From 43387c30f6131ced7e950d0ff0fcd824d06aad46 Mon Sep 17 00:00:00 2001 From: Demi Marie Obenour Date: Mon, 23 Dec 2024 00:43:52 -0500 Subject: [PATCH] Ensure that qubesdb SELinux labels are correct on Fedora 41 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit /usr/sbin is now considered an alias for /usr/bin, so include rules for /usr/bin to ensure correct labelling. Do not remove the old rules to avoid regression on Fedora 40. Suggested-by: Marek Marczykowski-Górecki Part-of: QubesOS/qubes-issues#9663 --- selinux/qubes-meminfo-writer.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/selinux/qubes-meminfo-writer.fc b/selinux/qubes-meminfo-writer.fc index 4e334ffa..c554034a 100644 --- a/selinux/qubes-meminfo-writer.fc +++ b/selinux/qubes-meminfo-writer.fc @@ -1,2 +1,3 @@ +/usr/bin/meminfo-writer -- gen_context(system_u:object_r:qubes_meminfo_writer_exec_t,s0) /usr/sbin/meminfo-writer -- gen_context(system_u:object_r:qubes_meminfo_writer_exec_t,s0) /run/meminfo-writer\.pid -- gen_context(system_u:object_r:qubes_meminfo_writer_var_run_t,s0)