cockpit/0001-selinux-allow-login-to-read-motd-file.patch
Adam Majer e69926e261 - new version 271
https://cockpit-project.org/blog/cockpit-271.html
- cockpit-redhatfont.diff: not needed, dropped
- 0001-selinux-allow-login-to-read-motd-file.patch, hide-docs.patch,
  hide-pcp.patch remove-pwscore.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:cockpit/cockpit?expand=0&rev=88
2022-06-10 11:54:30 +00:00

23 lines
604 B
Diff

commit fc0e3304732a9aaff1487833342d5fc8ea26ce04
Author: Ludwig Nussel <ludwig.nussel@suse.de>
Date: Fri Aug 6 15:11:23 2021 +0200
selinux: allow login to read motd file
Index: cockpit/selinux/cockpit.te
===================================================================
--- cockpit.orig/selinux/cockpit.te
+++ cockpit/selinux/cockpit.te
@@ -191,3 +191,11 @@ optional_policy(`
')
cockpit_read_pid_files(local_login_t)
')
+
+# login may read motd file through pam
+optional_policy(`
+ gen_require(`
+ type local_login_t;
+ ')
+ cockpit_read_pid_files(local_login_t)
+')