Label /usr/local/share/ca-certificates(/.*)? as cert_t

On Debian, this directory can contain locally trusted certificates that will be then be symlinked to /etc/ssl/certs by update-ca-certificates(8), the files should be labelled as cert_t.
avd26 · Apr 11, 2014 · d30d36a · d30d36a
1 parent b7bd94f
commit d30d36a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc
@@ -37,6 +37,8 @@ ifdef(`distro_redhat',`
 
 /usr/lib/perl5/man(/.*)?	gen_context(system_u:object_r:man_t,s0)
 
+/usr/local/share/ca-certificates(/.*)?	gen_context(system_u:object_r:cert_t,s0)
+
 /usr/local/man(/.*)?		gen_context(system_u:object_r:man_t,s0)
 /usr/local/share/man(/.*)?	gen_context(system_u:object_r:man_t,s0)