Skip to content

file_contexts.subs_dist: treat /sbin and /usr/sbin the same as /usr#1111

Open
WavyEbuilder wants to merge 1 commit into
SELinuxProject:mainfrom
WavyEbuilder:file_contexts/subs_dist/merged-usr
Open

file_contexts.subs_dist: treat /sbin and /usr/sbin the same as /usr#1111
WavyEbuilder wants to merge 1 commit into
SELinuxProject:mainfrom
WavyEbuilder:file_contexts/subs_dist/merged-usr

Conversation

@WavyEbuilder
Copy link
Copy Markdown
Contributor

Various distros, such as Gentoo, treat /bin, /sbin, and /usr/sbin the same as /usr/bin by symlinking them to there[1].

And on a Gentoo system:

$ for path in /bin /sbin /usr/sbin; do realpath "${path}"; done /usr/bin
/usr/bin
/usr/bin

As such, use subs_dist to treat them the same. Commands used to bulk modify file_contexts specifications:

$ for f in $(find policy -name '.fc'); do sed -i 's|^/usr/sbin|/usr/bin|' "${f}"; done $ for f in $(find policy -name '.fc'); do sed -i 's|^/sbin|/usr/bin|' "${f}"; done

[1] https://www.gentoo.org/support/news-items/2022-12-01-systemd-usrmerge.html

Bug: https://bugs.gentoo.org/960682

Various distros, such as Gentoo, treat /bin, /sbin, and /usr/sbin the
same as /usr/bin by symlinking them to there[1].

And on a Gentoo system:

$ for path in /bin /sbin /usr/sbin; do realpath "${path}"; done
/usr/bin
/usr/bin
/usr/bin

As such, use subs_dist to treat them the same. Commands used to bulk
modify file_contexts specifications:

$ for f in $(find policy -name '*.fc'); do sed -i 's|^/usr/sbin|/usr/bin|' "${f}"; done
$ for f in $(find policy -name '*.fc'); do sed -i 's|^/sbin|/usr/bin|' "${f}"; done

[1] https://www.gentoo.org/support/news-items/2022-12-01-systemd-usrmerge.html

Bug: https://bugs.gentoo.org/960682
Signed-off-by: Rahul Sandhu <[email protected]>
@WavyEbuilder
Copy link
Copy Markdown
Contributor Author

cc @perfinion @0xC0ncord

@WavyEbuilder
Copy link
Copy Markdown
Contributor Author

Ugh, there appear to be some duplicates. I'll weed them out manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant