unconfined_t access to a new file type
Wart <[email protected]> Mon, 4 Dec 2023 15:36:36 -0600
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
SSBjcmVhdGVkIGEgbmV3IHBvbGljeSBtb2R1bGUgdXNpbmcgc2Vwb2xnZW4gZm9yIG15IFJMOSBz ZXJ2ZXIgdG8gbWFuYWdlIA0KdGhlIHNoaWJib2xldGggc2VydmljZSwgdGhlbiBzdGFydGVkIGN1 c3RvbWl6aW5nIGl0LiAgUGFydCBvZiB0aGUgbmV3IA0KcG9saWN5IGlzIGEgbmV3IHNoaWJib2xl dGhfZXRjX3QgZmlsZSB0eXBlLg0KDQpUaGlzIHN5c3RlbSBpcyBhbHNvIHVzaW5nIHB1cHBldCB0 byBtYW5hZ2UgdmFyaW91cyBjb25maWcgZmlsZXMgb24gdGhlIA0KZmlsZXN5c3RlbS4NCg0KVGhl IHNoaWJkIHByb2Nlc3MsIHJ1bm5pbmcgaW4gaXRzIHNoaWJkX3QgZG9tYWluLCBpcyBhYmxlIHRv IHJlYWQgdGhpcyANCmZpbGUgdHlwZSB3aXRoIG5vIHByb2JsZW0sIGJ1dCBJIG5vdGljZSB0aGF0 IHB1cHBldCAocnVubmluZyBpbiB0aGUgDQp1bmNvbmZpbmVkX3QgZG9tYWluKSBub3cgZ2VuZXJh dGVzIGEgbmV3IEFWQyBkZW5pYWwgd2hlbiB0cnlpbmcgdG8gDQphY2Nlc3MgZmlsZXMgb2YgdGhp cyBuZXcgZmlsZSB0eXBlLg0KDQpEbyBJIG5lZWQgdG8gZXhwbGljaXRseSBhbGxvdyB0aGUgdW5j b25maW5lZF90IGRvbWFpbiBhY2Nlc3MgdG8gbXkgbmV3IA0KZmlsZSB0eXBlLCBvciBpcyB0aGVy ZSBzb21lIG90aGVyIHBpZWNlIHRoYXQgSSdtIG1pc3Npbmc/DQoNCi0tTWlrZQ0KDQpmYyBmaWxl Og0KDQovdXNyL3NiaW4vc2hpYmQgICAgICAgICAtLSAgIGdlbl9jb250ZXh0KHN5c3RlbV91Om9i amVjdF9yOnNoaWJkX2V4ZWNfdCxzMCkNCi9ldGMvc2hpYmJvbGV0aCgvLiopPyAgIC0tIA0KZ2Vu X2NvbnRleHQoc3lzdGVtX3U6b2JqZWN0X3I6c2hpYmJvbGV0aF9ldGNfdCxzMCkNCi92YXIvbG9n L3NoaWJib2xldGgoLy4qKT8gDQpnZW5fY29udGV4dChzeXN0ZW1fdTpvYmplY3RfcjpzaGliYm9s ZXRoX3Zhcl9sb2dfdCxzMCkNCi92YXIvY2FjaGUvc2hpYmJvbGV0aCgvLiopPyANCmdlbl9jb250 ZXh0KHN5c3RlbV91Om9iamVjdF9yOnNoaWJib2xldGhfdmFyX2NhY2hlX3QsczApDQovdmFyL3J1 bi9zaGliYm9sZXRoICAgICAtZCANCmdlbl9jb250ZXh0KHN5c3RlbV91Om9iamVjdF9yOnNoaWJi b2xldGhfdmFyX3J1bl90LHMwKQ0KL3Zhci9ydW4vc2hpYmJvbGV0aC9zaGliZC5zb2NrICAtcyAN Cmdlbl9jb250ZXh0KHN5c3RlbV91Om9iamVjdF9yOnNoaWJib2xldGhfdmFyX3J1bl90LHMwKQ0K L2V0Yy9zaGliYm9sZXRoLy4qLnBlbSAgLS0gICBnZW5fY29udGV4dChzeXN0ZW1fdTpvYmplY3Rf