2017-12-11 04:04:36

by dahchanson

Subject: [refpolicy] [PATCH] Allow rpm to relabel files at all levels

This patch adds MLS relabel ability to rpm per the previous email request: http://oss.tresys.com/pipermail/refpolicy/2016-July/008038.html

Signed-off-by: Chad Hanson <[email protected]>
---
rpm.te | 1 +
1 file changed, 1 insertion(+)

diff --git a/rpm.te b/rpm.te
index ba24d24..221f944 100644
--- a/rpm.te
+++ b/rpm.te
@@ -174,6 +174,7 @@ fs_search_auto_mountpoints(rpm_t)

mls_file_read_all_levels(rpm_t)
mls_file_write_all_levels(rpm_t)
+mls_file_relabel(rpm_t)
mls_file_upgrade(rpm_t)
mls_file_downgrade(rpm_t)

--
2.14.1

2017-12-13 01:09:40

by Chris PeBenito

Subject: [refpolicy] [PATCH] Allow rpm to relabel files at all levels

On 12/10/2017 11:04 PM, Chad Hanson via refpolicy wrote:
> This patch adds MLS relabel ability to rpm per the previous email request: http://oss.tresys.com/pipermail/refpolicy/2016-July/008038.html
>
> Signed-off-by: Chad Hanson <[email protected]>
> ---
> rpm.te | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/rpm.te b/rpm.te
> index ba24d24..221f944 100644
> --- a/rpm.te
> +++ b/rpm.te
> @@ -174,6 +174,7 @@ fs_search_auto_mountpoints(rpm_t)
>
> mls_file_read_all_levels(rpm_t)
> mls_file_write_all_levels(rpm_t)
> +mls_file_relabel(rpm_t)
> mls_file_upgrade(rpm_t)
> mls_file_downgrade(rpm_t)

Merged.

--
Chris PeBenito