1 |
commit: 1682e5c2811be74ff6fb847d878e129e3dbb7214 |
2 |
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
3 |
AuthorDate: Sat Nov 22 17:32:37 2014 +0000 |
4 |
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Nov 22 17:32:37 2014 +0000 |
6 |
URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=1682e5c2 |
7 |
|
8 |
Move Portage bin definition to portage module (core filedefs can be in module in Gentoo) |
9 |
|
10 |
--- |
11 |
policy/modules/contrib/portage.fc | 1 + |
12 |
policy/modules/kernel/corecommands.fc | 2 -- |
13 |
2 files changed, 1 insertion(+), 2 deletions(-) |
14 |
|
15 |
diff --git a/policy/modules/contrib/portage.fc b/policy/modules/contrib/portage.fc |
16 |
index 2eaa62c..119043b 100644 |
17 |
--- a/policy/modules/contrib/portage.fc |
18 |
+++ b/policy/modules/contrib/portage.fc |
19 |
@@ -2,6 +2,7 @@ |
20 |
/etc/make\.globals -- gen_context(system_u:object_r:portage_conf_t,s0) |
21 |
/etc/make\.profile -l gen_context(system_u:object_r:portage_conf_t,s0) |
22 |
/etc/portage(/.*)? gen_context(system_u:object_r:portage_conf_t,s0) |
23 |
+/etc/portage/bin(/.*)? -- gen_context(system_u:object_r:bin_t,s0) |
24 |
/etc/portage/gpg(/.*)? gen_context(system_u:object_r:portage_gpg_t,s0) |
25 |
|
26 |
/usr/bin/gcc-config -- gen_context(system_u:object_r:gcc_config_exec_t,s0) |
27 |
|
28 |
diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc |
29 |
index 7e1b58c..58b5a6e 100644 |
30 |
--- a/policy/modules/kernel/corecommands.fc |
31 |
+++ b/policy/modules/kernel/corecommands.fc |
32 |
@@ -89,8 +89,6 @@ ifdef(`distro_redhat',` |
33 |
/etc/pm/power\.d(/.*)? gen_context(system_u:object_r:bin_t,s0) |
34 |
/etc/pm/sleep\.d(/.*)? gen_context(system_u:object_r:bin_t,s0) |
35 |
|
36 |
-/etc/portage/bin(/.*)? -- gen_context(system_u:object_r:bin_t,s0) |
37 |
- |
38 |
/etc/ppp/ip-down\..* -- gen_context(system_u:object_r:bin_t,s0) |
39 |
/etc/ppp/ip-up\..* -- gen_context(system_u:object_r:bin_t,s0) |
40 |
/etc/ppp/ipv6-up\..* -- gen_context(system_u:object_r:bin_t,s0) |