Gentoo Archives: gentoo-commits

From: Jason Zaman <gentoo@×××××××××.com>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:perfinion commit in: policy/modules/kernel/
Date: Sun, 31 Aug 2014 20:51:45
Message-Id: 1409509592.3a6d2a23dd689eaac41d3534c954c24e9c2dc3f2.perfinion@gentoo
1 commit: 3a6d2a23dd689eaac41d3534c954c24e9c2dc3f2
2 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
3 AuthorDate: Sun Aug 31 18:26:32 2014 +0000
4 Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com>
5 CommitDate: Sun Aug 31 18:26:32 2014 +0000
6 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=3a6d2a23
7
8 Python-exec wrappers has scripts in specific location, mark those as bin_t
9
10 ---
11 policy/modules/kernel/corecommands.fc | 3 +++
12 1 file changed, 3 insertions(+)
13
14 diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
15 index 52cb3ee..7e1b58c 100644
16 --- a/policy/modules/kernel/corecommands.fc
17 +++ b/policy/modules/kernel/corecommands.fc
18 @@ -422,5 +422,8 @@ ifdef(`distro_suse',`
19 ')
20
21 ifdef(`distro_gentoo',`
22 +/usr/lib/python-exec/python-exec2 -- gen_context(system_u:object_r:bin_t,s0)
23 +/usr/lib/python-exec/python.*/.* -- gen_context(system_u:object_r:bin_t,s0)
24 +
25 /usr/lib/xfce4/notifyd/xfce4-notifyd -- gen_context(system_u:object_r:bin_t,s0)
26 ')