diff --git a/refpolicy/policy/modules/services/inn.fc b/refpolicy/policy/modules/services/inn.fc index 38fc76a..85dc7b3 100644 --- a/refpolicy/policy/modules/services/inn.fc +++ b/refpolicy/policy/modules/services/inn.fc @@ -18,7 +18,6 @@ /var/lib/news(/.*)? gen_context(system_u:object_r:innd_var_lib_t,s0) -/usr/lib(64)?/news/bin/innd -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/actsync -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/archive -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/batcher -- gen_context(system_u:object_r:innd_exec_t,s0) @@ -50,9 +49,15 @@ /usr/lib(64)?/news/bin/rnews -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/shlock -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/shrinkfile -- gen_context(system_u:object_r:innd_exec_t,s0) -/usr/lib(64)?/news/bin/sm -- gen_context(system_u:object_r:innd_exec_t,s0) /usr/lib(64)?/news/bin/startinnfeed -- gen_context(system_u:object_r:innd_exec_t,s0) +# cjp: split these to fix an ordering +# problem with a match in corecommands +/usr/lib/news/bin/innd -- gen_context(system_u:object_r:innd_exec_t,s0) +/usr/lib/news/bin/sm -- gen_context(system_u:object_r:innd_exec_t,s0) +/usr/lib64/news/bin/innd -- gen_context(system_u:object_r:innd_exec_t,s0) +/usr/lib64/news/bin/sm -- gen_context(system_u:object_r:innd_exec_t,s0) + /var/log/news(/.*)? gen_context(system_u:object_r:innd_log_t,s0) /var/run/innd(/.*)? gen_context(system_u:object_r:innd_var_run_t,s0)