprintd/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
> +
> /usr/libexec/fprintd -- gen_context(system_u:object_r:fprintd_exec_t,s0)
>
> /var/lib/fprint(/.*)? gen_context(system_u:object_r:fprintd_var_lib_t,s0)

Merged.

--
Chris PeBenito