From Debian package 0.2.20091117-3 and 0.2.20100524-3 Duplicates 132_consolekit_rules 0.2.20091117-3: * Correctly label consolekit scripts 0.2.20100524-3: * Label /usr/lib/ConsoleKit(/.*)? as bin_t to avoid an error message on graphical login. Added it unnecessarily to consolekit.fc as well as corecommands.fc Index: policy/modules/kernel/corecommands.fc =================================================================== --- policy/modules/kernel/corecommands.fc.orig +++ policy/modules/kernel/corecommands.fc @@ -200,6 +200,9 @@ /usr/lib(64)?/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/apt/methods.+ -- gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/ConsoleKit/scripts(/.*)? gen_context(system_u:object_r:bin_t,s0) +ifdef(`distro_debian', ` +/usr/lib(64)?/ConsoleKit/.* -- gen_context(system_u:object_r:bin_t,s0) +') /usr/lib(64)?/ConsoleKit/run-session.d(/.*)? gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/courier(/.*)? gen_context(system_u:object_r:bin_t,s0) /usr/lib(64)?/cups(/.*)? gen_context(system_u:object_r:bin_t,s0) Index: policy/modules/services/consolekit.fc =================================================================== --- policy/modules/services/consolekit.fc.orig +++ policy/modules/services/consolekit.fc @@ -5,3 +5,4 @@ /var/run/consolekit\.pid -- gen_context(system_u:object_r:consolekit_var_run_t,s0) /var/run/console-kit-daemon\.pid -- gen_context(system_u:object_r:consolekit_var_run_t,s0) /var/run/ConsoleKit(/.*)? gen_context(system_u:object_r:consolekit_var_run_t,s0) +/usr/lib/ConsoleKit(/.*)? gen_context(system_u:object_r:bin_t,s0)