rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity

Accepting request 888009 from home:jsegitz:branches:security:SELinux

Browse Source 
- Transition unconfined users to ldconfig type (bsc#1183121).
  Extended fix_unconfineduser.patch

OBS-URL: https://build.opensuse.org/request/show/888009
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=101
This commit is contained in:
Johannes Segitz 2021-04-23 11:50:03 +00:00 committed by Git OBS Bridge
parent 8ca14f4905
commit 0bda3469f4
2 changed files with 20 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
fix_unconfineduser.patch
View File

@ -1,7 +1,7 @@
Index: fedora-policy-20210309/policy/modules/roles/unconfineduser.te
Index: fedora-policy-20210419/policy/modules/roles/unconfineduser.te
===================================================================
--- fedora-policy-20210309.orig/policy/modules/roles/unconfineduser.te
+++ fedora-policy-20210309/policy/modules/roles/unconfineduser.te
--- fedora-policy-20210419.orig/policy/modules/roles/unconfineduser.te
+++ fedora-policy-20210419/policy/modules/roles/unconfineduser.te
@@ -124,6 +124,11 @@ tunable_policy(`unconfined_dyntrans_all'
domain_dyntrans(unconfined_t)
')
@ -44,3 +44,14 @@ Index: fedora-policy-20210309/policy/modules/roles/unconfineduser.te
bluetooth_dbus_chat(unconfined_t)
')
@@ -311,6 +332,10 @@ optional_policy(`
')
optional_policy(`
+ libs_run_ldconfig(unconfined_t, unconfined_r)
+')
+
+optional_policy(`
firstboot_run(unconfined_t, unconfined_r)
')

6
selinux-policy.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri Apr 23 10:50:24 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Transition unconfined users to ldconfig type (bsc#1183121).
Extended fix_unconfineduser.patch
-------------------------------------------------------------------
Mon Apr 19 11:37:49 UTC 2021 - Johannes Segitz <jsegitz@suse.com>