commit:     023d49ed2fe5b7eb20e3b24a786e54993132ed18
Author:     David Sugar <dsugar <AT> tresys <DOT> com>
AuthorDate: Wed Nov 29 21:14:17 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Tue Dec 12 07:06:26 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=023d49ed

RHEL 7.4 has moved the location of /usr/libexec/sesh to /usr/libexec/sudo/sesh

Update file context to include label for new location.
See https://bugzilla.redhat.com/show_bug.cgi?id=1480791

Signed-off-by: Dave Sugar <dsugar <AT> tresys.com>

 policy/modules/kernel/corecommands.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/corecommands.fc 
b/policy/modules/kernel/corecommands.fc
index 0d2fd27f..6409fcdd 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -265,6 +265,7 @@ ifdef(`distro_gentoo',`
 /usr/libexec(/.*)?                     gen_context(system_u:object_r:bin_t,s0)
 /usr/libexec/git-core/git-shell        --      
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/libexec/sesh              --      
gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/libexec/sudo/sesh --      gen_context(system_u:object_r:shell_exec_t,s0)
 
 /usr/libexec/openssh/sftp-server --    gen_context(system_u:object_r:bin_t,s0)
 

Reply via email to