commit: 717d10b31cce2a5c92950c480444205a3c9ab839 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Sat Nov 1 17:58:15 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sat Nov 1 17:58:15 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=717d10b3
Emerge is also handled by python-exec --- policy/modules/contrib/portage.fc | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/policy/modules/contrib/portage.fc b/policy/modules/contrib/portage.fc index cc65c01..2eaa62c 100644 --- a/policy/modules/contrib/portage.fc +++ b/policy/modules/contrib/portage.fc @@ -18,6 +18,7 @@ /usr/lib/portage/bin/regenworld -- gen_context(system_u:object_r:portage_exec_t,s0) /usr/lib/portage/bin/sandbox -- gen_context(system_u:object_r:portage_exec_t,s0) + /usr/portage(/.*)? gen_context(system_u:object_r:portage_ebuild_t,s0) /usr/portage/distfiles/cvs-src(/.*)? gen_context(system_u:object_r:portage_srcrepo_t,s0) /usr/portage/distfiles/egit-src(/.*)? gen_context(system_u:object_r:portage_srcrepo_t,s0) @@ -37,7 +38,8 @@ /var/tmp/portage-pkg(/.*)? gen_context(system_u:object_r:portage_tmp_t,s0) ifdef(`distro_gentoo',` -/usr/lib/python-exec/python[0-9]?\.[0-9]?/glsa-check -- gen_context(system_u:object_r:portage_exec_t,s0) -/usr/lib/python-exec/python[0-9].\.[0-9]?/layman -- gen_context(system_u:object_r:portage_fetch_exec_t,s0) +/usr/lib/python-exec/python[0-9]\.[0-9]*/glsa-check -- gen_context(system_u:object_r:portage_exec_t,s0) +/usr/lib/python-exec/python[0-9]\.[0-9]*/layman -- gen_context(system_u:object_r:portage_fetch_exec_t,s0) +/usr/lib/python-exec/python[0-9]\.[0-9]*/emerge -- gen_context(system_u:object_r:portage_exec_t,s0) /var/log/sandbox(/.*)? gen_context(system_u:object_r:portage_log_t,s0) ')
