From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 0FE0A1393DD for ; Tue, 19 Aug 2014 12:18:46 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 826F4E09F9; Tue, 19 Aug 2014 12:18:03 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id F2D1DE0AB1 for ; Tue, 19 Aug 2014 12:17:44 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id DB99134032B for ; Tue, 19 Aug 2014 12:17:43 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id C05123BFF for ; Tue, 19 Aug 2014 09:19:40 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1408096677.4db655ea4fcd44ce33dffd3ea7655bc824ddda90.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/fstools.fc X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 4db655ea4fcd44ce33dffd3ea7655bc824ddda90 X-VCS-Branch: master Date: Tue, 19 Aug 2014 09:19:40 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 41538a44-b43e-4912-9d8e-af2460eadf3d X-Archives-Hash: 6041497cb8c3112fef6015875c36fc91 commit: 4db655ea4fcd44ce33dffd3ea7655bc824ddda90 Author: Luis Ressel aixah de> AuthorDate: Mon Aug 11 12:31:33 2014 +0000 Commit: Jason Zaman perfinion com> CommitDate: Fri Aug 15 09:57:57 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=4db655ea Label /usr/sbin/{add, del}part as fsadm_exec_t These are seldomly-used tools from the util-linux package. Please check if they are located in /sbin instead of /usr/sbin on other distributions. Signed-off-by: Luis Ressel aixah.de> --- policy/modules/system/fstools.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc index bd4066e..aa1d594 100644 --- a/policy/modules/system/fstools.fc +++ b/policy/modules/system/fstools.fc @@ -48,7 +48,9 @@ /usr/bin/scsi_unique_id -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/bin/syslinux -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/addpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/clubufflush -- gen_context(system_u:object_r:fsadm_exec_t,s0) +/usr/sbin/delpart -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fatsort -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)