diff --git a/fedora-policy-20220624.tar.bz2 b/fedora-policy-20220624.tar.bz2 deleted file mode 100644 index 19e65ab..0000000 --- a/fedora-policy-20220624.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1cd368f29dfa53404b27e8cd3a055bf0a7f78214a4124b53b6ba616d00c7ff3e -size 731909 diff --git a/fedora-policy-20220714.tar.bz2 b/fedora-policy-20220714.tar.bz2 new file mode 100644 index 0000000..e44436d --- /dev/null +++ b/fedora-policy-20220714.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dc7e16b718c4b36fc790d0e55a41fb18226a17e8b5e079afe127e611d16276a9 +size 731294 diff --git a/fix_init.patch b/fix_init.patch index 239c74b..baf4749 100644 --- a/fix_init.patch +++ b/fix_init.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20220624/policy/modules/system/init.te +Index: fedora-policy-20220714/policy/modules/system/init.te =================================================================== ---- fedora-policy-20220624.orig/policy/modules/system/init.te -+++ fedora-policy-20220624/policy/modules/system/init.te +--- fedora-policy-20220714.orig/policy/modules/system/init.te ++++ fedora-policy-20220714/policy/modules/system/init.te @@ -187,6 +187,8 @@ allow init_t self:bpf { map_create map_r # setuid (from /sbin/shutdown) # sys_chroot (from /usr/bin/chroot): now provided by corecmd_chroot_exec_chroot() @@ -48,7 +48,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te optional_policy(` anaconda_stream_connect(init_t) anaconda_create_unix_stream_sockets(init_t) -@@ -580,10 +595,10 @@ tunable_policy(`init_audit_control',` +@@ -581,10 +596,10 @@ tunable_policy(`init_audit_control',` allow init_t self:system all_system_perms; allow init_t self:system module_load; allow init_t self:unix_dgram_socket { create_socket_perms sendto }; @@ -61,7 +61,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te allow init_t self:netlink_selinux_socket create_socket_perms; allow init_t self:unix_dgram_socket lock; # Until systemd is fixed -@@ -642,6 +657,7 @@ files_delete_all_spool_sockets(init_t) +@@ -643,6 +658,7 @@ files_delete_all_spool_sockets(init_t) files_create_var_lib_dirs(init_t) files_create_var_lib_symlinks(init_t) files_read_var_lib_symlinks(init_t) @@ -69,7 +69,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te files_manage_urandom_seed(init_t) files_list_locks(init_t) files_list_spool(init_t) -@@ -679,7 +695,7 @@ fs_list_all(init_t) +@@ -680,7 +696,7 @@ fs_list_all(init_t) fs_list_auto_mountpoints(init_t) fs_register_binary_executable_type(init_t) fs_relabel_tmpfs_sock_file(init_t) @@ -78,7 +78,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te fs_relabel_cgroup_dirs(init_t) fs_search_cgroup_dirs(init_t) # for network namespaces -@@ -735,6 +751,7 @@ systemd_write_inherited_logind_sessions_ +@@ -736,6 +752,7 @@ systemd_write_inherited_logind_sessions_ create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type) create_dirs_pattern(init_t, var_log_t, var_log_t) @@ -86,7 +86,7 @@ Index: fedora-policy-20220624/policy/modules/system/init.te auth_use_nsswitch(init_t) auth_rw_login_records(init_t) -@@ -1589,6 +1606,8 @@ optional_policy(` +@@ -1590,6 +1607,8 @@ optional_policy(` optional_policy(` postfix_list_spool(initrc_t) diff --git a/fix_systemd_watch.patch b/fix_systemd_watch.patch index 75af5b6..9c5f4ad 100644 --- a/fix_systemd_watch.patch +++ b/fix_systemd_watch.patch @@ -1,8 +1,8 @@ -Index: fedora-policy-20220428/policy/modules/system/systemd.te +Index: fedora-policy-20220714/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20220428.orig/policy/modules/system/systemd.te -+++ fedora-policy-20220428/policy/modules/system/systemd.te -@@ -1445,6 +1445,12 @@ fstools_rw_swap_files(systemd_sleep_t) +--- fedora-policy-20220714.orig/policy/modules/system/systemd.te ++++ fedora-policy-20220714/policy/modules/system/systemd.te +@@ -1447,6 +1447,12 @@ fstools_rw_swap_files(systemd_sleep_t) storage_getattr_fixed_disk_dev(systemd_sleep_t) storage_getattr_removable_dev(systemd_sleep_t) diff --git a/selinux-policy.changes b/selinux-policy.changes index 6d8445d..f3789d1 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Jul 14 08:44:12 UTC 2022 - Johannes Segitz + +- Update to version 20220714. Refreshed: + * fix_init.patch + * fix_systemd_watch.patch + ------------------------------------------------------------------- Wed Jul 13 07:48:41 UTC 2022 - Johannes Segitz diff --git a/selinux-policy.spec b/selinux-policy.spec index 5d3dfa9..de1a77b 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -33,7 +33,7 @@ Summary: SELinux policy configuration License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20220624 +Version: 20220714 Release: 0 Source: fedora-policy-%{version}.tar.bz2 Source1: selinux-policy-rpmlintrc