From 095423f93ac44963d335b0d7c602e68a59e5ca6d4cbe1991d9c4a2aa8af98315 Mon Sep 17 00:00:00 2001 From: Johannes Segitz Date: Fri, 12 Mar 2021 14:43:38 +0000 Subject: [PATCH] Accepting request 878541 from home:akedroutek:branches:security:SELinux bsc#1183177 OBS-URL: https://build.opensuse.org/request/show/878541 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=97 --- fix_init.patch | 3 ++- selinux-policy.changes | 6 ++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/fix_init.patch b/fix_init.patch index 5d55dcd..83ceac0 100644 --- a/fix_init.patch +++ b/fix_init.patch @@ -14,11 +14,12 @@ Index: fedora-policy-20210309/policy/modules/system/init.te =================================================================== --- fedora-policy-20210309.orig/policy/modules/system/init.te +++ fedora-policy-20210309/policy/modules/system/init.te -@@ -262,6 +262,7 @@ corecmd_exec_bin(init_t) +@@ -262,6 +262,8 @@ corecmd_exec_bin(init_t) corenet_all_recvfrom_netlabel(init_t) corenet_tcp_bind_all_ports(init_t) corenet_udp_bind_all_ports(init_t) +corenet_udp_bind_generic_node(init_t) ++corenet_tcp_bind_generic_node(init_t) dev_create_all_files(init_t) dev_create_all_chr_files(init_t) diff --git a/selinux-policy.changes b/selinux-policy.changes index e180311..fa2ba64 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Fri Mar 12 10:36:06 UTC 2021 - Ales Kedroutek + +- Adjust fix_init.patch to allow systemd to do sd-listen on + tcp socket [bsc#1183177] + ------------------------------------------------------------------- Tue Mar 9 13:39:11 UTC 2021 - Johannes Segitz