rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity

Accepting request 989143 from security:SELinux

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/989143
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=28
This commit is contained in:
Richard Brown 2022-07-18 16:32:44 +00:00 committed by Git OBS Bridge
parent ffb5e7da5e
commit 9a0c018a4e
6 changed files with 23 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
fedora-policy-20220624.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1cd368f29dfa53404b27e8cd3a055bf0a7f78214a4124b53b6ba616d00c7ff3e
size 731909

3
fedora-policy-20220714.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:dc7e16b718c4b36fc790d0e55a41fb18226a17e8b5e079afe127e611d16276a9
size 731294

16
fix_init.patch
View File

@ -1,7 +1,7 @@
Index: fedora-policy-20220624/policy/modules/system/init.te
Index: fedora-policy-20220714/policy/modules/system/init.te
===================================================================
--- fedora-policy-20220624.orig/policy/modules/system/init.te
+++ fedora-policy-20220624/policy/modules/system/init.te
--- fedora-policy-20220714.orig/policy/modules/system/init.te
+++ fedora-policy-20220714/policy/modules/system/init.te
@@ -187,6 +187,8 @@ allow init_t self:bpf { map_create map_r
# setuid (from /sbin/shutdown)
# sys_chroot (from /usr/bin/chroot): now provided by corecmd_chroot_exec_chroot()
@ -48,7 +48,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te
optional_policy(`
anaconda_stream_connect(init_t)
anaconda_create_unix_stream_sockets(init_t)
@@ -580,10 +595,10 @@ tunable_policy(`init_audit_control',`
@@ -581,10 +596,10 @@ tunable_policy(`init_audit_control',`
allow init_t self:system all_system_perms;
allow init_t self:system module_load;
allow init_t self:unix_dgram_socket { create_socket_perms sendto };
@ -61,7 +61,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te
allow init_t self:netlink_selinux_socket create_socket_perms;
allow init_t self:unix_dgram_socket lock;
# Until systemd is fixed
@@ -642,6 +657,7 @@ files_delete_all_spool_sockets(init_t)
@@ -643,6 +658,7 @@ files_delete_all_spool_sockets(init_t)
files_create_var_lib_dirs(init_t)
files_create_var_lib_symlinks(init_t)
files_read_var_lib_symlinks(init_t)
@ -69,7 +69,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te
files_manage_urandom_seed(init_t)
files_list_locks(init_t)
files_list_spool(init_t)
@@ -679,7 +695,7 @@ fs_list_all(init_t)
@@ -680,7 +696,7 @@ fs_list_all(init_t)
fs_list_auto_mountpoints(init_t)
fs_register_binary_executable_type(init_t)
fs_relabel_tmpfs_sock_file(init_t)
@ -78,7 +78,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te
fs_relabel_cgroup_dirs(init_t)
fs_search_cgroup_dirs(init_t)
# for network namespaces
@@ -735,6 +751,7 @@ systemd_write_inherited_logind_sessions_
@@ -736,6 +752,7 @@ systemd_write_inherited_logind_sessions_
create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type)
create_dirs_pattern(init_t, var_log_t, var_log_t)
@ -86,7 +86,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te
auth_use_nsswitch(init_t)
auth_rw_login_records(init_t)
@@ -1589,6 +1606,8 @@ optional_policy(`
@@ -1590,6 +1607,8 @@ optional_policy(`
optional_policy(`
postfix_list_spool(initrc_t)

8
fix_systemd_watch.patch
View File

@ -1,8 +1,8 @@
Index: fedora-policy-20220428/policy/modules/system/systemd.te
Index: fedora-policy-20220714/policy/modules/system/systemd.te
===================================================================
--- fedora-policy-20220428.orig/policy/modules/system/systemd.te
+++ fedora-policy-20220428/policy/modules/system/systemd.te
@@ -1445,6 +1445,12 @@ fstools_rw_swap_files(systemd_sleep_t)
--- fedora-policy-20220714.orig/policy/modules/system/systemd.te
+++ fedora-policy-20220714/policy/modules/system/systemd.te
@@ -1447,6 +1447,12 @@ fstools_rw_swap_files(systemd_sleep_t)
storage_getattr_fixed_disk_dev(systemd_sleep_t)
storage_getattr_removable_dev(systemd_sleep_t)

7
selinux-policy.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Thu Jul 14 08:44:12 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Update to version 20220714. Refreshed:
* fix_init.patch
* fix_systemd_watch.patch
-------------------------------------------------------------------
Wed Jul 13 07:48:41 UTC 2022 - Johannes Segitz <jsegitz@suse.com>

2
selinux-policy.spec
View File

@ -33,7 +33,7 @@ Summary: SELinux policy configuration
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
Version: 20220624
Version: 20220714
Release: 0
Source: fedora-policy-%{version}.tar.bz2
Source1: selinux-policy-rpmlintrc