diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy/0004-fc-bash-apply-usr-bin-bash-context-to-bin-bash.bash.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy/0004-fc-bash-apply-usr-bin-bash-context-to-bin-bash.bash.patch | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy/0004-fc-bash-apply-usr-bin-bash-context-to-bin-bash.bash.patch b/recipes-security/refpolicy/refpolicy/0004-fc-bash-apply-usr-bin-bash-context-to-bin-bash.bash.patch new file mode 100644 index 0000000..3c16ac2 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy/0004-fc-bash-apply-usr-bin-bash-context-to-bin-bash.bash.patch | |||
@@ -0,0 +1,31 @@ | |||
1 | From fda1e656c46b360f1023834636c460c5510acf68 Mon Sep 17 00:00:00 2001 | ||
2 | From: Joe MacDonald <joe_macdonald@mentor.com> | ||
3 | Date: Thu, 28 Mar 2019 21:37:32 -0400 | ||
4 | Subject: [PATCH] fc/bash: apply /usr/bin/bash context to /bin/bash.bash | ||
5 | |||
6 | We include /bin/bash.bash as a valid alias for /bin/bash, so ensure we apply | ||
7 | the proper context to the target for our policy. | ||
8 | |||
9 | Upstream-Status: Inappropriate [embedded specific] | ||
10 | |||
11 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
12 | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> | ||
13 | --- | ||
14 | policy/modules/kernel/corecommands.fc | 1 + | ||
15 | 1 file changed, 1 insertion(+) | ||
16 | |||
17 | diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc | ||
18 | index b473850d4..7e199b7b0 100644 | ||
19 | --- a/policy/modules/kernel/corecommands.fc | ||
20 | +++ b/policy/modules/kernel/corecommands.fc | ||
21 | @@ -142,6 +142,7 @@ ifdef(`distro_gentoo',` | ||
22 | /usr/bin(/.*)? gen_context(system_u:object_r:bin_t,s0) | ||
23 | /usr/bin/d?ash -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
24 | /usr/bin/bash -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
25 | +/usr/bin/bash\.bash -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
26 | /usr/bin/bash2 -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
27 | /usr/bin/fish -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
28 | /usr/bin/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
29 | -- | ||
30 | 2.17.1 | ||
31 | |||