[PATCH] Label bluetooth daemon as bluetooth_exec_t
Laurent Bigonville <[email protected]>
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
From: Laurent Bigonville <[email protected]> --- policy/modules/services/bluetooth.fc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/services/bluetooth.fc b/policy/modules/services/bluetooth.fc index 3d66914f..e167e93f 100644 --- a/policy/modules/services/bluetooth.fc +++ b/policy/modules/services/bluetooth.fc @@ -15,9 +15,12 @@ /usr/bin/rfcomm -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/bin/sdpd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) +/usr/lib/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) # Systemd unit file /usr/lib/systemd/system/[^/]*bluetooth.* -- gen_context(system_u:object_r:bluetooth_unit_t,s0) +/usr/libexec/bluetooth/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) + /usr/sbin/bluetoothd -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/sbin/hciattach -- gen_context(system_u:object_r:bluetooth_exec_t,s0) /usr/sbin/hcid -- gen_context(system_u:object_r:bluetooth_exec_t,s0) -- 2.26.0.rc2