diff --git a/fix_colord.patch b/fix_colord.patch index c11b27b..763641f 100644 --- a/fix_colord.patch +++ b/fix_colord.patch @@ -1,7 +1,7 @@ -Index: fedora-policy/policy/modules/contrib/colord.fc +Index: fedora-policy-20211111/policy/modules/contrib/colord.fc =================================================================== ---- fedora-policy.orig/policy/modules/contrib/colord.fc -+++ fedora-policy/policy/modules/contrib/colord.fc +--- fedora-policy-20211111.orig/policy/modules/contrib/colord.fc ++++ fedora-policy-20211111/policy/modules/contrib/colord.fc @@ -6,6 +6,8 @@ /usr/libexec/colord -- gen_context(system_u:object_r:colord_exec_t,s0) @@ -11,3 +11,15 @@ Index: fedora-policy/policy/modules/contrib/colord.fc /usr/lib/systemd/system/colord.* -- gen_context(system_u:object_r:colord_unit_file_t,s0) +Index: fedora-policy-20211111/policy/modules/contrib/colord.te +=================================================================== +--- fedora-policy-20211111.orig/policy/modules/contrib/colord.te ++++ fedora-policy-20211111/policy/modules/contrib/colord.te +@@ -17,6 +17,7 @@ type colord_t; + type colord_exec_t; + dbus_system_domain(colord_t, colord_exec_t) + init_daemon_domain(colord_t, colord_exec_t) ++init_nnp_daemon_domain(colord_t) + + type colord_tmp_t; + files_tmp_file(colord_tmp_t) diff --git a/selinux-policy.changes b/selinux-policy.changes index 5fc9185..87ce04b 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Jan 14 15:07:00 UTC 2022 - Johannes Segitz + +- Allow colord to use systemd hardenings (bsc#1194631) + ------------------------------------------------------------------- Thu Nov 11 14:21:47 UTC 2021 - Johannes Segitz diff --git a/selinux-policy.spec b/selinux-policy.spec index b90c137..28271da 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,7 +1,7 @@ # # spec file for package selinux-policy # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed