Bug#900580: Please restore SELinux context after creating the files in /var/lib/texmf
On 02.06.2018 13:48, Norbert Preining wrote:
Hi,
> Sure enough the kernel does, but based on a role set that is shipped
> with Debian. I'm quite sure (near to 100%) that the kernel does not
> contain rules about tetex!!!
>
> So the question is who/what did set up these rules, it was none of us.
>
AFAICT it is in the upstream code of refpolicy (Source package).
policy/modules/system/miscfiles.te:type tetex_data_t;
policy/modules/system/miscfiles.te:files_tmp_file(tetex_data_t)
policy/modules/system/miscfiles.fc:/var/lib/texmf(/.*)?
gen_context(system_u:object_r:tetex_data_t,s0)
policy/modules/system/miscfiles.fc:/var/cache/fonts(/.*)?
gen_context(system_u:object_r:tetex_data_t,s0)
etc.
H.
--
sigfault
#206401 http://counter.li.org
Reply to: