commit: 4f4ebd1c5cb233511f02d9e5f33fd20cf70a1810 Author: Kenton Groombridge <concord <AT> gentoo <DOT> org> AuthorDate: Sat Nov 13 17:41:37 2021 +0000 Commit: Kenton Groombridge <concord <AT> gentoo <DOT> org> CommitDate: Mon Jun 6 15:07:33 2022 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4f4ebd1c
miscfiles: add file context for /usr/share/ca-certificates Signed-off-by: Kenton Groombridge <me <AT> concord.sh> policy/modules/system/miscfiles.fc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc index 87a0cae1..3fa37471 100644 --- a/policy/modules/system/miscfiles.fc +++ b/policy/modules/system/miscfiles.fc @@ -58,6 +58,9 @@ ifdef(`distro_redhat',` /usr/share/ssl/certs(/.*)? gen_context(system_u:object_r:cert_t,s0) /usr/share/ssl/private(/.*)? gen_context(system_u:object_r:cert_t,s0) +ifdef(`distro_gentoo',` +/usr/share/ca-certificates(/.*)? gen_context(system_u:object_r:cert_t,s0) +') /usr/X11R6/lib/X11/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
