From 50acd9deb7aa87b22267e05d857ab930e6b96ccc Mon Sep 17 00:00:00 2001 From: Demi Marie Obenour Date: Mon, 23 Dec 2024 00:39:46 -0500 Subject: [PATCH] Ensure that qubesdb SELinux labels are correct on Fedora 41 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit /usr/sbin is now considered an alias for /usr/bin, so include rules for /usr/bin to ensure correct labelling. Do not remove the old rules to avoid regression on Fedora 40. Suggested-by: Marek Marczykowski-Górecki Part-of: QubesOS/qubes-issues#9663 --- selinux/qubes-core-qubesdb.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/selinux/qubes-core-qubesdb.fc b/selinux/qubes-core-qubesdb.fc index 7856648..7d5e837 100644 --- a/selinux/qubes-core-qubesdb.fc +++ b/selinux/qubes-core-qubesdb.fc @@ -1,3 +1,4 @@ /usr/sbin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0) +/usr/bin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0) /run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0) /var/run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0)