From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-839334-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id C275313888F for <garchives@archives.gentoo.org>; Sat, 10 Oct 2015 12:11:25 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6686521C029; Sat, 10 Oct 2015 12:11:15 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B5D2021C01F for <gentoo-commits@lists.gentoo.org>; Sat, 10 Oct 2015 12:11:13 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C1906340873 for <gentoo-commits@lists.gentoo.org>; Sat, 10 Oct 2015 12:11:12 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 78CBFDFD for <gentoo-commits@lists.gentoo.org>; Sat, 10 Oct 2015 12:11:08 +0000 (UTC) From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" <swift@gentoo.org> Message-ID: <1441165476.f52d0d3cdd127ac6a824b4724448aa985c6e102a.swift@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:swift commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/cgmanager.fc X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: swift X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: f52d0d3cdd127ac6a824b4724448aa985c6e102a X-VCS-Branch: swift Date: Sat, 10 Oct 2015 12:11:08 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 2cc65eb9-7123-4e8d-a733-7563f284df3e X-Archives-Hash: e9818403f9acb77f96074d545d51d362 commit: f52d0d3cdd127ac6a824b4724448aa985c6e102a Author: Jason Zaman <jason <AT> perfinion <DOT> com> AuthorDate: Wed Sep 2 03:44:36 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Wed Sep 2 03:44:36 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f52d0d3c cgmanager: add fcontexts for /run and cgroupfs sock policy/modules/contrib/cgmanager.fc | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/policy/modules/contrib/cgmanager.fc b/policy/modules/contrib/cgmanager.fc index 8ea4a46..17c6f88 100644 --- a/policy/modules/contrib/cgmanager.fc +++ b/policy/modules/contrib/cgmanager.fc @@ -1,3 +1,9 @@ -/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0) -/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0) -/usr/sbin/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgmanager -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgproxy -- gen_context(system_u:object_r:cgmanager_exec_t,s0) +/usr/sbin/cgm-release-agent -- gen_context(system_u:object_r:cgmanager_exec_t,s0) + +/sys/fs/cgroup/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_cgroup_t,s0) + +/var/run/cgmanager(/.*)? gen_context(system_u:object_r:cgmanager_run_t,s0) +/var/run/cgmanager.pid gen_context(system_u:object_r:cgmanager_run_t,s0) +/var/run/cgmanager/fs(/.*)? <<none>>