cjpjZXJ0X3QsczApDQovZXRjL3NoaWJib2xldGgvLipwZW0gICAtLSAgIGdlbl9jb250ZXh0KHN5 c3RlbV91Om9iamVjdF9yOmNlcnRfdCxzMCkNCg0KaWYgZmlsZToNCg0KIyMgPHN1bW1hcnk+cG9s aWN5IGZvciBzaGliZDwvc3VtbWFyeT4NCg0KIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIw0KIyMgPHN1bW1hcnk+DQojIyAgICAgIEV4ZWN1dGUgc2hpYmRfZXhlY190IGlu IHRoZSBzaGliZCBkb21haW4uDQojIyA8L3N1bW1hcnk+DQojIyA8cGFyYW0gbmFtZT0iZG9tYWlu Ij4NCiMjIDxzdW1tYXJ5Pg0KIyMgICAgICBEb21haW4gYWxsb3dlZCB0byB0cmFuc2l0aW9uLg0K IyMgPC9zdW1tYXJ5Pg0KIyMgPC9wYXJhbT4NCiMNCmludGVyZmFjZShgc2hpYmRfZG9tdHJhbnMn LGANCiAgICAgICAgIGdlbl9yZXF1aXJlKGANCiAgICAgICAgICAgICAgICAgdHlwZSBzaGliZF90 LCBzaGliZF9leGVjX3Q7DQogICAgICAgICAnKQ0KDQogICAgICAgICBjb3JlY21kX3NlYXJjaF9i aW4oJDEpDQogICAgICAgICBkb210cmFuc19wYXR0ZXJuKCQxLCBzaGliZF9leGVjX3QsIHNoaWJk X3QpDQonKQ0KDQojIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIw0KIyMgPHN1 bW1hcnk+DQojIyAgICAgIEV4ZWN1dGUgc2hpYmQgaW4gdGhlIGNhbGxlciBkb21haW4uDQojIyA8 L3N1bW1hcnk+DQojIyA8cGFyYW0gbmFtZT0iZG9tYWluIj4NCiMjICAgICAgPHN1bW1hcnk+DQoj IyAgICAgIERvbWFpbiBhbGxvd2VkIGFjY2Vzcy4NCiMjICAgICAgPC9zdW1tYXJ5Pg0KIyMgPC9w YXJhbT4NCiMNCmludGVyZmFjZShgc2hpYmRfZXhlYycsYA0KICAgICAgICAgZ2VuX3JlcXVpcmUo YA0KICAgICAgICAgICAgICAgICB0eXBlIHNoaWJkX2V4ZWNfdDsNCiAgICAgICAgICcpDQoNCiAg ICAgICAgIGNvcmVjbWRfc2VhcmNoX2JpbigkMSkNCiAgICAgICAgIGNhbl9leGVjKCQxLCBzaGli ZF9leGVjX3QpDQonKQ0KDQoNCg0KdGUgZmlsZToNCg0KcG9saWN5X21vZHVsZShsb2NhbF9zaGli ZCwgMS4wLjApDQoNCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMNCiMN CiMgRGVjbGFyYXRpb25zDQojDQoNCnJlcXVpcmUgew0KICAgICAgICAgdHlwZSBodHRwZF90Ow0K ICAgICAgICAgdHlwZSB2YXJfcnVuX3Q7DQogICAgICAgICB0eXBlIGNlcnRfdDsNCiAgICAgICAg IHR5cGUgaHR0cF9wb3J0X3Q7DQogICAgICAgICB0eXBlIGtlcm5lbF90Ow0KICAgICAgICAgY2xh c3MgZmlsZSB7IGFwcGVuZCBjcmVhdGUgZ2V0YXR0ciBvcGVuIHJlYWQgcmVuYW1lIHVubGluayB3 cml0ZSB9Ow0KICAgICAgICAgY2xhc3MgZGlyIHsgYWRkX25hbWUgcmVtb3ZlX25hbWUgc2VhcmNo