rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity
745ca40e7d
selinux-policy/fix_systemd_watch.patch

18 lines
630 B
Diff
Raw Normal View History

Accepting request 989142 from home:jsegitz:branches:security:SELinux - Update to version 20220714. Refreshed: * fix_init.patch * fix_systemd_watch.patch OBS-URL: https://build.opensuse.org/request/show/989142 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=137
2022-07-14 13:30:19 +02:00
Index: fedora-policy-20220714/policy/modules/system/systemd.te
Accepting request 894639 from home:lnussel:branches:systemsmanagement:cockpit - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there OBS-URL: https://build.opensuse.org/request/show/894639 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=108
2021-05-20 17:02:09 +02:00
===================================================================
Accepting request 989142 from home:jsegitz:branches:security:SELinux - Update to version 20220714. Refreshed: * fix_init.patch * fix_systemd_watch.patch OBS-URL: https://build.opensuse.org/request/show/989142 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=137
2022-07-14 13:30:19 +02:00
--- fedora-policy-20220714.orig/policy/modules/system/systemd.te
+++ fedora-policy-20220714/policy/modules/system/systemd.te
@@ -1447,6 +1447,12 @@ fstools_rw_swap_files(systemd_sleep_t)
Accepting request 894639 from home:lnussel:branches:systemsmanagement:cockpit - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there OBS-URL: https://build.opensuse.org/request/show/894639 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=108
2021-05-20 17:02:09 +02:00
storage_getattr_fixed_disk_dev(systemd_sleep_t)
Accepting request 930934 from home:jsegitz:branches:security:SELinux - Update to version 20211111. Refreshed: * fix_dbus.patch * fix_systemd.patch * fix_authlogin.patch * fix_auditd.patch * fix_kernel_sysctl.patch * fix_networkmanager.patch * fix_chronyd.patch * fix_unconfineduser.patch * fix_unconfined.patch * fix_firewalld.patch * fix_init.patch * fix_xserver.patch * fix_logging.patch * fix_hadoop.patch OBS-URL: https://build.opensuse.org/request/show/930934 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=122
2021-11-11 17:01:20 +01:00
storage_getattr_removable_dev(systemd_sleep_t)
Accepting request 909369 from home:jsegitz:branches:security:SELinux - Update to version 20210716 - Remove interfaces for container module before building the package (bsc#1188184) - Updated * fix_init.patch * fix_systemd_watch.patch to adapt to upstream changes - Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing here - Update to version 20210419 - Dropped fix_gift.patch, module was removed - Updated wicked.te to removed dropped interface - Refreshed: * fix_cockpit.patch * fix_hadoop.patch * fix_init.patch * fix_logging.patch * fix_logrotate.patch * fix_networkmanager.patch * fix_nscd.patch * fix_rpm.patch * fix_selinuxutil.patch * fix_systemd.patch * fix_systemd_watch.patch * fix_thunderbird.patch * fix_unconfined.patch * fix_unconfineduser.patch * fix_unprivuser.patch OBS-URL: https://build.opensuse.org/request/show/909369 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=113
2021-07-30 11:07:13 +02:00
Accepting request 894639 from home:lnussel:branches:systemsmanagement:cockpit - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there OBS-URL: https://build.opensuse.org/request/show/894639 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=108
2021-05-20 17:02:09 +02:00
+#######################################
+#
+# Allow systemd to watch certificate dir for ca-certificates
+#
+watch_dirs_pattern(init_t,cert_t,cert_t)
Accepting request 909369 from home:jsegitz:branches:security:SELinux - Update to version 20210716 - Remove interfaces for container module before building the package (bsc#1188184) - Updated * fix_init.patch * fix_systemd_watch.patch to adapt to upstream changes - Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing here - Update to version 20210419 - Dropped fix_gift.patch, module was removed - Updated wicked.te to removed dropped interface - Refreshed: * fix_cockpit.patch * fix_hadoop.patch * fix_init.patch * fix_logging.patch * fix_logrotate.patch * fix_networkmanager.patch * fix_nscd.patch * fix_rpm.patch * fix_selinuxutil.patch * fix_systemd.patch * fix_systemd_watch.patch * fix_thunderbird.patch * fix_unconfined.patch * fix_unconfineduser.patch * fix_unprivuser.patch OBS-URL: https://build.opensuse.org/request/show/909369 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=113
2021-07-30 11:07:13 +02:00
+
optional_policy(`
sysstat_domtrans(systemd_sleep_t)
')
Copy Permalink