3e76bf7c4f
- Update to version 20211111. Refreshed: * fix_dbus.patch * fix_systemd.patch * fix_authlogin.patch * fix_auditd.patch * fix_kernel_sysctl.patch * fix_networkmanager.patch * fix_chronyd.patch * fix_unconfineduser.patch * fix_unconfined.patch * fix_firewalld.patch * fix_init.patch * fix_xserver.patch * fix_logging.patch * fix_hadoop.patch OBS-URL: https://build.opensuse.org/request/show/930934 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=122
43 lines
1.3 KiB
Diff
43 lines
1.3 KiB
Diff
Index: fedora-policy-20211111/policy/modules/contrib/firewalld.te
|
|
===================================================================
|
|
--- fedora-policy-20211111.orig/policy/modules/contrib/firewalld.te
|
|
+++ fedora-policy-20211111/policy/modules/contrib/firewalld.te
|
|
@@ -131,6 +131,7 @@ optional_policy(`
|
|
')
|
|
|
|
optional_policy(`
|
|
+ iptables_manage_var_lib_files(firewalld_t)
|
|
iptables_domtrans(firewalld_t)
|
|
iptables_read_var_run(firewalld_t)
|
|
')
|
|
Index: fedora-policy-20211111/policy/modules/system/iptables.if
|
|
===================================================================
|
|
--- fedora-policy-20211111.orig/policy/modules/system/iptables.if
|
|
+++ fedora-policy-20211111/policy/modules/system/iptables.if
|
|
@@ -2,6 +2,25 @@
|
|
|
|
########################################
|
|
## <summary>
|
|
+## Allow management of iptables_var_lib_t files
|
|
+## </summary>
|
|
+## <param name="domain">
|
|
+## <summary>
|
|
+## Domain allowed to mange files
|
|
+## </summary>
|
|
+## </param>
|
|
+#
|
|
+interface(`iptables_manage_var_lib_files',`
|
|
+ gen_require(`
|
|
+ type iptables_var_lib_t;
|
|
+ ')
|
|
+
|
|
+ manage_dirs_pattern($1, iptables_var_lib_t, iptables_var_lib_t)
|
|
+ manage_files_pattern($1, iptables_var_lib_t, iptables_var_lib_t)
|
|
+')
|
|
+
|
|
+########################################
|
|
+## <summary>
|
|
## Execute iptables in the iptables domain.
|
|
## </summary>
|
|
## <param name="domain">
|