pool/selinux-policy
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 915716 from home:jsegitz:branches:security:SELinux

Browse Source 
- Modified fix_systemd.patch to allow systemd gpt generator access to
  udev files (bsc#1189280)

OBS-URL: https://build.opensuse.org/request/show/915716
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=119
This commit is contained in:
Johannes Segitz 2021-09-02 09:14:04 +00:00 committed by Git OBS Bridge
parent ec4c74f73a
commit 23c83e5de5
2 changed files with 20 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
fix_systemd.patch
View File

@ -1,8 +1,8 @@
Index: fedora-policy-20210628/policy/modules/system/systemd.te
Index: fedora-policy-20210716/policy/modules/system/systemd.te
===================================================================
--- fedora-policy-20210628.orig/policy/modules/system/systemd.te
+++ fedora-policy-20210628/policy/modules/system/systemd.te
@@ -347,6 +347,10 @@ userdom_manage_user_tmp_chr_files(system
--- fedora-policy-20210716.orig/policy/modules/system/systemd.te
+++ fedora-policy-20210716/policy/modules/system/systemd.te
@@ -352,6 +352,10 @@ userdom_manage_user_tmp_chr_files(system
xserver_dbus_chat(systemd_logind_t)
optional_policy(`
@ -13,7 +13,7 @@ Index: fedora-policy-20210628/policy/modules/system/systemd.te
apache_read_tmp_files(systemd_logind_t)
')
@@ -854,6 +858,10 @@ optional_policy(`
@@ -859,6 +863,10 @@ optional_policy(`
udev_read_pid_files(systemd_hostnamed_t)
')
@ -24,3 +24,12 @@ Index: fedora-policy-20210628/policy/modules/system/systemd.te
#######################################
#
# rfkill policy
@@ -1097,6 +1105,8 @@ systemd_unit_file_filetrans(systemd_gpt_
systemd_create_unit_file_dirs(systemd_gpt_generator_t)
systemd_create_unit_file_lnk(systemd_gpt_generator_t)
+udev_read_pid_files(systemd_gpt_generator_t)
+
#######################################
#
# systemd_resolved domain

6
selinux-policy.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Thu Sep 2 08:45:24 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Modified fix_systemd.patch to allow systemd gpt generator access to
udev files (bsc#1189280)
-------------------------------------------------------------------
Fri Aug 27 13:07:54 UTC 2021 - Ales Kedroutek <ales.kedroutek@suse.com>