diff --git a/fedora-policy-20210716.tar.bz2 b/fedora-policy-20210716.tar.bz2 deleted file mode 100644 index f558fe3..0000000 --- a/fedora-policy-20210716.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c72911f7b3d31ad5988df36f18c96337a5870044fc42be38dc6bbdd9caa95682 -size 710155 diff --git a/fedora-policy-20211111.tar.bz2 b/fedora-policy-20211111.tar.bz2 new file mode 100644 index 0000000..eb8aedb --- /dev/null +++ b/fedora-policy-20211111.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:92e84c558e4c1a8d389205ddfc1e8b00f8a872585f01e05a7650b15e55643f2a +size 714235 diff --git a/fix_auditd.patch b/fix_auditd.patch index 59e2004..d4d94e0 100644 --- a/fix_auditd.patch +++ b/fix_auditd.patch @@ -1,6 +1,8 @@ ---- a/policy/modules/system/logging.if -+++ b/policy/modules/system/logging.if -@@ -430,6 +430,7 @@ interface(`logging_manage_audit_config', +Index: fedora-policy-20211111/policy/modules/system/logging.if +=================================================================== +--- fedora-policy-20211111.orig/policy/modules/system/logging.if ++++ fedora-policy-20211111/policy/modules/system/logging.if +@@ -431,6 +431,7 @@ interface(`logging_manage_audit_config', files_search_etc($1) manage_files_pattern($1, auditd_etc_t, auditd_etc_t) diff --git a/fix_authlogin.patch b/fix_authlogin.patch index 4592a10..7220120 100644 --- a/fix_authlogin.patch +++ b/fix_authlogin.patch @@ -1,10 +1,10 @@ -Index: fedora-policy/policy/modules/system/authlogin.fc +Index: fedora-policy-20211111/policy/modules/system/authlogin.fc =================================================================== ---- fedora-policy.orig/policy/modules/system/authlogin.fc -+++ fedora-policy/policy/modules/system/authlogin.fc -@@ -49,6 +49,7 @@ ifdef(`distro_gentoo', ` - /usr/sbin/validate -- gen_context(system_u:object_r:chkpwd_exec_t,s0) - +--- fedora-policy-20211111.orig/policy/modules/system/authlogin.fc ++++ fedora-policy-20211111/policy/modules/system/authlogin.fc +@@ -56,6 +56,7 @@ ifdef(`distro_gentoo', ` + /usr/libexec/chkpwd/tcb_chkpwd -- gen_context(system_u:object_r:chkpwd_exec_t,s0) + /usr/libexec/chkpwd/tcb_updpwd -- gen_context(system_u:object_r:updpwd_exec_t,s0) /usr/libexec/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) +/usr/lib/utempter/utempter -- gen_context(system_u:object_r:utempter_exec_t,s0) diff --git a/fix_chronyd.patch b/fix_chronyd.patch index e67a7cb..4ec73ce 100644 --- a/fix_chronyd.patch +++ b/fix_chronyd.patch @@ -1,8 +1,8 @@ -Index: fedora-policy-20210309/policy/modules/contrib/chronyd.te +Index: fedora-policy-20211111/policy/modules/contrib/chronyd.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/chronyd.te -+++ fedora-policy-20210309/policy/modules/contrib/chronyd.te -@@ -140,6 +140,14 @@ systemd_exec_systemctl(chronyd_t) +--- fedora-policy-20211111.orig/policy/modules/contrib/chronyd.te ++++ fedora-policy-20211111/policy/modules/contrib/chronyd.te +@@ -141,6 +141,14 @@ systemd_exec_systemctl(chronyd_t) userdom_dgram_send(chronyd_t) optional_policy(` @@ -17,10 +17,10 @@ Index: fedora-policy-20210309/policy/modules/contrib/chronyd.te cron_dgram_send(chronyd_t) ') -Index: fedora-policy-20210309/policy/modules/contrib/chronyd.fc +Index: fedora-policy-20211111/policy/modules/contrib/chronyd.fc =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/chronyd.fc -+++ fedora-policy-20210309/policy/modules/contrib/chronyd.fc +--- fedora-policy-20211111.orig/policy/modules/contrib/chronyd.fc ++++ fedora-policy-20211111/policy/modules/contrib/chronyd.fc @@ -6,6 +6,7 @@ /usr/sbin/chronyd -- gen_context(system_u:object_r:chronyd_exec_t,s0) diff --git a/fix_dbus.patch b/fix_dbus.patch index 3a50979..64ab643 100644 --- a/fix_dbus.patch +++ b/fix_dbus.patch @@ -1,10 +1,10 @@ -Index: fedora-policy-20210419/policy/modules/contrib/dbus.te +Index: fedora-policy-20211111/policy/modules/contrib/dbus.