Gentoo Archives: gentoo-commits

From: Kenton Groombridge <concord@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:concord-dev commit in: policy/modules/system/
Date: Mon, 06 Jun 2022 15:14:21
Message-Id: 1654528392.a9c2b478b7d9d252301d0da8365ac28c1c4c240c.concord@gentoo
1 commit: a9c2b478b7d9d252301d0da8365ac28c1c4c240c
2 Author: Kenton Groombridge <concord <AT> gentoo <DOT> org>
3 AuthorDate: Sat Nov 13 17:41:37 2021 +0000
4 Commit: Kenton Groombridge <concord <AT> gentoo <DOT> org>
5 CommitDate: Mon Jun 6 15:13:12 2022 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a9c2b478
7
8 miscfiles: add file context for /usr/share/ca-certificates
9
10 Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
11
12 policy/modules/system/miscfiles.fc | 3 +++
13 1 file changed, 3 insertions(+)
14
15 diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
16 index 87a0cae1..3fa37471 100644
17 --- a/policy/modules/system/miscfiles.fc
18 +++ b/policy/modules/system/miscfiles.fc
19 @@ -58,6 +58,9 @@ ifdef(`distro_redhat',`
20
21 /usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0)
22 /usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0)
23 +ifdef(`distro_gentoo',`
24 +/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0)
25 +')
26
27 /usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)