Skip to content

Commit

Permalink
Add file context entries for /usr/bin/usbguard-daemon and /usr/bin/us…
Browse files Browse the repository at this point in the history
…bguard-dbus

To comply with the "Unify bin and sbin" Fedora Change [1],
file equivalency for the /bin, /sbin, and /usr/sbin paths
are now set in selinux-policy to /usr/bin.
This requires follow-up changes in DSP modules, too.

[1] https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
  • Loading branch information
zpytela committed Jun 20, 2024
1 parent e404208 commit e0117a1
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions usbguard.fc
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,9 @@
/etc/usbguard/rules\.conf -- gen_context(system_u:object_r:usbguard_rules_t,s0)
/etc/usbguard(/.*)? gen_context(system_u:object_r:usbguard_conf_t,s0)
/usr/lib/systemd/system/usbguard.* -- gen_context(system_u:object_r:usbguard_unit_file_t,s0)
/usr/bin/usbguard-daemon -- gen_context(system_u:object_r:usbguard_exec_t,s0)
/usr/sbin/usbguard-daemon -- gen_context(system_u:object_r:usbguard_exec_t,s0)
/usr/bin/usbguard-dbus -- gen_context(system_u:object_r:usbguard_exec_t,s0)
/usr/sbin/usbguard-dbus -- gen_context(system_u:object_r:usbguard_exec_t,s0)
/var/log/usbguard(/.*)? gen_context(system_u:object_r:usbguard_log_t,s0)
/run/usbguard.* -- gen_context(system_u:object_r:usbguard_var_run_t,s0)

0 comments on commit e0117a1

Please sign in to comment.