commit: f52d0d3cdd127ac6a824b4724448aa985c6e102a Author: Jason Zaman <jason <AT> perfinion <DOT> com> AuthorDate: Wed Sep 2 03:44:36 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Wed Sep 2 03:44:36 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f52d0d3c
cgmanager: add fcontexts for /run and cgroupfs sock policy/modules/contrib/cgmanager.fc | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/policy/modules/contrib/cgmanager.fc b/policy/modules/contrib/cgmanager.fc index 8ea4a46..17c6f88 100644 --- a/policy/modules/contrib/cgmanager.fc +++ b/policy/modules/contrib/cgmanager.fc @@ -1,3 +1,9 @@ -/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0) -/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0) -/usr/sbin/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0) + +/sys/fs/cgroup/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_cgroup_t,s0) + +/var/run/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_run_t,s0) +/var/run/cgmanager.pid gen_context(system_u:object_r:cgmanager_run_t,s0) +/var/run/cgmanager/fs(/.*)? <<none>>
