1
0

Accepting request 947457 from home:jsegitz:branches:security:SELinux

- Allow colord to use systemd hardenings (bsc#1194631)

OBS-URL: https://build.opensuse.org/request/show/947457
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=123
This commit is contained in:
Johannes Segitz 2022-01-19 15:57:54 +00:00 committed by Git OBS Bridge
parent 3e76bf7c4f
commit 445c681f20
3 changed files with 21 additions and 4 deletions

View File

@ -1,7 +1,7 @@
Index: fedora-policy/policy/modules/contrib/colord.fc
Index: fedora-policy-20211111/policy/modules/contrib/colord.fc
===================================================================
--- fedora-policy.orig/policy/modules/contrib/colord.fc
+++ fedora-policy/policy/modules/contrib/colord.fc
--- fedora-policy-20211111.orig/policy/modules/contrib/colord.fc
+++ fedora-policy-20211111/policy/modules/contrib/colord.fc
@@ -6,6 +6,8 @@
/usr/libexec/colord -- gen_context(system_u:object_r:colord_exec_t,s0)
@ -11,3 +11,15 @@ Index: fedora-policy/policy/modules/contrib/colord.fc
/usr/lib/systemd/system/colord.* -- gen_context(system_u:object_r:colord_unit_file_t,s0)
Index: fedora-policy-20211111/policy/modules/contrib/colord.te
===================================================================
--- fedora-policy-20211111.orig/policy/modules/contrib/colord.te
+++ fedora-policy-20211111/policy/modules/contrib/colord.te
@@ -17,6 +17,7 @@ type colord_t;
type colord_exec_t;
dbus_system_domain(colord_t, colord_exec_t)
init_daemon_domain(colord_t, colord_exec_t)
+init_nnp_daemon_domain(colord_t)
type colord_tmp_t;
files_tmp_file(colord_tmp_t)

View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Jan 14 15:07:00 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Allow colord to use systemd hardenings (bsc#1194631)
-------------------------------------------------------------------
Thu Nov 11 14:21:47 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package selinux-policy
#
# Copyright (c) 2021 SUSE LLC
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed