Skip to content

Commit

Permalink
Label all semanage store files in /etc as semanage_store_t
Browse files Browse the repository at this point in the history
/etc/selinux/targeted/tmp needs to have same file context as
/etc/selinux/targeted/active

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2323878
  • Loading branch information
bachradsusi committed Nov 5, 2024
1 parent 1b1476d commit 65fa5a9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/system/selinuxutil.fc
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
/etc/selinux/([^/]*/)?setrans\.conf -- gen_context(system_u:object_r:selinux_config_t,mls_systemhigh)
/etc/selinux/([^/]*/)?seusers -- gen_context(system_u:object_r:selinux_config_t,s0)
/etc/selinux/([^/]*/)?modules/(active|tmp|previous)(/.*)? gen_context(system_u:object_r:semanage_store_t,s0)
/etc/selinux/(minimum|mls|targeted)/active(/.*)? gen_context(system_u:object_r:semanage_store_t,s0)
/etc/selinux/(minimum|mls|targeted)/(active|tmp|previous)(/.*)? gen_context(system_u:object_r:semanage_store_t,s0)
/etc/selinux/([^/]*/)?modules/semanage\.read\.LOCK -- gen_context(system_u:object_r:semanage_read_lock_t,s0)
/etc/selinux/([^/]*/)?modules/semanage\.trans\.LOCK -- gen_context(system_u:object_r:semanage_trans_lock_t,s0)
/etc/selinux/([^/]*/)?users(/.*)? -- gen_context(system_u:object_r:selinux_config_t,s0)
Expand Down

0 comments on commit 65fa5a9

Please sign in to comment.