commit: d98d2b28806a778ca2edfab26a5d81a2e79e8e9a Author: Nicolas Iooss <nicolas.iooss <AT> m4x <DOT> org> AuthorDate: Sat Jul 5 16:42:29 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Tue Jul 29 14:05:26 2014 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d98d2b28
ftp: fix labels in /var/lock/subsys/ In the pattern "/var/lock/subsys/*.ftpd", the star is applied to the slash instead to the dot. This means that the pattern matches these files: * "Xftpd" in "/var/lock/subsys/" (where X is whatever character) * "subsysXftpd" in "/var/lock/" (where X is whatever character) "/var/lock/subsys/vsftpd", which has been used by vsftpd, is therefore not matched by the pattern. As "*." looks like a typo, this patch replaces it with ".*". --- policy/modules/contrib/ftp.fc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/contrib/ftp.fc b/policy/modules/contrib/ftp.fc index ddb75c1..fa132af 100644 --- a/policy/modules/contrib/ftp.fc +++ b/policy/modules/contrib/ftp.fc @@ -19,7 +19,7 @@ /usr/libexec/webmin/vsftpd/webalizer/xfer_log -- gen_context(system_u:object_r:xferlog_t,s0) -/var/lock/subsys/*.ftpd -- gen_context(system_u:object_r:ftpd_lock_t,s0) +/var/lock/subsys/.*ftpd -- gen_context(system_u:object_r:ftpd_lock_t,s0) /var/log/muddleftpd\.log.* -- gen_context(system_u:object_r:xferlog_t,s0) /var/log/proftpd(/.*)? gen_context(system_u:object_r:xferlog_t,s0)
