deab87434d
- Update to refpolicy 20190609. New modules for stubby and several systemd updates, including initial support for systemd --user sessions. Refreshed * label_var_run_rsyslog.patch * suse_modifications_cron.patch * suse_modifications_logging.patch * suse_modifications_ntp.patch * suse_modifications_usermanage.patch * suse_modifications_xserver.patch * sysconfig_network_scripts.patch OBS-URL: https://build.opensuse.org/request/show/714653 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=72
25 lines
853 B
Diff
25 lines
853 B
Diff
Index: refpolicy/policy/modules/admin/usermanage.te
|
|
===================================================================
|
|
--- refpolicy.orig/policy/modules/admin/usermanage.te 2019-06-09 20:05:20.000000000 +0200
|
|
+++ refpolicy/policy/modules/admin/usermanage.te 2019-07-11 14:31:20.965630396 +0200
|
|
@@ -251,6 +251,9 @@ userdom_use_unpriv_users_fds(groupadd_t)
|
|
# for when /root is the cwd
|
|
userdom_dontaudit_search_user_home_dirs(groupadd_t)
|
|
|
|
+allow groupadd_t self:netlink_selinux_socket { create bind };
|
|
+allow groupadd_t var_run_t:sock_file write;
|
|
+
|
|
optional_policy(`
|
|
apt_use_fds(groupadd_t)
|
|
')
|
|
@@ -571,6 +574,9 @@ optional_policy(`
|
|
puppet_rw_tmp(useradd_t)
|
|
')
|
|
|
|
+allow useradd_t var_run_t:sock_file write;
|
|
+selinux_compute_access_vector(useradd_t)
|
|
+
|
|
optional_policy(`
|
|
tunable_policy(`samba_domain_controller',`
|
|
samba_append_log(useradd_t)
|