commit:     4cdea0f683f332134f3f93d79099f71d79d5f718
Author:     Luis Ressel <aranea <AT> aixah <DOT> de>
AuthorDate: Sat Aug  8 11:50:28 2015 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Thu Aug 27 19:05:48 2015 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4cdea0f6

Mark APR build scripts as bin_t

I don't know why those are in /usr/share/build-1/ instead of
/usr/share/apr-0/build/ here, but it doesn't appear to be
Gentoo-specific.

 policy/modules/kernel/corecommands.fc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/kernel/corecommands.fc 
b/policy/modules/kernel/corecommands.fc
index 0c4a15b..f465e43 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -292,6 +292,8 @@ ifdef(`distro_gentoo',`
 /usr/share/ajaxterm/qweb.py.* --       gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/[^/]+\.sh --    gen_context(system_u:object_r:bin_t,s0)
 /usr/share/apr-0/build/libtool --      gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/[^/]+\.sh   --      gen_context(system_u:object_r:bin_t,s0)
+/usr/share/build-1/libtool     --      gen_context(system_u:object_r:bin_t,s0)
 /usr/share/build-1/mkdir.sh    --      gen_context(system_u:object_r:bin_t,s0)
 /usr/share/dayplanner/dayplanner --    gen_context(system_u:object_r:bin_t,s0)
 /usr/share/debconf/.+          --      gen_context(system_u:object_r:bin_t,s0)

Reply via email to