particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SELinux: apply osbuild_exec_t to /usr/bin/osbuild-image-info

Browse source 
This is needed, for the tool to be able to read SELinux labels from the
inspected image, which are not known to the host on which it is running.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
This commit is contained in:
Tomáš Hozza 2024-12-17 11:02:14 +01:00 • committed by Achilleas Koutsou
parent 6738679f2e
commit e90a74f088
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
selinux/osbuild.fc
View file

@ -1,4 +1,5 @@
/usr/bin/osbuild -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/bin/osbuild-image-info -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/assemblers/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/stages/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/sources/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)

2
selinux/osbuild_selinux.8
View file

@ -18,7 +18,7 @@ The osbuild_t SELinux type can be entered via the \fBosbuild_exec_t\fP file type
The default entrypoint paths for the osbuild_t domain are the following:
/usr/lib/osbuild/stages/*, /usr/lib/osbuild/sources/*, /usr/lib/osbuild/assemblers/*, /usr/bin/osbuild
/usr/lib/osbuild/stages/*, /usr/lib/osbuild/sources/*, /usr/lib/osbuild/assemblers/*, /usr/bin/osbuild, /usr/bin/osbuild-image-info
.SH PROCESS TYPES
SELinux defines process types (domains) for each process running on the system
.PP