Skip to content

Commit

Permalink
Fix fcontext for /srv/springboot/...{conf,keys}
Browse files Browse the repository at this point in the history
Signed-off-by: Hubert Quarantel-Colombani <[email protected]>
  • Loading branch information
hubertqc committed Nov 10, 2023
1 parent e502649 commit a5dcbee
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 1 deletion.
4 changes: 4 additions & 0 deletions se_module/springboot.fc
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,10 @@
/srv/springboot/(.*/)?(cache|run|work)(/.*)? gen_context(system_u:object_r:springboot_run_t,s0)
/srv/springboot/(.*/)?dyn(lib|app)(/.*)? gen_context(system_u:object_r:springboot_dynlib_t,s0)
/srv/springboot/(.*/)?.*\.(so|jar)([\.p-][0-9]+)* -- gen_context(system_u:object_r:springboot_dynlib_t,s0)
/srv/springboot/(.*/)?(conf|properties)(/.*)? gen_context(system_u:object_r:springboot_conf_t,s0)
/srv/springboot/(.*/)?(conf|properties)?/.*\.(jks|jceks|p12|pkcs12) -- gen_context(system_u:object_r:springboot_auth_t,s0)
/srv/springboot/(.*/)?keys(/.*)? gen_context(system_u:object_r:springboot_auth_t,s0)
/srv/springboot/(.*/)?(lib|app)(/.*)? gen_context(system_u:object_r:springboot_lib_t,s0)
#
/opt/springboot(/.*)? gen_context(system_u:object_r:springboot_bin_t,s0)
/opt/springboot/bin/springboot_service -- gen_context(system_u:object_r:springboot_exec_t,s0)
Expand Down
2 changes: 1 addition & 1 deletion se_module/springboot.te
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
#
############################################################################

policy_module(springboot, 1.3.0)
policy_module(springboot, 1.3.1)

########################################
#
Expand Down

0 comments on commit a5dcbee

Please sign in to comment.