Accepting request 953125 from home:jsegitz:branches:security:SELinux

- Updated fix_cron.patch. Adjust labeling for at (bsc#1195683)

OBS-URL: https://build.opensuse.org/request/show/953125
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=126
This commit is contained in:
Johannes Segitz 2022-02-10 10:25:04 +00:00 committed by Git OBS Bridge
parent 863e94abf1
commit 62d16518b2
2 changed files with 23 additions and 7 deletions

View File

@ -1,7 +1,7 @@
Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
Index: fedora-policy-20220124/policy/modules/contrib/cron.fc
===================================================================
--- fedora-policy-20210309.orig/policy/modules/contrib/cron.fc
+++ fedora-policy-20210309/policy/modules/contrib/cron.fc
--- fedora-policy-20220124.orig/policy/modules/contrib/cron.fc
+++ fedora-policy-20220124/policy/modules/contrib/cron.fc
@@ -34,7 +34,7 @@
/var/spool/cron -d gen_context(system_u:object_r:user_cron_spool_t,s0)
@ -11,7 +11,18 @@ Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
/var/spool/cron/crontabs -d gen_context(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/crontabs/.* -- <<none>>
@@ -69,9 +69,3 @@ ifdef(`distro_gentoo',`
@@ -55,6 +55,10 @@ ifdef(`distro_suse', `
/var/spool/cron/lastrun -d gen_context(system_u:object_r:crond_tmp_t,s0)
/var/spool/cron/lastrun/[^/]* -- <<none>>
/var/spool/cron/tabs -d gen_context(system_u:object_r:cron_spool_t,s0)
+
+/var/spool/atjobs -d gen_context(system_u:object_r:cron_spool_t,s0)
+/var/spool/atjobs/.SEQ -- gen_context(system_u:object_r:user_cron_spool_t,s0)
+/var/spool/atjobs/[^/]* -- <<none>>
')
ifdef(`distro_debian',`
@@ -69,9 +73,3 @@ ifdef(`distro_gentoo',`
/var/spool/cron/lastrun -d gen_context(system_u:object_r:crond_tmp_t,s0)
/var/spool/cron/lastrun/[^/]* -- <<none>>
')
@ -21,10 +32,10 @@ Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
-/var/spool/cron/lastrun/[^/]* -- <<none>>
-/var/spool/cron/tabs -d gen_context(system_u:object_r:cron_spool_t,s0)
-')
Index: fedora-policy-20210309/policy/modules/contrib/cron.if
Index: fedora-policy-20220124/policy/modules/contrib/cron.if
===================================================================
--- fedora-policy-20210309.orig/policy/modules/contrib/cron.if
+++ fedora-policy-20210309/policy/modules/contrib/cron.if
--- fedora-policy-20220124.orig/policy/modules/contrib/cron.if
+++ fedora-policy-20220124/policy/modules/contrib/cron.if
@@ -1057,7 +1057,7 @@ interface(`cron_generic_log_filetrans_lo
#
interface(`cron_system_spool_entrypoint',`

View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Thu Feb 10 09:04:08 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Updated fix_cron.patch. Adjust labeling for at (bsc#1195683)
-------------------------------------------------------------------
Wed Feb 9 16:04:09 UTC 2022 - Filippo Bonazzi <filippo.bonazzi@suse.com>