[selinux-policy: 221/3172] fix ordering and put in var_lib_t

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:24:02 UTC 2010


commit dd31631500a073a8b66e62ad16f755bd27aafba6
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri May 27 20:29:17 2005 +0000

    fix ordering and put in var_lib_t

 refpolicy/policy/modules/system/files.fc |   15 +++++++++------
 1 files changed, 9 insertions(+), 6 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/files.fc b/refpolicy/policy/modules/system/files.fc
index 72f6018..541e4ed 100644
--- a/refpolicy/policy/modules/system/files.fc
+++ b/refpolicy/policy/modules/system/files.fc
@@ -119,8 +119,13 @@ ifdef(`distro_gentoo', `
 /usr/inclu.e(/.*)?		context_template(system_u:object_r:usr_t,s0)
 
 /usr/local/\.journal		<<none>>
+
+/usr/local/etc(/.*)?		context_template(system_u:object_r:etc_t,s0)
+
 /usr/local/lost\+found(/.*)?	context_template(system_u:object_r:lost_found_t,s0)
 
+/usr/local/src(/.*)?		context_template(system_u:object_r:src_t,s0)
+
 /usr/share(/.*)?/lib(64)?(/.*)?	context_template(system_u:object_r:usr_t,s0)
 
 /usr/src(/.*)?			context_template(system_u:object_r:src_t,s0)
@@ -134,20 +139,18 @@ ifdef(`distro_gentoo', `
 /var(/.*)?			context_template(system_u:object_r:var_t,s0)
 /var/\.journal			<<none>>
 
-/var/lost\+found(/.*)?		context_template(system_u:object_r:lost_found_t,s0)
-
 /var/db/.*\.db		--	context_template(system_u:object_r:etc_t,s0)
 
 /var/ftp/etc(/.*)?		context_template(system_u:object_r:etc_t,s0)
 
-/var/lib/nfs/rpc_pipefs(/.*)?	<<none>>
-
-/usr/local/etc(/.*)?		context_template(system_u:object_r:etc_t,s0)
+/var/lib(/.*)?			context_template(system_u:object_r:var_lib_t,s0)
 
-/usr/local/src(/.*)?		context_template(system_u:object_r:src_t,s0)
+/var/lib/nfs/rpc_pipefs(/.*)?	<<none>>
 
 /var/lock(/.*)?			context_template(system_u:object_r:var_lock_t,s0)
 
+/var/lost\+found(/.*)?		context_template(system_u:object_r:lost_found_t,s0)
+
 /var/run(/.*)?			context_template(system_u:object_r:var_run_t,s0)
 /var/run/.*\.*pid		<<none>>
 


More information about the scm-commits mailing list