IHdyaXRlIH07DQogICAgICAgICBjbGFzcyB0Y3Bfc29ja2V0IHsgbmFtZV9jb25uZWN0IH07DQog ICAgICAgICBjbGFzcyBzb2NrX2ZpbGUgeyBjcmVhdGUgc2V0YXR0ciB3cml0ZSB9Ow0KICAgICAg ICAgY2xhc3MgdW5peF9zdHJlYW1fc29ja2V0IHsgY29ubmVjdHRvIH07DQogICAgICAgICBjbGFz cyB1bml4X2RncmFtX3NvY2tldCB7IGNyZWF0ZSBnZXRvcHQgc2VuZHRvIHNldG9wdCB9Ow0KfQ0K dHlwZSBzaGliZF90Ow0KdHlwZSBzaGliZF9leGVjX3Q7DQp0eXBlIHNoaWJib2xldGhfZXRjX3Q7 DQp0eXBlIHNoaWJib2xldGhfdmFyX2xvZ190Ow0KdHlwZSBzaGliYm9sZXRoX3Zhcl9jYWNoZV90 Ow0KdHlwZSBzaGliYm9sZXRoX3Zhcl9ydW5fdDsNCmluaXRfZGFlbW9uX2RvbWFpbihzaGliZF90 LCBzaGliZF9leGVjX3QpDQoNCg0KcGVybWlzc2l2ZSBzaGliZF90Ow0KDQojIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjDQojDQojIHNoaWJkIGxvY2FsIHBvbGljeQ0KIw0K YWxsb3cgc2hpYmRfdCBzZWxmOmNhcGFiaWxpdHkgeyBzZXRnaWQgc2V0dWlkIH07DQphbGxvdyBz aGliZF90IHNlbGY6cHJvY2VzcyB7IGZvcmsgc2lnbmFsX3Blcm1zIH07DQphbGxvdyBzaGliZF90 IHNlbGY6Zmlmb19maWxlIHJ3X2ZpZm9fZmlsZV9wZXJtczsNCmFsbG93IHNoaWJkX3Qgc2VsZjp1 bml4X3N0cmVhbV9zb2NrZXQgY3JlYXRlX3N0cmVhbV9zb2NrZXRfcGVybXM7DQoNCmRvbWFpbl91 c2VfaW50ZXJhY3RpdmVfZmRzKHNoaWJkX3QpDQoNCmZpbGVzX3JlYWRfZXRjX2ZpbGVzKHNoaWJk X3QpDQoNCmF1dGhfdXNlX25zc3dpdGNoKHNoaWJkX3QpDQoNCm1pc2NmaWxlc19yZWFkX2xvY2Fs aXphdGlvbihzaGliZF90KQ0KDQphbGxvdyBzaGliZF90IHNoaWJib2xldGhfZXRjX3Q6ZmlsZSB7 IGdldGF0dHIgb3BlbiByZWFkIH07DQoNCmFsbG93IHNoaWJkX3Qgc2hpYmJvbGV0aF92YXJfbG9n X3Q6ZGlyIHsgYWRkX25hbWUgcmVtb3ZlX25hbWUgc2VhcmNoIA0Kd3JpdGUgfTsNCmFsbG93IHNo aWJkX3Qgc2hpYmJvbGV0aF92YXJfbG9nX3Q6ZmlsZSB7IGFwcGVuZCBjcmVhdGUgZ2V0YXR0ciBv cGVuIA0KcmVhZCByZW5hbWUgdW5saW5rIHdyaXRlIH07DQphbGxvdyBzaGliZF90IGNlcnRfdDpm aWxlIHsgb3BlbiByZWFkIH07DQphbGxvdyBzaGliZF90IHNoaWJib2xldGhfdmFyX3J1bl90OmRp ciB7IGFkZF9uYW1lIHJlbW92ZV9uYW1lIHNlYXJjaCANCndyaXRlIH07DQphbGxvdyBzaGliZF90 IHNoaWJib2xldGhfdmFyX3J1bl90OnNvY2tfZmlsZSB7IGNyZWF0ZSBzZXRhdHRyIHVubGluayB9 Ow0KYWxsb3cgc2hpYmRfdCBzaGliYm9sZXRoX3Zhcl9jYWNoZV90OmRpciB7IGFkZF9uYW1lIHJl