commit: 0f73a5dab844d2685837f1bb41976c74f7c20284
Author: Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Tue Sep 2 23:13:14 2025 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Tue Sep 2 23:13:45 2025 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0f73a5da
dpkg: Allow dpkg scripts to relabel policy
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/modules/admin/dpkg.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/admin/dpkg.te b/policy/modules/admin/dpkg.te
index 14942a5ea..c6f3380b5 100644
--- a/policy/modules/admin/dpkg.te
+++ b/policy/modules/admin/dpkg.te
@@ -398,4 +398,5 @@ optional_policy(`
ifdef(`distro_gentoo',`
# Moved out of files_relabel_non_auth_files as it cannot be used in
tunable_policy otherwise
seutil_relabelto_bin_policy(dpkg_t)
+ seutil_relabelto_bin_policy(dpkg_script_t)
')
