[selinux-policy: 2060/3172] trunk: Debian file context fix for xen from Russell Coker.
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 22:02:52 UTC 2010
commit b3eb124654fd825c5132f8f917479e916c58cfad
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Mon Nov 24 15:34:54 2008 +0000
trunk: Debian file context fix for xen from Russell Coker.
Changelog | 1 +
policy/modules/system/xen.fc | 7 +++++++
policy/modules/system/xen.te | 2 +-
3 files changed, 9 insertions(+), 1 deletions(-)
---
diff --git a/Changelog b/Changelog
index c359a33..ddd96dc 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Debian file context fix for xen from Russell Coker.
- Xserver MLS fix from Eamon Walsh.
- Add omapi port for dhcpcd.
- Deprecate per-role templates and rolemap support.
diff --git a/policy/modules/system/xen.fc b/policy/modules/system/xen.fc
index be99029..a36927d 100644
--- a/policy/modules/system/xen.fc
+++ b/policy/modules/system/xen.fc
@@ -2,10 +2,17 @@
/usr/bin/virsh -- gen_context(system_u:object_r:xm_exec_t,s0)
+ifdef(`distro_debian',`
+/usr/lib/xen-[^/]*/bin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0)
+/usr/lib/xen-[^/]*/bin/xend -- gen_context(system_u:object_r:xend_exec_t,s0)
+/usr/lib/xen-[^/]*/bin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0)
+/usr/lib/xen-[^/]*/bin/xm -- gen_context(system_u:object_r:xm_exec_t,s0)
+',`
/usr/sbin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0)
/usr/sbin/xend -- gen_context(system_u:object_r:xend_exec_t,s0)
/usr/sbin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0)
/usr/sbin/xm -- gen_context(system_u:object_r:xm_exec_t,s0)
+')
/var/lib/xen(/.*)? gen_context(system_u:object_r:xend_var_lib_t,s0)
/var/lib/xen/images(/.*)? gen_context(system_u:object_r:xen_image_t,s0)
diff --git a/policy/modules/system/xen.te b/policy/modules/system/xen.te
index 80caa8b..6ca1c42 100644
--- a/policy/modules/system/xen.te
+++ b/policy/modules/system/xen.te
@@ -1,5 +1,5 @@
-policy_module(xen, 1.7.1)
+policy_module(xen, 1.7.2)
########################################
#
More information about the scm-commits
mailing list