bW92ZV9uYW1lIHNlYXJjaCANCndyaXRlIH07DQphbGxvdyBzaGliZF90IHNoaWJib2xldGhfdmFy X2NhY2hlX3Q6ZmlsZSB7IGNyZWF0ZSBnZXRhdHRyIG9wZW4gcmVhZCANCnVubGluayB3cml0ZSB9 Ow0KYWxsb3cgc2hpYmRfdCBodHRwX3BvcnRfdDp0Y3Bfc29ja2V0IG5hbWVfY29ubmVjdDsNCg0K IyBMZXQgYXBhY2hlIHRhbGsgdG8gc2hpYmQgYW5kIHZpY2UgdmVyc2ENCmFsbG93IGh0dHBkX3Qg c2hpYmJvbGV0aF9ldGNfdDpmaWxlIHsgZ2V0YXR0ciBvcGVuIHJlYWQgfTsNCmFsbG93IGh0dHBk X3Qgc2hpYmRfdDp1bml4X3N0cmVhbV9zb2NrZXQgY29ubmVjdHRvOw0KYWxsb3cgaHR0cGRfdCBz aGliYm9sZXRoX3Zhcl9ydW5fdDpkaXIgc2VhcmNoOw0KYWxsb3cgaHR0cGRfdCBzaGliYm9sZXRo X3Zhcl9ydW5fdDpzb2NrX2ZpbGUgd3JpdGU7DQphbGxvdyBzaGliZF90IGtlcm5lbF90OnVuaXhf ZGdyYW1fc29ja2V0IHNlbmR0bzsNCmFsbG93IHNoaWJkX3Qgc2VsZjp1bml4X2RncmFtX3NvY2tl dCB7IGNyZWF0ZSBnZXRvcHQgc2V0b3B0IH07DQoNClRoZSBBVkMgZGVuaWFsOg0KDQotLS0tDQp0 aW1lLT5Nb24gRGVjICA0IDE0OjQwOjQ1IDIwMjMNCm5vZGU9bGxvZG10LmxpZ28tbGEuY2FsdGVj aC5lZHUgdHlwZT1QUk9DVElUTEUgDQptc2c9YXVkaXQoMTcwMTcyMjQ0NS45OTc6NjMwMzA2KTog DQpwcm9jdGl0bGU9NzA3NTcwNzA2NTc0MjA2MTY3NjU2RTc0M0EyMDYxNzA3MDZDNzk2OTZFNjcy MDYzNkY2RTY2Njk2Nzc1NzI2MTc0Njk2RjZFDQpub2RlPWxsb2RtdC5saWdvLWxhLmNhbHRlY2gu ZWR1IHR5cGU9UEFUSCANCm1zZz1hdWRpdCgxNzAxNzIyNDQ1Ljk5Nzo2MzAzMDYpOiBpdGVtPTAg DQpuYW1lPSIvZXRjL3NoaWJib2xldGgvc2hpYmJvbGV0aDIueG1sIiBpbm9kZT0xNzM4NDY1NiBk ZXY9MDk6N2UgDQptb2RlPTAxMDA2NDQgb3VpZD0wIG9naWQ9MCByZGV2PTAwOjAwIA0Kb2JqPXN5 c3RlbV91Om9iamVjdF9yOnNoaWJib2xldGhfZXRjX3Q6czAgbmFtZXR5cGU9Tk9STUFMIGNhcF9m cD0wIA0KY2FwX2ZpPTAgY2FwX2ZlPTAgY2FwX2Z2ZXI9MCBjYXBfZnJvb3RpZD0wDQpub2RlPWxs b2RtdC5saWdvLWxhLmNhbHRlY2guZWR1IHR5cGU9Q1dEIA0KbXNnPWF1ZGl0KDE3MDE3MjI0NDUu OTk3OjYzMDMwNik6IGN3ZD0iLyINCm5vZGU9bGxvZG10LmxpZ28tbGEuY2FsdGVjaC5lZHUgdHlw ZT1TWVNDQUxMIA0KbXNnPWF1ZGl0KDE3MDE3MjI0NDUuOTk3OjYzMDMwNik6IGFyY2g9YzAwMDAw M2Ugc3lzY2FsbD0yNTcgc3VjY2Vzcz15ZXMgDQpleGl0PTM1IGEwPWZmZmZmZjljIGExPTdmYTYz NGEzOGU2OCBhMj04MDAwMCBhMz0wIGl0ZW1zPTEgcHBpZD0yNzI1MjIzIA0KcGlkPTQxMzUyNzEg