commit: 6be5335cb8c819f707e1424cc22d5a2cbc0daa4d
Author: Nicolas Iooss <nicolas.iooss <AT> m4x <DOT> org>
AuthorDate: Sat Mar 19 09:30:42 2016 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Wed Mar 23 17:53:49 2016 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6be5335c
Label system-config-printer applet properly on Arch Linux
It is used by system-config-printer, as shown by these AVC denials:
avc: denied { execute } for pid=1061 comm="system-config-p"
name="applet.py" dev="dm-0" ino=9568316
scontext=sysadm_u:sysadm_r:sysadm_t tcontext=system_u:object_r:usr_t
tclass=file permissive=1
avc: denied { execute_no_trans } for pid=1061
comm="system-config-p"
path="/usr/share/system-config-printer/applet.py" dev="dm-0"
ino=9568316 scontext=sysadm_u:sysadm_r:sysadm_t
tcontext=system_u:object_r:usr_t tclass=file permissive=1
policy/modules/kernel/corecommands.fc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/kernel/corecommands.fc
b/policy/modules/kernel/corecommands.fc
index db76963..320f040 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -326,6 +326,7 @@ ifdef(`distro_gentoo',`
/usr/share/selinux/devel/policygentool --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/smolt/client(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/share/spamassassin/sa-update\.cron gen_context(system_u:object_r:bin_t,s0)
+/usr/share/system-config-printer/applet\.py --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/texmf/web2c/mktexdir --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/texmf-dist/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0)
/usr/share/turboprint/lib(/.*)? --
gen_context(system_u:object_r:bin_t,s0)
@@ -384,7 +385,6 @@ ifdef(`distro_redhat', `
/usr/share/system-config-network/neat-control\.py --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-nfs/nfs-export\.py --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-nfs/system-config-nfs\.py --
gen_context(system_u:object_r:bin_t,s0)
-/usr/share/system-config-printer/applet\.py --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-rootpassword/system-config-rootpassword --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-samba/system-config-samba\.py --
gen_context(system_u:object_r:bin_t,s0)
/usr/share/system-config-securitylevel/system-config-securitylevel\.py --
gen_context(system_u:object_r:bin_t,s0)
