selinux-policy/fix_chronyd.patch

Index: fedora-policy/policy/modules/contrib/chronyd.te
===================================================================
--- fedora-policy.orig/policy/modules/contrib/chronyd.te	2020-02-19 09:36:31.776283304 +0000
+++ fedora-policy/policy/modules/contrib/chronyd.te	2020-02-25 10:33:09.169920838 +0000
@@ -136,6 +136,10 @@ systemd_exec_systemctl(chronyd_t)
 userdom_dgram_send(chronyd_t)
 
 optional_policy(`
+	networkmanager_read_pid_files(chronyd_t)
+')
+
+optional_policy(`
     cron_dgram_send(chronyd_t)
 ')
Accepting request 781805 from home:jsegitz:branches:security:SELinux - Update to version 20200219 Refreshed fix_hadoop.patch Updated * fix_dbus.patch * fix_hadoop.patch * fix_nscd.patch * fix_xserver.patch Renamed postfix_paths.patch to fix_postfix.patch Added * fix_init.patch * fix_locallogin.patch * fix_policykit.patch * fix_iptables.patch * fix_irqbalance.patch * fix_ntp.patch * fix_fwupd.patch * fix_firewalld.patch * fix_logrotate.patch * fix_selinuxutil.patch * fix_corecommand.patch * fix_snapper.patch * fix_systemd.patch * fix_unconfined.patch * fix_unconfineduser.patch * fix_chronyd.patch * fix_networkmanager.patch * xdm_entrypoint_pam.patch - Removed modules minimum_temp_fixes and targeted_temp_fixes from the corresponding policies - Reduced default module list of minimum policy by removing OBS-URL: https://build.opensuse.org/request/show/781805 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=74 2020-03-05 11:13:59 +01:00			`Index: fedora-policy/policy/modules/contrib/chronyd.te`
			`===================================================================`
			`--- fedora-policy.orig/policy/modules/contrib/chronyd.te 2020-02-19 09:36:31.776283304 +0000`
			`+++ fedora-policy/policy/modules/contrib/chronyd.te 2020-02-25 10:33:09.169920838 +0000`
			`@@ -136,6 +136,10 @@ systemd_exec_systemctl(chronyd_t)`
			`userdom_dgram_send(chronyd_t)`

			optional_policy(`
			`+ networkmanager_read_pid_files(chronyd_t)`
			`+')`
			`+`
			+optional_policy(`
			`cron_dgram_send(chronyd_t)`
			`')`