summary refs log tree commit diff
path: root/etc/guix-daemon.cil.in
diff options
context:
space:
mode:
authorRicardo Wurmus <rekado@elephly.net>2022-12-23 16:44:58 +0100
committerRicardo Wurmus <rekado@elephly.net>2022-12-23 20:20:06 +0100
commitf28d792719abb82cc920486e6d6f14eacc44370c (patch)
tree5d8c5fdbb58cb00ab78859245dbbb205358ca0cc /etc/guix-daemon.cil.in
parentef060487a21833f097485b583fd7f5813109444e (diff)
downloadguix-f28d792719abb82cc920486e6d6f14eacc44370c.tar.gz
etc: SELinux: Label guix-daemon executable in profile.
* etc/guix-daemon.cil.in: Add file rule for "guix-daemon" in current-guix
profile.
Diffstat (limited to 'etc/guix-daemon.cil.in')
-rw-r--r--etc/guix-daemon.cil.in2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/guix-daemon.cil.in b/etc/guix-daemon.cil.in
index f4767ff666..ba100a4535 100644
--- a/etc/guix-daemon.cil.in
+++ b/etc/guix-daemon.cil.in
@@ -447,6 +447,8 @@
            any (unconfined_u object_r guix_store_content_t (low low)))
   (filecon "@prefix@/bin/guix-daemon"
            file (system_u object_r guix_daemon_exec_t (low low)))
+  (filecon "@guix_localstatedir@/guix/profiles/per-user/[^/]+/current-guix/bin/guix-daemon"
+           file (system_u object_r guix_daemon_exec_t (low low)))
   (filecon "@storedir@/.+-(guix-.+|profile)/bin/guix-daemon"
            file (system_u object_r guix_daemon_exec_t (low low)))
   (filecon "@storedir@/[a-z0-9]+-guix-daemon"