OwlCyberDefense / refpolicy

refpolicy has moved to https://github.com/SELinuxProject/refpolicy
GNU General Public License v2.0
125 stars 42 forks source link

corecommands: fix usr merge #101

Closed cgzones closed 7 years ago

cgzones commented 7 years ago

not quite, i added some rules to corecmd_search_bin, which are needed, when /bin is a symlink to /usr/bin

pebenito commented 7 years ago

Ok, but if you are going to deprecate interfaces, you have to fix all uses of it too (see travis-ci output)

cgzones commented 7 years ago

updated and adjusted with https://github.com/TresysTechnology/refpolicy-contrib/pull/50 is it ok to search usr_t or should /usr become a different type like usr_dir_t and world searchable like root_t?

pebenito commented 7 years ago

Generally it's ok to include searches for parent directories. No need for a new usr type.