diff --git a/fedora-policy-20210309.tar.bz2 b/fedora-policy-20210309.tar.bz2 deleted file mode 100644 index 73d6e7d..0000000 --- a/fedora-policy-20210309.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1be28f48aa50cfd99922a255ed86a9878f721b502882b1843608c8d3a6cc3181 -size 720666 diff --git a/fedora-policy-20210419.tar.bz2 b/fedora-policy-20210419.tar.bz2 new file mode 100644 index 0000000..549e8d7 --- /dev/null +++ b/fedora-policy-20210419.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ad36b63becbe4fb8a7ac5597b58360c8ebaf7f15ec6681d3170ec16dc2e7a650 +size 721823 diff --git a/fix_dbus.patch b/fix_dbus.patch index 0387af9..3a50979 100644 --- a/fix_dbus.patch +++ b/fix_dbus.patch @@ -1,11 +1,11 @@ -Index: fedora-policy/policy/modules/contrib/dbus.te +Index: fedora-policy-20210419/policy/modules/contrib/dbus.te =================================================================== ---- fedora-policy.orig/policy/modules/contrib/dbus.te 2020-02-25 08:22:02.846623845 +0000 -+++ fedora-policy/policy/modules/contrib/dbus.te 2020-02-25 08:22:31.991108418 +0000 +--- fedora-policy-20210419.orig/policy/modules/contrib/dbus.te ++++ fedora-policy-20210419/policy/modules/contrib/dbus.te @@ -80,6 +80,7 @@ read_lnk_files_pattern(system_dbusd_t, d manage_dirs_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) manage_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) - files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { file dir }) + files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file sock_file }) +allow system_dbusd_t system_dbusd_tmp_t:file execute; manage_files_pattern(system_dbusd_t, system_dbusd_tmpfs_t, system_dbusd_tmpfs_t) diff --git a/fix_hadoop.patch b/fix_hadoop.patch index 901327b..0a8ee6c 100644 --- a/fix_hadoop.patch +++ b/fix_hadoop.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/roles/sysadm.te +Index: fedora-policy-20210419/policy/modules/roles/sysadm.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/roles/sysadm.te -+++ fedora-policy-20210309/policy/modules/roles/sysadm.te +--- fedora-policy-20210419.orig/policy/modules/roles/sysadm.te ++++ fedora-policy-20210419/policy/modules/roles/sysadm.te @@ -298,10 +298,6 @@ optional_policy(` ') @@ -13,11 +13,11 @@ Index: fedora-policy-20210309/policy/modules/roles/sysadm.te iotop_run(sysadm_t, sysadm_r) ') -Index: fedora-policy-20210309/policy/modules/roles/unprivuser.te +Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/roles/unprivuser.te -+++ fedora-policy-20210309/policy/modules/roles/unprivuser.te -@@ -200,10 +200,6 @@ ifndef(`distro_redhat',` +--- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te ++++ fedora-policy-20210419/policy/modules/roles/unprivuser.te +@@ -209,10 +209,6 @@ ifndef(`distro_redhat',` ') optional_policy(` diff --git a/fix_init.patch b/fix_init.patch index 83ceac0..925d9c9 100644 --- a/fix_init.patch +++ b/fix_init.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/system/init.if +Index: fedora-policy-20210419/policy/modules/system/init.if =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/init.if -+++ fedora-policy-20210309/policy/modules/system/init.if +--- fedora-policy-20210419.orig/policy/modules/system/init.if ++++ fedora-policy-20210419/policy/modules/system/init.if @@ -3242,6 +3242,7 @@ interface(`init_filetrans_named_content' files_etc_filetrans($1, machineid_t, file, "machine-id" ) files_pid_filetrans($1, initctl_t, fifo_file, "fifo" ) @@ -10,11 +10,11 @@ Index: fedora-policy-20210309/policy/modules/system/init.if init_pid_filetrans($1, systemd_unit_file_t, dir, "system") ') -Index: fedora-policy-20210309/policy/modules/system/init.te +Index: fedora-policy-20210419/policy/modules/system/init.