Files
drbd-utils/0003-Fix-selinux-module-for-run-equivalency-rules.patch
heming zhao a5ef3e7a42 Accepting request 1286402 from home:hmzhao:branches:network:ha-clustering:Factory
- merge upstream patch to fix build error 
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch
- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch

OBS-URL: https://build.opensuse.org/request/show/1286402
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/drbd-utils?expand=0&rev=150
2025-06-17 15:02:44 +00:00

26 lines
879 B
Diff

From 8000ae318e0e4ce0ff9e056b9fb71f506c5a01ef Mon Sep 17 00:00:00 2001
From: Cathy Hu <cathy.hu@suse.com>
Date: Thu, 12 Jun 2025 13:57:56 +0200
Subject: [PATCH 3/3] Fix selinux module for /run equivalency rules
fedora needs /run instead of /var/run due to equivalency rules:
https://github.com/fedora-selinux/selinux-policy/commit/1f76e522ab3e4c6faafde161036aa5bb49a0cbe0
openSUSE has the fedora selinux policy as upstream, also fixes it there
---
selinux/drbd.fc | 1 +
1 file changed, 1 insertion(+)
diff --git a/selinux/drbd.fc b/selinux/drbd.fc
index 9c71b7f03b11..f318075c5e55 100644
--- a/selinux/drbd.fc
+++ b/selinux/drbd.fc
@@ -21,3 +21,4 @@
/run/lock/subsys/drbd -- gen_context(system_u:object_r:drbd_lock_t,s0)
/var/run/drbd(/.*)? gen_context(system_u:object_r:drbd_var_run_t,s0)
+/run/drbd(/.*)? gen_context(system_u:object_r:drbd_var_run_t,s0)
--
2.43.0