ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-12-25 05:48:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

etc: SELinux: Label guix-daemon executable in profile.

Browse source 
* etc/guix-daemon.cil.in: Add file rule for "guix-daemon" in current-guix
profile.
This commit is contained in:
Ricardo Wurmus 2022-12-23 16:44:58 +01:00
parent ef060487a2
commit f28d792719
No known key found for this signature in database
GPG key ID: 197A5888235FACAC
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
etc/guix-daemon.cil.in
View file

@ -447,6 +447,8 @@
any (unconfined_u object_r guix_store_content_t (low low)))
(filecon "@prefix@/bin/guix-daemon"
file (system_u object_r guix_daemon_exec_t (low low)))
(filecon "@guix_localstatedir@/guix/profiles/per-user/[^/]+/current-guix/bin/guix-daemon"
file (system_u object_r guix_daemon_exec_t (low low)))
(filecon "@storedir@/.+-(guix-.+|profile)/bin/guix-daemon"
file (system_u object_r guix_daemon_exec_t (low low)))
(filecon "@storedir@/[a-z0-9]+-guix-daemon"