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/init.te -+++ fedora-policy-20210309/policy/modules/system/init.te -@@ -262,6 +262,8 @@ corecmd_exec_bin(init_t) +--- fedora-policy-20210419.orig/policy/modules/system/init.te ++++ fedora-policy-20210419/policy/modules/system/init.te +@@ -269,6 +269,8 @@ corecmd_exec_bin(init_t) corenet_all_recvfrom_netlabel(init_t) corenet_tcp_bind_all_ports(init_t) corenet_udp_bind_all_ports(init_t) @@ -23,7 +23,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te dev_create_all_files(init_t) dev_create_all_chr_files(init_t) -@@ -390,6 +391,7 @@ logging_manage_audit_config(init_t) +@@ -397,6 +399,7 @@ logging_manage_audit_config(init_t) logging_create_syslog_netlink_audit_socket(init_t) logging_write_var_log_dirs(init_t) logging_manage_var_log_symlinks(init_t) @@ -31,7 +31,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te seutil_read_config(init_t) seutil_read_login_config(init_t) -@@ -439,11 +441,16 @@ ifdef(`distro_redhat',` +@@ -446,11 +449,16 @@ ifdef(`distro_redhat',` corecmd_shell_domtrans(init_t, initrc_t) storage_raw_rw_fixed_disk(init_t) @@ -48,7 +48,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te bootloader_domtrans(init_t) ') -@@ -557,10 +564,10 @@ tunable_policy(`init_create_dirs',` +@@ -568,10 +576,10 @@ tunable_policy(`init_audit_control',` allow init_t self:system all_system_perms; allow init_t self:system module_load; allow init_t self:unix_dgram_socket { create_socket_perms sendto }; @@ -61,7 +61,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te allow init_t self:netlink_selinux_socket create_socket_perms; allow init_t self:unix_dgram_socket lock; # Until systemd is fixed -@@ -618,6 +625,7 @@ files_delete_all_spool_sockets(init_t) +@@ -629,6 +637,7 @@ files_delete_all_spool_sockets(init_t) files_create_var_lib_dirs(init_t) files_create_var_lib_symlinks(init_t) files_read_var_lib_symlinks(init_t) @@ -69,7 +69,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te files_manage_urandom_seed(init_t) files_list_locks(init_t) files_list_spool(init_t) -@@ -654,7 +662,7 @@ fs_list_all(init_t) +@@ -665,7 +674,7 @@ fs_list_all(init_t) fs_list_auto_mountpoints(init_t) fs_register_binary_executable_type(init_t) fs_relabel_tmpfs_sock_file(init_t) @@ -78,7 +78,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te fs_relabel_cgroup_dirs(init_t) fs_search_cgroup_dirs(init_t) # for network namespaces -@@ -710,6 +718,7 @@ systemd_write_inherited_logind_sessions_ +@@ -721,6 +730,7 @@ systemd_write_inherited_logind_sessions_ create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type) create_dirs_pattern(init_t, var_log_t, var_log_t) @@ -86,7 +86,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te auth_use_nsswitch(init_t) auth_rw_login_records(init_t) -@@ -1563,6 +1572,8 @@ optional_policy(` +@@ -1574,6 +1584,8 @@ optional_policy(` optional_policy(` postfix_list_spool(initrc_t) diff --git a/fix_unprivuser.patch b/fix_unprivuser.patch index 4db22cf..26ac928 100644 --- a/fix_unprivuser.patch +++ b/fix_unprivuser.patch @@ -1,8 +1,8 @@ -Index: fedora-policy-20210309/policy/modules/roles/unprivuser.te +Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/roles/unprivuser.te -+++ fedora-policy-20210309/policy/modules/roles/unprivuser.te -@@ -282,6 +282,13 @@ ifndef(`distro_redhat',` +--- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te ++++ fedora-policy-20210419/policy/modules/roles/unprivuser.te +@@ -291,6 +291,13 @@ ifndef(`distro_redhat',` ') optional_policy(` diff --git a/selinux-policy.changes b/selinux-policy.changes index fa2ba64..248ee11 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Mon Apr 19 11:37:49 UTC 2021 - Johannes Segitz + +- Update to version 20210419 +- Refreshed: + * fix_dbus.patch + * fix_hadoop.patch + * fix_init.patch + * fix_unprivuser.patch + ------------------------------------------------------------------- Fri Mar 12 10:36:06 UTC 2021 - Ales Kedroutek diff --git a/selinux-policy.spec b/selinux-policy.spec index 0e9359b..ec2eeb2 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -33,7 +33,7 @@ Summary: SELinux policy configuration License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20210309 +Version: 20210419 Release: 0 Source: fedora-policy-%{version}.tar.bz2 Source1: selinux-policy-rpmlintrc