From e0117a18657dad077305125bc42bc25c8cc1d9a1 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Thu, 20 Jun 2024 11:33:17 +0200 Subject: [PATCH] Add file context entries for /usr/bin/usbguard-daemon and /usr/bin/usbguard-dbus To comply with the "Unify bin and sbin" Fedora Change [1], file equivalency for the /bin, /sbin, and /usr/sbin paths are now set in selinux-policy to /usr/bin. This requires follow-up changes in DSP modules, too. [1] https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin --- usbguard.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/usbguard.fc b/usbguard.fc index d8cfa45..3904962 100644 --- a/usbguard.fc +++ b/usbguard.fc @@ -18,7 +18,9 @@ /etc/usbguard/rules\.conf -- gen_context(system_u:object_r:usbguard_rules_t,s0) /etc/usbguard(/.*)? gen_context(system_u:object_r:usbguard_conf_t,s0) /usr/lib/systemd/system/usbguard.* -- gen_context(system_u:object_r:usbguard_unit_file_t,s0) +/usr/bin/usbguard-daemon -- gen_context(system_u:object_r:usbguard_exec_t,s0) /usr/sbin/usbguard-daemon -- gen_context(system_u:object_r:usbguard_exec_t,s0) +/usr/bin/usbguard-dbus -- gen_context(system_u:object_r:usbguard_exec_t,s0) /usr/sbin/usbguard-dbus -- gen_context(system_u:object_r:usbguard_exec_t,s0) /var/log/usbguard(/.*)? gen_context(system_u:object_r:usbguard_log_t,s0) /run/usbguard.* -- gen_context(system_u:object_r:usbguard_var_run_t,s0)