dbbcd10a89
- backported few cosmetic small patches from upstream master - rebase selinux tarbal to v0.3 - file context pattern for /run/fapolicyd.pid is missing Resolves: rhbz#1834674 Signed-off-by: Radovan Sroka <rsroka@redhat.com>
61 lines
2.9 KiB
Diff
61 lines
2.9 KiB
Diff
diff -up ./init/fapolicyd-magic.magic-override ./init/fapolicyd-magic
|
|
--- ./init/fapolicyd-magic.magic-override 2020-06-01 12:19:03.714672865 +0200
|
|
+++ ./init/fapolicyd-magic 2020-06-01 12:19:52.754376249 +0200
|
|
@@ -13,6 +13,12 @@
|
|
0 string/wt #!\ /usr/bin/lua Lua script text executable
|
|
!:mime text/x-lua
|
|
|
|
+0 string/wt #!\ /usr/bin/texlua LuaTex script text executable
|
|
+!:mime text/x-luatex
|
|
+
|
|
+0 string/wt #!\ /usr/bin/luatex LuaTex script text executable
|
|
+!:mime text/x-luatex
|
|
+
|
|
0 string/wt #!\ /usr/bin/Rscript R script text executable
|
|
!:mime text/x-R
|
|
|
|
@@ -53,8 +59,19 @@
|
|
!:strength + 15
|
|
!:mime text/x-python
|
|
|
|
+0 search/1/w #!\ /usr/bin/env\ python Python script text executable
|
|
+!:strength + 15
|
|
+!:mime text/x-python
|
|
+
|
|
0 string/wt #!\ /usr/bin/guile Guile script text executable
|
|
!:mime text/x-script.guile
|
|
|
|
0 string \223NUMPY NumPy data file
|
|
!:mime application/x-numpy-data
|
|
+
|
|
+0 search/1/w #!\ /usr/bin/tclsh Tcl/Tk script text executable
|
|
+!:mime text/x-tcl
|
|
+
|
|
+
|
|
+0 search/1/w #!\ /usr/bin/stap Systemtap script text executable
|
|
+!:mime text/x-systemtap
|
|
diff -up ./init/fapolicyd.rules.known-libs.magic-override ./init/fapolicyd.rules.known-libs
|
|
--- ./init/fapolicyd.rules.known-libs.magic-override 2020-06-01 12:20:56.498290540 +0200
|
|
+++ ./init/fapolicyd.rules.known-libs 2020-06-01 12:23:17.220324490 +0200
|
|
@@ -3,7 +3,7 @@
|
|
# performance while ensuring that there is not much interference by
|
|
# the daemon.
|
|
|
|
-%languages=application/x-bytecode.ocaml,application/x-bytecode.python,application/java-archive,text/javascript,text/x-awk,text/x-gawk,text/x-java,text/x-lisp,text/x-lua,text/x-m4,text/x-perl,text/x-php,text/x-python,text/x-R,text/x-ruby,text/x-script.guile,text/x-tcl
|
|
+%languages=application/x-bytecode.ocaml,application/x-bytecode.python,application/java-archive,text/javascript,text/x-awk,text/x-gawk,text/x-java,text/x-lisp,text/x-lua,text/x-m4,text/x-perl,text/x-php,text/x-python,text/x-R,text/x-ruby,text/x-script.guile,text/x-tcl,text/x-luatex,text/x-systemtap
|
|
|
|
# Carve out an exception for dracut initramfs building
|
|
allow perm=any uid=0 : dir=/var/tmp/
|
|
diff -up ./init/fapolicyd.rules.restrictive.magic-override ./init/fapolicyd.rules.restrictive
|
|
--- ./init/fapolicyd.rules.restrictive.magic-override 2020-06-01 12:22:55.144002314 +0200
|
|
+++ ./init/fapolicyd.rules.restrictive 2020-06-01 12:23:55.860888398 +0200
|
|
@@ -15,7 +15,7 @@
|
|
# allow perm=open exe=%python : all
|
|
#
|
|
|
|
-%languages=application/x-bytecode.ocaml,application/java-archive,text/javascript,text/x-java,text/x-lisp,text/x-lua,text/x-m4,text/x-perl,text/x-php,text/x-R,text/x-ruby,text/x-script.guile,text/x-tcl
|
|
+%languages=application/x-bytecode.ocaml,application/java-archive,text/javascript,text/x-java,text/x-lisp,text/x-lua,text/x-m4,text/x-perl,text/x-php,text/x-R,text/x-ruby,text/x-script.guile,text/x-tcl,text/x-luatex,text/x-systemtap
|
|
|
|
# Carve out an exception for dracut
|
|
allow perm=any uid=0 : dir=/var/tmp/
|