commit: 4b88828fafc5dd53c5b406a2409069883d8b078a
Author: Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Mon Jun 5 17:21:04 2017 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Jun 5 17:21:04 2017 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4b88828f
portage: add filetrans for go and hg src dirs
policy/modules/contrib/portage.fc | 1 +
policy/modules/contrib/portage.te | 2 ++
2 files changed, 3 insertions(+)
diff --git a/policy/modules/contrib/portage.fc
b/policy/modules/contrib/portage.fc
index e5479b34..7f6ab05b 100644
--- a/policy/modules/contrib/portage.fc
+++ b/policy/modules/contrib/portage.fc
@@ -24,6 +24,7 @@
/usr/portage/distfiles/cvs-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
/usr/portage/distfiles/egit-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
/usr/portage/distfiles/git.?-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
+/usr/portage/distfiles/go-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
/usr/portage/distfiles/hg-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
/usr/portage/distfiles/svn-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
diff --git a/policy/modules/contrib/portage.te
b/policy/modules/contrib/portage.te
index bf993155..9566409e 100644
--- a/policy/modules/contrib/portage.te
+++ b/policy/modules/contrib/portage.te
@@ -487,6 +487,8 @@ gen_tunable(portage_enable_test, false)
filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "cvs-src")
filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "egit-src") # git-2.eclass
filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "git3-src") # git-r3.eclass
+ filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "go-src")
+ filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "hg-src")
filetrans_pattern(portage_sandbox_t, portage_ebuild_t,
portage_srcrepo_t, dir, "svn-src")
# install-xattr does listxattr() which throws a lot of this