From mboxrd@z Thu Jan 1 00:00:00 1970 From: Laura Lazzati Subject: Re: SELinux log Date: Thu, 13 Jun 2019 14:53:42 -0300 Message-ID: References: <87a7es8spi.fsf@elephly.net> <87r284cer2.fsf@elephly.net> <87muisc8x8.fsf@elephly.net> <87ef41dfkc.fsf@elephly.net> <87tvcw9upi.fsf@elephly.net> <87h88v9udy.fsf@elephly.net> <87y3277wri.fsf@elephly.net> <87v9xa8sx6.fsf@elephly.net> <87a7em9dyh.fsf@elephly.net> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="0000000000001d714a058b3838a9" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:46155) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hbTvd-00033G-N0 for guix-devel@gnu.org; Thu, 13 Jun 2019 13:54:26 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hbTvc-0008Fw-Ar for guix-devel@gnu.org; Thu, 13 Jun 2019 13:54:25 -0400 Received: from mail-wr1-x430.google.com ([2a00:1450:4864:20::430]:38095) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hbTvc-0008BI-13 for guix-devel@gnu.org; Thu, 13 Jun 2019 13:54:24 -0400 Received: by mail-wr1-x430.google.com with SMTP id d18so21726034wrs.5 for ; Thu, 13 Jun 2019 10:54:22 -0700 (PDT) In-Reply-To: <87a7em9dyh.fsf@elephly.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ricardo Wurmus Cc: Guix-devel --0000000000001d714a058b3838a9 Content-Type: multipart/alternative; boundary="0000000000001d7148058b3838a7" --0000000000001d7148058b3838a7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable > What is the file name of =E2=80=9Cguix=E2=80=9D when running in permissiv= e mode? We > need to know this to adjust the policy. > After running `which guix` I get: /usr/local/bin/guix I tried to add another label for it but it didn't work. I was going to ask you for a good tutorial for writing the policies but I have just found https://github.com/SELinuxProject/cil/wiki, I will read it the next days :) I am attaching the diff file. Regards! Laura --0000000000001d7148058b3838a7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

What is the file name of =E2=80=9Cguix=E2=80=9D when running in permissive = mode?=C2=A0 We
need to know this to adjust the policy.
After running = `which guix` I get:
/usr/local/bin/guix
I tried to add= another label for it but it didn't work. I was going to ask you for a = good tutorial for writing the policies but I have just found https://github.com/SELinuxProject/= cil/wiki, I will read it the next days :)

I am= attaching the diff file.

<= div class=3D"gmail_quote">Regards!
Laura
--0000000000001d7148058b3838a7-- --0000000000001d714a058b3838a9 Content-Type: text/plain; charset="US-ASCII"; name="diffGuixDaemon.txt" Content-Disposition: attachment; filename="diffGuixDaemon.txt" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_jwuyopjn0 ZGlmZiAtYiBndWl4LWRhZW1vbi5jaWwgL2hvbWUvbGF1cmEvZ3VpeC9ldGMvZ3VpeC1kYWVtb24u Y2lsLmluIAoxYzEKPCA7OyAtKi0gbGlzcCAtKi0KLS0tCj4gOyAtKi0gbGlzcCAtKi0KNDUsNDhk NDQKPCAgICh0eXBlIGd1aXhfY2xpZW50X2V4ZWNfdCkKPCAgIChyb2xldHlwZSBvYmplY3RfciBn dWl4X2NsaWVudF9leGVjX3QpCjwgICAodHlwZSBndWl4X2NsaWVudF90KQo8ICAgKHJvbGV0eXBl IG9iamVjdF9yIGd1aXhfY2xpZW50X3QpCjUxYzQ3CjwgICAodHlwZWF0dHJpYnV0ZXNldCBkb21h aW4gKGd1aXhfZGFlbW9uX3QgZ3VpeF9kYWVtb25fZXhlY190IGd1aXhfY2xpZW50X3QpKQotLS0K PiAgICh0eXBlYXR0cmlidXRlc2V0IGRvbWFpbiAoZ3VpeF9kYWVtb25fdCBndWl4X2RhZW1vbl9l eGVjX3QpKQoyNjcsMjc5ZDI2Mgo8ICAgOztDbGllbnQgb3BlcmF0aW9ucwo8ICAgKGFsbG93IGd1 aXhfY2xpZW50X3QKPCAgICAgICAgICBndWl4X2RhZW1vbl9jb25mX3QKPCAgICAgICAgICAgKGRp ciAoc2VhcmNoCjwgICAgICAgICAgICAgICBnZXRhdHRyCjwgICAgICAgICAgICAgICBvcGVuIHJl YWQpKSkKPCAgIChhbGxvdyBndWl4X2NsaWVudF90CjwgICAgICAgICAgZ3VpeF9kYWVtb25fY29u Zl90CjwgICAgICAgICAgIChmaWxlIChtYXAKPCAgICAgICAgICAgICAgICAgZ2V0YXR0cgo8ICAg ICAgICAgICAgICAgICBvcGVuIHJlYWQpKSkKPCAKPCAKMzAyLDMwNmMyODUKPCAgICAgICAgICAg IGFueSAoc3lzdGVtX3Ugb2JqZWN0X3IgZ3VpeF9kYWVtb25fc29ja2V0X3QgKGxvdyBsb3cpKSkK PCAgIChmaWxlY29uICJAc3RvcmVkaXJALy4uLi9iaW4vZ3VpeCIKPCAgICAgICAgICAgIGZpbGUg KHN5c3RlbV91IG9iamVjdF9yIGd1aXhfY2xpZW50X2V4ZWNfdCAobG93IGxvdykpKQo8ICAgKGZp bGVjb24gIi91c3IvbG9jYWwvYmluL2d1aXgiCjwgICAgICAgICAgICBmaWxlIChzeXN0ZW1fdSBv YmplY3RfciBndWl4X2NsaWVudF9leGVjX3QgKGxvdyBsb3cpKSkpCi0tLQo+ICAgICAgICAgICAg YW55IChzeXN0ZW1fdSBvYmplY3RfciBndWl4X2RhZW1vbl9zb2NrZXRfdCAobG93IGxvdykpKSkK Cg== --0000000000001d714a058b3838a9--