Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t

The script is executed from the selinux-autorelabel.service.
zpytela · Nov 2, 2023 · d901854 · d901854
1 parent bb517fb
commit d901854
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/policy/modules/system/selinuxutil.fc b/policy/modules/system/selinuxutil.fc
@@ -36,6 +36,8 @@
 
 /usr/lib/selinux(/.*)?			gen_context(system_u:object_r:policy_src_t,s0)
 
+/usr/libexec/selinux/selinux-autorelabel	--	gen_context(system_u:object_r:semanage_exec_t,s0)
+
 /usr/sbin/load_policy		--	gen_context(system_u:object_r:load_policy_exec_t,s0)
 /usr/sbin/restorecon		--	gen_context(system_u:object_r:setfiles_exec_t,s0)
 /usr/sbin/restorecond		--	gen_context(system_u:object_r:restorecond_exec_t,s0)