rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity

Accepting request 886700 from home:jsegitz:branches:security:SELinux

Browse Source 
- Update to version 20210419
- Refreshed:
  * fix_dbus.patch
  * fix_hadoop.patch
  * fix_init.patch
  * fix_unprivuser.patch

OBS-URL: https://build.opensuse.org/request/show/886700
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=99
This commit is contained in:
Johannes Segitz 2021-04-19 13:39:08 +00:00 committed by Git OBS Bridge
parent 095423f93a
commit 8ca14f4905
8 changed files with 43 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
fedora-policy-20210309.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1be28f48aa50cfd99922a255ed86a9878f721b502882b1843608c8d3a6cc3181
size 720666

3
fedora-policy-20210419.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ad36b63becbe4fb8a7ac5597b58360c8ebaf7f15ec6681d3170ec16dc2e7a650
size 721823

8
fix_dbus.patch
View File

@ -1,11 +1,11 @@
Index: fedora-policy/policy/modules/contrib/dbus.te
Index: fedora-policy-20210419/policy/modules/contrib/dbus.te
===================================================================
--- fedora-policy.orig/policy/modules/contrib/dbus.te 2020-02-25 08:22:02.846623845 +0000
+++ fedora-policy/policy/modules/contrib/dbus.te 2020-02-25 08:22:31.991108418 +0000
--- fedora-policy-20210419.orig/policy/modules/contrib/dbus.te
+++ fedora-policy-20210419/policy/modules/contrib/dbus.te
@@ -80,6 +80,7 @@ read_lnk_files_pattern(system_dbusd_t, d
manage_dirs_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t)
manage_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t)
files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { file dir })
files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file sock_file })
+allow system_dbusd_t system_dbusd_tmp_t:file execute;
manage_files_pattern(system_dbusd_t, system_dbusd_tmpfs_t, system_dbusd_tmpfs_t)

14
fix_hadoop.patch
View File

@ -1,7 +1,7 @@
Index: fedora-policy-20210309/policy/modules/roles/sysadm.te
Index: fedora-policy-20210419/policy/modules/roles/sysadm.te
===================================================================
--- fedora-policy-20210309.orig/policy/modules/roles/sysadm.te
+++ fedora-policy-20210309/policy/modules/roles/sysadm.te
--- fedora-policy-20210419.orig/policy/modules/roles/sysadm.te
+++ fedora-policy-20210419/policy/modules/roles/sysadm.te
@@ -298,10 +298,6 @@ optional_policy(`
')
@ -13,11 +13,11 @@ Index: fedora-policy-20210309/policy/modules/roles/sysadm.te
iotop_run(sysadm_t, sysadm_r)
')
Index: fedora-policy-20210309/policy/modules/roles/unprivuser.te
Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te
===================================================================
--- fedora-policy-20210309.orig/policy/modules/roles/unprivuser.te
+++ fedora-policy-20210309/policy/modules/roles/unprivuser.te
@@ -200,10 +200,6 @@ ifndef(`distro_redhat',`
--- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te
+++ fedora-policy-20210419/policy/modules/roles/unprivuser.te
@@ -209,10 +209,6 @@ ifndef(`distro_redhat',`
')
optional_policy(`

