From 7212aea48df54dde03ba1de60287e85c5c1591153b8d7de5ea5f4cbe5584ddb3 Mon Sep 17 00:00:00 2001 From: Adam Majer Date: Mon, 4 Mar 2024 13:32:21 +0000 Subject: [PATCH] Accepting request 1153493 from home:cahu:branches:systemsmanagement:cockpit - Remove SELinux file context for /usr/bin/cockpit-bridge, this is already defined in the main selinux-policy package (bsc#1220385). OBS-URL: https://build.opensuse.org/request/show/1153493 OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:cockpit/cockpit?expand=0&rev=164 --- cockpit.changes | 6 ++++++ selinux_libdir.patch | 7 +++---- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/cockpit.changes b/cockpit.changes index e24610f..b2dce6d 100644 --- a/cockpit.changes +++ b/cockpit.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Thu Feb 29 16:40:06 UTC 2024 - Cathy Hu + +- Remove SELinux file context for /usr/bin/cockpit-bridge, this + is already defined in the main selinux-policy package (bsc#1220385). + ------------------------------------------------------------------- Thu Feb 15 12:21:55 UTC 2024 - Adam Majer diff --git a/selinux_libdir.patch b/selinux_libdir.patch index 426a11c..a082010 100644 --- a/selinux_libdir.patch +++ b/selinux_libdir.patch @@ -1,6 +1,6 @@ ---- selinux_bak/cockpit.fc 2023-09-11 15:16:38.603758530 +0200 -+++ selinux/cockpit.fc 2023-09-12 09:03:09.539025240 +0200 -@@ -2,11 +2,25 @@ +--- selinux_bak/cockpit.fc 2024-02-28 13:34:16.748028079 +0100 ++++ selinux/cockpit.fc 2024-02-28 13:35:10.425549063 +0100 +@@ -2,11 +2,24 @@ /etc/systemd/system/cockpit.* -- gen_context(system_u:object_r:cockpit_unit_file_t,s0) /usr/libexec/cockpit-ws -- gen_context(system_u:object_r:cockpit_ws_exec_t,s0) @@ -11,7 +11,6 @@ +/usr/lib/cockpit-wsinstance-factory -- gen_context(system_u:object_r:cockpit_ws_exec_t,s0) + +# missing libexec transition on SLE Micro -+/usr/bin/cockpit-bridge -- gen_context(system_u:object_r:bin_t,s0) +/usr/lib/cockpit-askpass -- gen_context(system_u:object_r:bin_t,s0) +/usr/lib/cockpit-certificate-ensure -- gen_context(system_u:object_r:bin_t,s0) +/usr/lib/cockpit-certificate-helper -- gen_context(system_u:object_r:bin_t,s0)