Bug 697564 – www-client/google-chrome - add SELinux sec-policy

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description mrl5 2019-10-12 15:53:51 UTC]

Packages:
- www-client/google-chrome
- www-client/google-chrome-beta
- www-client/google-chrome-unstable

are missing SELinux policy although:
1) it's defined for www-client/chromium: https://github.com/gentoo/gentoo/blob/master/www-client/chromium/chromium-77.0.3865.90.ebuild#L86
2) Google Chrome is supported: https://github.com/SELinuxProject/refpolicy/blob/master/policy/modules/apps/chromium.fc#L1-L20

[Comment 1 mrl5 2019-10-12 16:26:22 UTC]

PR with suggested fix: https://github.com/gentoo/gentoo/pull/13264

[Comment 2 mrl5 2019-10-12 17:09:29 UTC]

from #gentoo-hardened:

16:43:01 < mrl5> one more question - why there is not policy for google-chrome although there is for chromium
16:43:28 < mrl5> can the chromium policy be reused with chrome?
18:56:19 <@perfinion> mrl5: the chromium policy does work for both

[Comment 3 Larry the Git Cow 2019-10-13 16:25:58 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6322173458e8ed1bfd8ed19574551951fecde099

commit 6322173458e8ed1bfd8ed19574551951fecde099
Author:     Mike Gilbert <[e-mail]>
AuthorDate: 2019-10-13 16:24:39 +0000
Commit:     Mike Gilbert <[e-mail]>
CommitDate: 2019-10-13 16:25:52 +0000

    www-client/google-chrome: depend on selinux policy
    
    Closes: https://bugs.gentoo.org/697564
    Closes: https://github.com/gentoo/gentoo/pull/13264
    Signed-off-by: Mike Gilbert <[e-mail]>

 www-client/google-chrome-beta/google-chrome-beta-78.0.3904.34.ebuild    | 2 ++
 .../google-chrome-unstable/google-chrome-unstable-79.0.3921.0.ebuild    | 2 ++
 www-client/google-chrome/google-chrome-77.0.3865.90.ebuild              | 2 ++
 3 files changed, 6 insertions(+)