Skip to content

Commit

Permalink
Add file context entry for /usr/bin/fapolicyd
Browse files Browse the repository at this point in the history
To comply with the "Unify bin and sbin" Fedora Change [1],
file equivalency for the /bin, /sbin, and /usr/bin paths are
now set in selinux-policy. This requires follow-up changes
in DSP modules, too.

[1] https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
  • Loading branch information
zpytela committed Jun 20, 2024
1 parent 076b104 commit 8bf8095
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions fapolicyd.fc
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@

/usr/lib/systemd/system/fapolicyd.* -- gen_context(system_u:object_r:fapolicyd_unit_file_t,s0)

/usr/bin/fapolicyd -- gen_context(system_u:object_r:fapolicyd_exec_t,s0)
/usr/sbin/fapolicyd -- gen_context(system_u:object_r:fapolicyd_exec_t,s0)

/var/lib/fapolicyd(/.*)? gen_context(system_u:object_r:fapolicyd_var_lib_t,s0)
Expand Down

0 comments on commit 8bf8095

Please sign in to comment.