forked from cockpit/cockpit
Adam Majer
6c8e1f745c
- new version 293: - https://cockpit-project.org/blog/cockpit-293.html - refreshed: css-overrides.patch - new version 292: - https://cockpit-project.org/blog/cockpit-292.html - refreshed patches: css-overrides.patch, hide-pcp.patch, 0001-selinux-allow-login-to-read-motd-file.patch OBS-URL: https://build.opensuse.org/request/show/1090518 OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:cockpit/cockpit?expand=0&rev=124
23 lines
616 B
Diff
23 lines
616 B
Diff
commit fc0e3304732a9aaff1487833342d5fc8ea26ce04
|
|
Author: Ludwig Nussel <ludwig.nussel@suse.de>
|
|
Date: Fri Aug 6 15:11:23 2021 +0200
|
|
|
|
selinux: allow login to read motd file
|
|
|
|
Index: cockpit/selinux/cockpit.te
|
|
===================================================================
|
|
--- cockpit.orig/selinux/cockpit.te
|
|
+++ cockpit/selinux/cockpit.te
|
|
@@ -202,3 +202,11 @@ optional_policy(`
|
|
optional_policy(`
|
|
gnome_exec_keyringd(cockpit_session_t)
|
|
')
|
|
+
|
|
+# login may read motd file through pam
|
|
+optional_policy(`
|
|
+ gen_require(`
|
|
+ type local_login_t;
|
|
+ ')
|
|
+ cockpit_read_pid_files(local_login_t)
|
|
+')
|