28
fix_init.patch
View File

@ -1,7 +1,7 @@
Index: fedora-policy-20210309/policy/modules/system/init.if
Index: fedora-policy-20210419/policy/modules/system/init.if
===================================================================
--- fedora-policy-20210309.orig/policy/modules/system/init.if
+++ fedora-policy-20210309/policy/modules/system/init.if
--- fedora-policy-20210419.orig/policy/modules/system/init.if
+++ fedora-policy-20210419/policy/modules/system/init.if
@@ -3242,6 +3242,7 @@ interface(`init_filetrans_named_content'
files_etc_filetrans($1, machineid_t, file, "machine-id" )
files_pid_filetrans($1, initctl_t, fifo_file, "fifo" )
@ -10,11 +10,11 @@ Index: fedora-policy-20210309/policy/modules/system/init.if
init_pid_filetrans($1, systemd_unit_file_t, dir, "system")
')
Index: fedora-policy-20210309/policy/modules/system/init.te
Index: fedora-policy-20210419/policy/modules/system/init.te
===================================================================
--- fedora-policy-20210309.orig/policy/modules/system/init.te
+++ fedora-policy-20210309/policy/modules/system/init.te
@@ -262,6 +262,8 @@ corecmd_exec_bin(init_t)
--- fedora-policy-20210419.orig/policy/modules/system/init.te
+++ fedora-policy-20210419/policy/modules/system/init.te
@@ -269,6 +269,8 @@ corecmd_exec_bin(init_t)
corenet_all_recvfrom_netlabel(init_t)
corenet_tcp_bind_all_ports(init_t)
corenet_udp_bind_all_ports(init_t)
@ -23,7 +23,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
dev_create_all_files(init_t)
dev_create_all_chr_files(init_t)
@@ -390,6 +391,7 @@ logging_manage_audit_config(init_t)
@@ -397,6 +399,7 @@ logging_manage_audit_config(init_t)
logging_create_syslog_netlink_audit_socket(init_t)
logging_write_var_log_dirs(init_t)
logging_manage_var_log_symlinks(init_t)
@ -31,7 +31,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
seutil_read_config(init_t)
seutil_read_login_config(init_t)
@@ -439,11 +441,16 @@ ifdef(`distro_redhat',`
@@ -446,11 +449,16 @@ ifdef(`distro_redhat',`
corecmd_shell_domtrans(init_t, initrc_t)
storage_raw_rw_fixed_disk(init_t)
@ -48,7 +48,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
bootloader_domtrans(init_t)
')
@@ -557,10 +564,10 @@ tunable_policy(`init_create_dirs',`
@@ -568,10 +576,10 @@ tunable_policy(`init_audit_control',`
allow init_t self:system all_system_perms;
allow init_t self:system module_load;
allow init_t self:unix_dgram_socket { create_socket_perms sendto };
@ -61,7 +61,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
allow init_t self:netlink_selinux_socket create_socket_perms;
allow init_t self:unix_dgram_socket lock;
# Until systemd is fixed
@@ -618,6 +625,7 @@ files_delete_all_spool_sockets(init_t)
@@ -629,6 +637,7 @@ files_delete_all_spool_sockets(init_t)
files_create_var_lib_dirs(init_t)
files_create_var_lib_symlinks(init_t)
files_read_var_lib_symlinks(init_t)
@ -69,7 +69,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
files_manage_urandom_seed(init_t)
files_list_locks(init_t)
files_list_spool(init_t)
@@ -654,7 +662,7 @@ fs_list_all(init_t)
@@ -665,7 +674,7 @@ fs_list_all(init_t)
fs_list_auto_mountpoints(init_t)
fs_register_binary_executable_type(init_t)
fs_relabel_tmpfs_sock_file(init_t)
@ -78,7 +78,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
fs_relabel_cgroup_dirs(init_t)
fs_search_cgroup_dirs(init_t)
# for network namespaces
@@ -710,6 +718,7 @@ systemd_write_inherited_logind_sessions_
@@ -721,6 +730,7 @@ systemd_write_inherited_logind_sessions_
create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type)
create_dirs_pattern(init_t, var_log_t, var_log_t)
@ -86,7 +86,7 @@ Index: fedora-policy-20210309/policy/modules/system/init.te
auth_use_nsswitch(init_t)
auth_rw_login_records(init_t)
@@ -1563,6 +1572,8 @@ optional_policy(`
@@ -1574,6 +1584,8 @@ optional_policy(`
optional_policy(`
postfix_list_spool(initrc_t)

8
fix_unprivuser.patch
View File

@ -1,8 +1,8 @@
Index: fedora-policy-20210309/policy/modules/roles/unprivuser.te
Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te
===================================================================
--- fedora-policy-20210309.orig/policy/modules/roles/unprivuser.te
+++ fedora-policy-20210309/policy/modules/roles/unprivuser.te
@@ -282,6 +282,13 @@ ifndef(`distro_redhat',`
--- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te
+++ fedora-policy-20210419/policy/modules/roles/unprivuser.te
@@ -291,6 +291,13 @@ ifndef(`distro_redhat',`
')
optional_policy(`

10
selinux-policy.changes
View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Mon Apr 19 11:37:49 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Update to version 20210419
- Refreshed:
* fix_dbus.patch
* fix_hadoop.patch
* fix_init.patch
* fix_unprivuser.patch
-------------------------------------------------------------------
Fri Mar 12 10:36:06 UTC 2021 - Ales Kedroutek <ales.kedroutek@suse.com>

2
selinux-policy.spec
View File

@ -33,7 +33,7 @@ Summary: SELinux policy configuration
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
Version: 20210309
Version: 20210419
Release: 0
Source: fedora-policy-%{version}.tar.bz2
Source1: selinux-policy-rpmlintrc