rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity

Accepting request 915716 from home:jsegitz:branches:security:SELinux

Browse Source 
- Modified fix_systemd.patch to allow systemd gpt generator access to
  udev files (bsc#1189280)

OBS-URL: https://build.opensuse.org/request/show/915716
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=119
This commit is contained in:
Johannes Segitz 2021-09-02 09:14:04 +00:00 committed by Git OBS Bridge
parent ec4c74f73a
commit 23c83e5de5
2 changed files with 20 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
fix_systemd.patch
View File

@ -1,8 +1,8 @@
Index: fedora-policy-20210628/policy/modules/system/systemd.te Index: fedora-policy-20210716/policy/modules/system/systemd.te
=================================================================== ===================================================================
--- fedora-policy-20210628.orig/policy/modules/system/systemd.te --- fedora-policy-20210716.orig/policy/modules/system/systemd.te
+++ fedora-policy-20210628/policy/modules/system/systemd.te +++ fedora-policy-20210716/policy/modules/system/systemd.te
@@ -347,6 +347,10 @@ userdom_manage_user_tmp_chr_files(system @@ -352,6 +352,10 @@ userdom_manage_user_tmp_chr_files(system
xserver_dbus_chat(systemd_logind_t) xserver_dbus_chat(systemd_logind_t)
optional_policy(` optional_policy(`
@ -13,7 +13,7 @@ Index: fedora-policy-20210628/policy/modules/system/systemd.te
apache_read_tmp_files(systemd_logind_t) apache_read_tmp_files(systemd_logind_t)
') ')
@@ -854,6 +858,10 @@ optional_policy(` @@ -859,6 +863,10 @@ optional_policy(`
udev_read_pid_files(systemd_hostnamed_t) udev_read_pid_files(systemd_hostnamed_t)
') ')
@ -24,3 +24,12 @@ Index: fedora-policy-20210628/policy/modules/system/systemd.te
####################################### #######################################
# #
# rfkill policy # rfkill policy
@@ -1097,6 +1105,8 @@ systemd_unit_file_filetrans(systemd_gpt_
systemd_create_unit_file_dirs(systemd_gpt_generator_t)
systemd_create_unit_file_lnk(systemd_gpt_generator_t)
+udev_read_pid_files(systemd_gpt_generator_t)
+
#######################################
#
# systemd_resolved domain

6
selinux-policy.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Thu Sep 2 08:45:24 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Modified fix_systemd.patch to allow systemd gpt generator access to
udev files (bsc#1189280)
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Aug 27 13:07:54 UTC 2021 - Ales Kedroutek <ales.kedroutek@suse.com> Fri Aug 27 13:07:54 UTC 2021 - Ales Kedroutek <ales.kedroutek@suse.com>