selinux-policy/fix_auditd.patch

Index: fedora-policy-20211111/policy/modules/system/logging.if
===================================================================
--- fedora-policy-20211111.orig/policy/modules/system/logging.if
+++ fedora-policy-20211111/policy/modules/system/logging.if
@@ -431,6 +431,7 @@ interface(`logging_manage_audit_config',
 
 	files_search_etc($1)
 	manage_files_pattern($1, auditd_etc_t, auditd_etc_t)
+	allow $1 auditd_etc_t:dir mounton;
 ')
 
 ########################################
Accepting request 930934 from home:jsegitz:branches:security:SELinux - Update to version 20211111. Refreshed: * fix_dbus.patch * fix_systemd.patch * fix_authlogin.patch * fix_auditd.patch * fix_kernel_sysctl.patch * fix_networkmanager.patch * fix_chronyd.patch * fix_unconfineduser.patch * fix_unconfined.patch * fix_firewalld.patch * fix_init.patch * fix_xserver.patch * fix_logging.patch * fix_hadoop.patch OBS-URL: https://build.opensuse.org/request/show/930934 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=122 2021-11-11 17:01:20 +01:00			`Index: fedora-policy-20211111/policy/modules/system/logging.if`
			`===================================================================`
			`--- fedora-policy-20211111.orig/policy/modules/system/logging.if`
			`+++ fedora-policy-20211111/policy/modules/system/logging.if`
			@@ -431,6 +431,7 @@ interface(`logging_manage_audit_config',
Accepting request 922219 from home:ematsumiya:branches:security:SELinux - Fix auditd service start with systemd hardening directives (boo#1190918) * add fix_auditd.patch OBS-URL: https://build.opensuse.org/request/show/922219 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=120 2021-09-30 08:48:59 +02:00
			`files_search_etc($1)`
			`manage_files_pattern($1, auditd_etc_t, auditd_etc_t)`
			`+ allow $1 auditd_etc_t:dir mounton;`
			`')`

			`########################################`