commit: ca1a8970f1e7ae224de8001e460f232815eeb187 Author: Kenton Groombridge <me <AT> concord <DOT> sh> AuthorDate: Wed Dec 7 15:55:39 2022 +0000 Commit: Kenton Groombridge <concord <AT> gentoo <DOT> org> CommitDate: Tue Dec 13 19:07:44 2022 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=ca1a8970
sasl: add filecon for /etc/sasl2 keytab Signed-off-by: Kenton Groombridge <me <AT> concord.sh> Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org> policy/modules/services/sasl.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/services/sasl.fc b/policy/modules/services/sasl.fc index 06ee9710c..8165ee72a 100644 --- a/policy/modules/services/sasl.fc +++ b/policy/modules/services/sasl.fc @@ -1,5 +1,7 @@ /etc/rc\.d/init\.d/sasl -- gen_context(system_u:object_r:saslauthd_initrc_exec_t,s0) +/etc/sasl2(/.*)? gen_context(system_u:object_r:saslauthd_keytab_t,s0) + /usr/bin/saslauthd -- gen_context(system_u:object_r:saslauthd_exec_t,s0) /usr/sbin/saslauthd -- gen_context(system_u:object_r:saslauthd_exec_t,s0)
