From: Karol Lewandowski Date: Thu, 20 Jul 2023 10:05:28 +0000 (+0200) Subject: Change /usr/bin/crash-worker Smack label to floor (_) X-Git-Tag: accepted/tizen/unified/riscv/20230726.061410^0 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fheads%2Faccepted%2Ftizen_unified_riscv;p=platform%2Fcore%2Fsystem%2Fcrash-worker.git Change /usr/bin/crash-worker Smack label to floor (_) This change is needed after kernel started launching processes using usermodehelper process. Usermodehelper runs with normal privileges (Smack floor label) all normal policies apply to it. Thus, in order for it to launch crash-worker it either needs to have same label or there exists rule that allows given transition. Adding rule allowing _ to execute System would break Tizen policy so the other option is to change crash-worker label to _, which is what this commit does. There should be no adverse affects of this patch as crash-worker is already only allowed to be executed by root:crash_worker uids:gids. Ref: https://lore.kernel.org/all/20220607165003.871993847@linuxfoundation.org/ Change-Id: I805d263fec72b491d0fc0915413d2c3bdded91ab Reported-by: Sunghun Kim --- diff --git a/packaging/crash-worker.manifest b/packaging/crash-worker.manifest index 3be60c05..05d5a259 100644 --- a/packaging/crash-worker.manifest +++ b/packaging/crash-worker.manifest @@ -4,7 +4,7 @@ - +