SHA256
3
0
forked from pool/cockpit
cockpit/0001-selinux-allow-login-to-read-motd-file.patch

28 lines
736 B
Diff
Raw Permalink Normal View History

commit fc0e3304732a9aaff1487833342d5fc8ea26ce04
Author: Ludwig Nussel <ludwig.nussel@suse.de>
Date: Fri Aug 6 15:11:23 2021 +0200
selinux: allow login to read motd file
Index: cockpit/selinux/cockpit.te
===================================================================
2025-03-10 11:43:05 +00:00
diff --git a/selinux/cockpit.te b/selinux/cockpit.te
index 50695ee..55b1226 100644
--- a/selinux/cockpit.te
+++ b/selinux/cockpit.te
@@ -224,6 +224,14 @@ optional_policy(`
gnome_exec_keyringd(cockpit_session_t)
')
2025-03-10 11:43:05 +00:00
+# login may read motd file through pam
+optional_policy(`
+ gen_require(`
+ type local_login_t;
+ ')
+ cockpit_read_pid_files(local_login_t)
+')
2025-03-10 11:43:05 +00:00
+
#########################################################
#
# Misc