Skip to content

Commit

Permalink
git: add fcontext for default binary
Browse files Browse the repository at this point in the history
Avoid relabel loops if the helper binaries are hardlinked:

    $ restorecon -vRF -T0 /usr/libexec/
    Relabeled /usr/libexec/git-core/git from system_u:object_r:git_exec_t to system_u:object_r:bin_t
    Relabeled /usr/libexec/git-core/git-rev-parse from system_u:object_r:bin_t to system_u:object_r:git_exec_t
    Relabeled /usr/libexec/git-core/git-fsmonitor--daemon from system_u:object_r:bin_t to system_u:object_r:git_exec_t
  • Loading branch information
cgzones committed Dec 28, 2023
1 parent d7d4128 commit e7c282c
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/services/git.fc
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ HOME_DIR/\.git-credentials -- gen_context(system_u:object_r:git_xdg_config_t,s0)

/usr/lib/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)

/usr/libexec/git-core/git -- gen_context(system_u:object_r:git_exec_t,s0)
/usr/libexec/git-core/git-[^/]+ -- gen_context(system_u:object_r:git_exec_t,s0)
/usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)

Expand Down

0 comments on commit e7c282c

Please sign in to comment.