YXVpZD00Mjk0OTY3Mjk1IHVpZD0wIGdpZD0wIGV1aWQ9MCBzdWlkPTAgZnN1aWQ9MCBlZ2lkPTAg DQpzZ2lkPTAgZnNnaWQ9MCB0dHk9KG5vbmUpIHNlcz00Mjk0OTY3Mjk1IGNvbW09InB1cHBldCIg DQpleGU9Ii9vcHQvcHVwcGV0bGFicy9wdXBwZXQvYmluL3J1YnkiIA0Kc3Viaj1zeXN0ZW1fdTpz eXN0ZW1fcjp1bmNvbmZpbmVkX3NlcnZpY2VfdDpzMCBrZXk9KG51bGwpDQpub2RlPWxsb2RtdC5s aWdvLWxhLmNhbHRlY2guZWR1IHR5cGU9QVZDIA0KbXNnPWF1ZGl0KDE3MDE3MjI0NDUuOTk3OjYz MDMwNik6IGF2YzogIGRlbmllZCAgeyBvcGVuIH0gZm9yIA0KcGlkPTQxMzUyNzEgY29tbT0icHVw cGV0IiBwYXRoPSIvZXRjL3NoaWJib2xldGgvc2hpYmJvbGV0aDIueG1sIiANCmRldj0ibWQxMjYi IGlubz0xNzM4NDY1NiANCnNjb250ZXh0PXN5c3RlbV91OnN5c3RlbV9yOnVuY29uZmluZWRfc2Vy dmljZV90OnMwIA0KdGNvbnRleHQ9c3lzdGVtX3U6b2JqZWN0X3I6c2hpYmJvbGV0aF9ldGNfdDpz MCB0Y2xhc3M9ZmlsZSBwZXJtaXNzaXZlPTENCm5vZGU9bGxvZG10LmxpZ28tbGEuY2FsdGVjaC5l ZHUgdHlwZT1BVkMgDQptc2c9YXVkaXQoMTcwMTcyMjQ0NS45OTc6NjMwMzA2KTogYXZjOiAgZGVu aWVkICB7IHJlYWQgfSBmb3IgDQpwaWQ9NDEzNTI3MSBjb21tPSJwdXBwZXQiIG5hbWU9InNoaWJi b2xldGgyLnhtbCIgZGV2PSJtZDEyNiIgDQppbm89MTczODQ2NTYgc2NvbnRleHQ9c3lzdGVtX3U6 c3lzdGVtX3I6dW5jb25maW5lZF9zZXJ2aWNlX3Q6czAgDQp0Y29udGV4dD1zeXN0ZW1fdTpvYmpl Y3RfcjpzaGliYm9sZXRoX2V0Y190OnMwIHRjbGFzcz1maWxlIHBlcm1pc3NpdmU9MQotLQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpzZWxpbnV4IG1haWxp bmcgbGlzdCAtLSBzZWxpbnV4QGxpc3RzLmZlZG9yYXByb2plY3Qub3JnClRvIHVuc3Vic2NyaWJl IHNlbmQgYW4gZW1haWwgdG8gc2VsaW51eC1sZWF2ZUBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpG ZWRvcmEgQ29kZSBvZiBDb25kdWN0OiBodHRwczovL2RvY3MuZmVkb3JhcHJvamVjdC5vcmcvZW4t VVMvcHJvamVjdC9jb2RlLW9mLWNvbmR1Y3QvCkxpc3QgR3VpZGVsaW5lczogaHR0cHM6Ly9mZWRv cmFwcm9qZWN0Lm9yZy93aWtpL01haWxpbmdfbGlzdF9ndWlkZWxpbmVzCkxpc3QgQXJjaGl2ZXM6 IGh0dHBzOi8vbGlzdHMuZmVkb3JhcHJvamVjdC5vcmcvYXJjaGl2ZXMvbGlzdC9zZWxpbnV4QGxp c3RzLmZlZG9yYXByb2plY3Qub3JnCkRvIG5vdCByZXBseSB0byBzcGFtLCByZXBvcnQgaXQ6IGh0 dHBzOi8vcGFndXJlLmlvL2ZlZG9yYS1pbmZyYXN0cnVjdHVyZS9uZXdfaXNzdWUK