diff options
| author | John Turner <jturner.usa@gmail.com> | 2025-08-23 20:21:05 -0400 |
|---|---|---|
| committer | John Turner <jturner.usa@gmail.com> | 2025-08-23 20:21:05 -0400 |
| commit | 2e08459e9269ecfe251da2e15d5a3f5f0fd6f13e (patch) | |
| tree | 6ce14f2a38913b7c56401e15613f7976a46ce9fa | |
| parent | 99c9dafa7de761aeab18dc95a13f947c9d920c68 (diff) | |
| download | selinux-policy-2e08459e9269ecfe251da2e15d5a3f5f0fd6f13e.tar.gz | |
move "exec" out of misc.cil
| -rw-r--r-- | src/file/datafile/execfile.cil | 20 | ||||
| -rw-r--r-- | src/misc.cil | 19 |
2 files changed, 18 insertions, 21 deletions
diff --git a/src/file/datafile/execfile.cil b/src/file/datafile/execfile.cil index ef13723..afd19e3 100644 --- a/src/file/datafile/execfile.cil +++ b/src/file/datafile/execfile.cil @@ -2,10 +2,26 @@ ;; SPDX-License-Identifier: Unlicense (block exec - + (macro data_file_type_transition_file ((type ARG1)) + (call .data.file_type_transition + (ARG1 file dir "bin")) + (call .data.file_type_transition + (ARG1 file dir "libexec")) + (call .data.file_type_transition + (ARG1 file dir "sbin"))) + + (macro root_file_type_transition_file ((type ARG1)) + (call .root.file_type_transition + (ARG1 file dir "bin")) + (call .root.file_type_transition + (ARG1 file dir "sbin"))) + (blockinherit .file.exec.template) (blockinherit .file.macro_template_dirs) - (blockinherit .file.macro_template_lnk_files)) + (blockinherit .file.macro_template_lnk_files) + + (filecon "/usr/bin" dir file_context) + (filecon "/usr/bin/.*" any file_context)) (in file diff --git a/src/misc.cil b/src/misc.cil index b0d5736..dca7dcf 100644 --- a/src/misc.cil +++ b/src/misc.cil @@ -3,25 +3,6 @@ (sidcontext init (sys.id sys.role sys.subj sys.lowlow)) ;; userspace_initial_context -(in exec - - (filecon "/usr/bin" dir file_context) - (filecon "/usr/bin/.*" any file_context) - - (macro data_file_type_transition_file ((type ARG1)) - (call .data.file_type_transition - (ARG1 file dir "bin")) - (call .data.file_type_transition - (ARG1 file dir "libexec")) - (call .data.file_type_transition - (ARG1 file dir "sbin"))) - - (macro root_file_type_transition_file ((type ARG1)) - (call .root.file_type_transition - (ARG1 file dir "bin")) - (call .root.file_type_transition - (ARG1 file dir "sbin")))) - (in file.run (call .xattr.associate_fs (typeattr))) |