Use with file context rules labeling plasmalogin binaries as xdm_exec_t instead
This commit is contained in:
parent
d9c434f619
commit
4e91804f0a
4 changed files with 32 additions and 15 deletions
7
sonic-login-manager-selinux/plasmalogin-selinux.fc
Normal file
7
sonic-login-manager-selinux/plasmalogin-selinux.fc
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
# Label the plasmalogin daemon and helper binaries as X display manager
|
||||
# executables so they run in the xdm_t domain on SELinux enforcing systems.
|
||||
|
||||
/usr/bin/plasmalogin -- system_u:object_r:xdm_exec_t:s0
|
||||
/usr/libexec/plasmalogin-helper -- system_u:object_r:xdm_exec_t:s0
|
||||
/usr/libexec/plasmalogin-helper-start-x11user -- system_u:object_r:xdm_exec_t:s0
|
||||
/usr/libexec/plasma-login-greeter -- system_u:object_r:xdm_exec_t:s0
|
||||
Loading…
Add table
Add a link
Reference in a new issue