commit: b70c273305b2afca822fe624279ddfad28ac550a Author: David Sugar <dsugar <AT> tresys <DOT> com> AuthorDate: Fri Sep 8 17:50:24 2017 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sat Sep 9 02:56:59 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b70c2733
Label RHEL specific systemd binaries Label RHEL specific systemd binaries /usr/lib/systemd/rhel* as initrc_exec_t. Now in the proper location. Signed-off-by: Dave Sugar <dsugar <AT> tresys.com> policy/modules/system/init.fc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc index 0cc3cd8f..8a8ce871 100644 --- a/policy/modules/system/init.fc +++ b/policy/modules/system/init.fc @@ -38,6 +38,10 @@ ifdef(`distro_gentoo', ` /usr/lib/rc/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0) ') +ifdef(`distro_redhat',` +/usr/lib/systemd/rhel[^/]* -- gen_context(system_u:object_r:initrc_exec_t,s0) +') + /usr/libexec/dcc/start-.* -- gen_context(system_u:object_r:initrc_exec_t,s0) /usr/libexec/dcc/stop-.* -- gen_context(system_u:object_r:initrc_exec_t,s0)
