Moved standard library paths bundle from common to agent type to simplify SELinux policy

craigcomstock · craigcomstock · commit 4842cfebe32d · 2025-05-05T10:14:10.000-05:00
This should simplify selinux policy where we want the agent to have broad access but other components like serverd, execd, hub to have more limited access. The paths bundle checks for the existence of many commands and this operation can cause SELinux AVCs. Ticket: ENT12954 Ticket: ENT-12954 Changelog: title
diff --git a/lib/paths.cf b/lib/paths.cf
@@ -1,6 +1,6 @@
 # Paths bundle (used by other bodies)
 
-bundle common paths
+bundle agent paths
 # @brief Defines an array `path` with common paths to standard binaries and
 # directories as well as classes for defined and existing paths.
 #

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`# Paths bundle (used by other bodies)`
`2`	`2`
`3`		`-bundle common paths`
	`3`	`+bundle agent paths`
`4`	`4`	# @brief Defines an array `path` with common paths to standard binaries and
`5`	`5`	`# directories as well as classes for defined and existing paths.`
`6`	`6`	`#`