On 02.06.2018 13:48, Norbert Preining wrote: Hi,
> Sure enough the kernel does, but based on a role set that is shipped > with Debian. I'm quite sure (near to 100%) that the kernel does not > contain rules about tetex!!! > > So the question is who/what did set up these rules, it was none of us. > AFAICT it is in the upstream code of refpolicy (Source package). policy/modules/system/miscfiles.te:type tetex_data_t; policy/modules/system/miscfiles.te:files_tmp_file(tetex_data_t) policy/modules/system/miscfiles.fc:/var/lib/texmf(/.*)? gen_context(system_u:object_r:tetex_data_t,s0) policy/modules/system/miscfiles.fc:/var/cache/fonts(/.*)? gen_context(system_u:object_r:tetex_data_t,s0) etc. H. -- sigfault #206401 http://counter.li.org
