Merge remote-tracking branch 'origin/pr/419'

* origin/pr/419: Xen hotplug scripts should be initrc_exec_t
QubesOS · May 7, 2023 · 49275be · 49275be
2 parents dcfc936 + 252e5cd
commit 49275be
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/selinux/qubes-misc.fc b/selinux/qubes-misc.fc
@@ -8,6 +8,7 @@ define(`slash_run',`dnl
 /usr/lib/qubes(/.*)?                    gen_context(system_u:object_r:bin_t,s0)
 /usr/lib/qubes/init(/.*)?            -d gen_context(system_u:object_r:etc_t,s0)
 /usr/lib/qubes/init(/.*)?            -- gen_context(system_u:object_r:initrc_exec_t,s0)
+/etc/xen/scripts/[!/]+               -- gen_context(system_u:object_r:initrc_exec_t,s0)
 /usr/lib/qubes/network-manager-prepare-conf-dir -- gen_context(system_u:object_r:bin_t,s0)
 slash_run(`qubes(/.*)?',`qubes_var_run')
 slash_run(`qubes-service',`initrc_var_run',`-d')