commit: d46331160bf316a8b836c7730177b046599f6dd2 Author: Nicolas Iooss <nicolas.iooss <AT> m4x <DOT> org> AuthorDate: Sun Sep 7 21:32:21 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sat Sep 13 09:16:50 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d4633116
Allow loadkeys to read usr_t files loadeys loads a keymap from files in /usr. Debian console-data package installs keymaps in /usr/share/keymaps [1]. Arch Linux kbd package installs keymaps in /usr/share/kbd/keymaps [2]. [1] https://packages.debian.org/sid/all/console-data/filelist [2] https://www.archlinux.org/packages/core/x86_64/kbd/files/ --- policy/modules/contrib/loadkeys.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/contrib/loadkeys.te index d2f4643..72ba702 100644 --- a/policy/modules/contrib/loadkeys.te +++ b/policy/modules/contrib/loadkeys.te @@ -27,6 +27,8 @@ corecmd_exec_shell(loadkeys_t) files_read_etc_files(loadkeys_t) files_read_etc_runtime_files(loadkeys_t) +# keymap files are in /usr/share/keymaps or /usr/share/kbd/keymaps +files_read_usr_files(loadkeys_t) term_dontaudit_use_console(loadkeys_t) term_use_unallocated_ttys(loadkeys_t)
