Skip to content
This repository has been archived by the owner on Jul 2, 2018. It is now read-only.

The rabbitmq.fc in contrib claims any Erlang program #114

Open
bowlofeggs opened this issue Apr 5, 2017 · 0 comments
Open

The rabbitmq.fc in contrib claims any Erlang program #114

bowlofeggs opened this issue Apr 5, 2017 · 0 comments

Comments

@bowlofeggs
Copy link

Hello!

I've been working on writing an SELinux policy for ejabberd and I've got something that seems to work on my server for Fedora:

fedora-selinux/selinux-policy-contrib#8

I wanted to contribute the same policy to https://github.com/TresysTechnology/refpolicy-contrib/ but I noticed that the rabbitmq policy there is labelling core Erlang executables with rabbitmq_t labels:

/usr/lib/erlang/erts.*/bin/beam.*	--	gen_context(system_u:object_r:rabbitmq_beam_exec_t,s0)
/usr/lib/erlang/erts.*/bin/epmd -- gen_context(system_u:object_r:rabbitmq_epmd_exec_t,s0)

I don't have much expertise with rabbitmq or an installation to test changes to its policy, so I thought it would be good to file an issue about it here so someone can take a look. I'm going to go ahead and send a PR with my ejabberd policy, but it may not work if these RabbitMQ lines are in place.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant