Skip to content

Commit 069050c

Browse files
committed
Ensure that qubesdb SELinux labels are correct
/usr/sbin is now considered an alias for /usr/bin, so include rules for /usr/bin to ensure correct labelling. Do not remove the old rules to avoid regression on Fedora 40. Suggested-by: Marek Marczykowski-Górecki <[email protected]> Part-of: QubesOS/qubes-issues#9663
1 parent dae37b9 commit 069050c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

selinux/qubes-core-qubesdb.fc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
11
/usr/sbin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0)
2+
/usr/bin/qubesdb-daemon -- gen_context(system_u:object_r:qubes_qubesdb_daemon_exec_t,s0)
23
/run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0)
34
/var/run/qubes/qubesdb\.sock -s gen_context(system_u:object_r:qubes_qubesdb_socket_t,s0)

0 commit comments

Comments
 (0)