Skip to content

Commit

Permalink
Ensure that qubesdb SELinux labels are correct
Browse files Browse the repository at this point in the history
/usr/sbin is now considered an alias for /usr/bin, so include rules for
/usr/bin to ensure correct labelling.  Do not remove the old rules to
avoid regression on Fedora 40.

Part-of: QubesOS/qubes-issues#9663
  • Loading branch information
DemiMarie committed Dec 23, 2024
1 parent dae37b9 commit ba1886c
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions selinux/qubes-core-qubesdb.fc
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
/usr/sbin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0)
/usr/bin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0)
/run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0)
/var/run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0)

0 comments on commit ba1886c

Please sign in to comment.