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/contrib/dbus.te -+++ fedora-policy-20210419/policy/modules/contrib/dbus.te -@@ -80,6 +80,7 @@ read_lnk_files_pattern(system_dbusd_t, d - manage_dirs_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) +--- fedora-policy-20211111.orig/policy/modules/contrib/dbus.te ++++ fedora-policy-20211111/policy/modules/contrib/dbus.te +@@ -81,6 +81,7 @@ manage_dirs_pattern(system_dbusd_t, syst manage_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) + manage_sock_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file sock_file }) +allow system_dbusd_t system_dbusd_tmp_t:file execute; diff --git a/fix_firewalld.patch b/fix_firewalld.patch index 5b5e67e..1e455b7 100644 --- a/fix_firewalld.patch +++ b/fix_firewalld.patch @@ -1,8 +1,8 @@ -Index: fedora-policy/policy/modules/contrib/firewalld.te +Index: fedora-policy-20211111/policy/modules/contrib/firewalld.te =================================================================== ---- fedora-policy.orig/policy/modules/contrib/firewalld.te 2020-02-24 08:16:03.798820784 +0000 -+++ fedora-policy/policy/modules/contrib/firewalld.te 2020-02-24 08:18:03.164764310 +0000 -@@ -129,6 +129,7 @@ optional_policy(` +--- fedora-policy-20211111.orig/policy/modules/contrib/firewalld.te ++++ fedora-policy-20211111/policy/modules/contrib/firewalld.te +@@ -131,6 +131,7 @@ optional_policy(` ') optional_policy(` @@ -10,10 +10,10 @@ Index: fedora-policy/policy/modules/contrib/firewalld.te iptables_domtrans(firewalld_t) iptables_read_var_run(firewalld_t) ') -Index: fedora-policy/policy/modules/system/iptables.if +Index: fedora-policy-20211111/policy/modules/system/iptables.if =================================================================== ---- fedora-policy.orig/policy/modules/system/iptables.if 2020-02-19 09:36:25.440182406 +0000 -+++ fedora-policy/policy/modules/system/iptables.if 2020-02-24 08:17:53.076600108 +0000 +--- fedora-policy-20211111.orig/policy/modules/system/iptables.if ++++ fedora-policy-20211111/policy/modules/system/iptables.if @@ -2,6 +2,25 @@ ######################################## diff --git a/fix_hadoop.patch b/fix_hadoop.patch index 99c9878..edc1bdc 100644 --- a/fix_hadoop.patch +++ b/fix_hadoop.patch @@ -1,8 +1,8 @@ -Index: fedora-policy-20210628/policy/modules/roles/sysadm.te +Index: fedora-policy-20211111/policy/modules/roles/sysadm.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/roles/sysadm.te -+++ fedora-policy-20210628/policy/modules/roles/sysadm.te -@@ -295,10 +295,6 @@ optional_policy(` +--- fedora-policy-20211111.orig/policy/modules/roles/sysadm.te ++++ fedora-policy-20211111/policy/modules/roles/sysadm.te +@@ -311,10 +311,6 @@ optional_policy(` ') optional_policy(` @@ -13,10 +13,10 @@ Index: fedora-policy-20210628/policy/modules/roles/sysadm.te iotop_run(sysadm_t, sysadm_r) ') -Index: fedora-policy-20210628/policy/modules/roles/unprivuser.te +Index: fedora-policy-20211111/policy/modules/roles/unprivuser.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/roles/unprivuser.te -+++ fedora-policy-20210628/policy/modules/roles/unprivuser.te +--- fedora-policy-20211111.orig/policy/modules/roles/unprivuser.te ++++ fedora-policy-20211111/policy/modules/roles/unprivuser.te @@ -205,10 +205,6 @@ ifndef(`distro_redhat',` ') diff --git a/fix_init.patch b/fix_init.patch index ed85022..247dad3 100644 --- a/fix_init.patch +++ b/fix_init.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210716/policy/modules/system/init.if +Index: fedora-policy-20211111/policy/modules/system/init.if =================================================================== ---- fedora-policy-20210716.orig/policy/modules/system/init.if -+++ fedora-policy-20210716/policy/modules/system/init.if +--- fedora-policy-20211111.orig/policy/modules/system/init.if ++++ fedora-policy-20211111/policy/modules/system/init.if @@ -3296,6 +3296,7 @@ interface(`init_filetrans_named_content' files_etc_filetrans($1, machineid_t, file, "machine-id" ) files_pid_filetrans($1, initctl_t, fifo_file, "fifo" ) @@ -10,10 +10,10 @@ Index: fedora-policy-20210716/policy/modules/system/init.if init_pid_filetrans($1, systemd_unit_file_t, dir, "system") ') -Index: fedora-policy-20210716/policy/modules/system/init.te +Index: fedora-policy-20211111/policy/modules/system/init.te =================================================================== ---- fedora-policy-20210716.orig/policy/modules/system/init.te -+++ fedora-policy-20210716/policy/modules/system/init.te +--- fedora-policy-20211111.orig/policy/modules/system/init.te ++++ fedora-policy-20211111/policy/modules/system/init.te @@ -267,6 +267,8 @@ corecmd_exec_bin(init_t) corenet_all_recvfrom_netlabel(init_t) corenet_tcp_bind_all_ports(init_t) @@ -23,7 +23,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te dev_create_all_files(init_t) dev_create_all_chr_files(init_t) -@@ -391,6 +393,7 @@ logging_manage_audit_config(init_t) +@@ -394,6 +396,7 @@ logging_manage_audit_config(init_t) logging_create_syslog_netlink_audit_socket(init_t) logging_write_var_log_dirs(init_t) logging_manage_var_log_symlinks(init_t) @@ -31,7 +31,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te seutil_read_config(init_t) seutil_read_login_config(init_t) -@@ -441,10 +444,15 @@ ifdef(`distro_redhat',` +@@ -444,10 +447,15 @@ ifdef(`distro_redhat',` corecmd_shell_domtrans(init_t, initrc_t) storage_raw_rw_fixed_disk(init_t) @@ -47,7 +47,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te bootloader_domtrans(init_t) ') -@@ -562,10 +570,10 @@ tunable_policy(`init_audit_control',` +@@ -570,10 +578,10 @@ tunable_policy(`init_audit_control',` allow init_t self:system all_system_perms; allow init_t self:system module_load; allow init_t self:unix_dgram_socket { create_socket_perms sendto }; @@ -60,7 +60,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te allow init_t self:netlink_selinux_socket create_socket_perms; allow init_t self:unix_dgram_socket lock; # Until systemd is fixed -@@ -623,6 +631,7 @@ files_delete_all_spool_sockets(init_t) +@@ -631,6 +639,7 @@ files_delete_all_spool_sockets(init_t) files_create_var_lib_dirs(init_t) files_create_var_lib_symlinks(init_t) files_read_var_lib_symlinks(init_t) @@ -68,7 +68,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te files_manage_urandom_seed(init_t) files_list_locks(init_t) files_list_spool(init_t) -@@ -659,7 +668,7 @@ fs_list_all(init_t) +@@ -667,7 +676,7 @@ fs_list_all(init_t) fs_list_auto_mountpoints(init_t) fs_register_binary_executable_type(init_t) fs_relabel_tmpfs_sock_file(init_t) @@ -77,7 +77,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te fs_relabel_cgroup_dirs(init_t) fs_search_cgroup_dirs(init_t) # for network namespaces -@@ -715,6 +724,7 @@ systemd_write_inherited_logind_sessions_ +@@ -723,6 +732,7 @@ systemd_write_inherited_logind_sessions_ create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type) create_dirs_pattern(init_t, var_log_t, var_log_t) @@ -85,7 +85,7 @@ Index: fedora-policy-20210716/policy/modules/system/init.te auth_use_nsswitch(init_t) auth_rw_login_records(init_t) -@@ -1556,6 +1566,8 @@ optional_policy(` +@@ -1568,6 +1578,8 @@ optional_policy(` optional_policy(` postfix_list_spool(initrc_t) diff --git a/fix_kernel_sysctl.patch b/fix_kernel_sysctl.patch index 757d195..8ed096e 100644 --- a/fix_kernel_sysctl.patch +++ b/fix_kernel_sysctl.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210716/policy/modules/kernel/files.fc +Index: fedora-policy-20211111/policy/modules/kernel/files.fc =================================================================== ---- fedora-policy-20210716.orig/policy/modules/kernel/files.fc -+++ fedora-policy-20210716/policy/modules/kernel/files.fc +--- fedora-policy-20211111.orig/policy/modules/kernel/files.fc ++++ fedora-policy-20211111/policy/modules/kernel/files.fc @@ -236,6 +236,8 @@ ifdef(`distro_redhat',` /usr/lib/ostree-boot(/.*)? gen_context(system_u:object_r:usr_t,s0) /usr/lib/modules(/.*)/vmlinuz -- gen_context(system_u:object_r:usr_t,s0) @@ -11,11 +11,11 @@ Index: fedora-policy-20210716/policy/modules/kernel/files.fc /usr/doc(/.*)?/lib(/.*)? gen_context(system_u:object_r:usr_t,s0) -Index: fedora-policy-20210716/policy/modules/system/systemd.te +Index: fedora-policy-20211111/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20210716.orig/policy/modules/system/systemd.te -+++ fedora-policy-20210716/policy/modules/system/systemd.te -@@ -1027,6 +1027,8 @@ init_stream_connect(systemd_sysctl_t) +--- fedora-policy-20211111.orig/policy/modules/system/systemd.te ++++ fedora-policy-20211111/policy/modules/system/systemd.te +@@ -1035,6 +1035,8 @@ init_stream_connect(systemd_sysctl_t) logging_send_syslog_msg(systemd_sysctl_t) systemd_read_efivarfs(systemd_sysctl_t) diff --git a/fix_logging.patch b/fix_logging.patch index 8f3a10d..0ae3fec 100644 --- a/fix_logging.patch +++ b/fix_logging.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210628/policy/modules/system/logging.fc +Index: fedora-policy-20211111/policy/modules/system/logging.fc =================================================================== ---- fedora-policy-20210628.orig/policy/modules/system/logging.fc -+++ fedora-policy-20210628/policy/modules/system/logging.fc +--- fedora-policy-20211111.orig/policy/modules/system/logging.fc ++++ fedora-policy-20211111/policy/modules/system/logging.fc @@ -3,6 +3,8 @@ /etc/rsyslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) /etc/syslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) @@ -19,11 +19,11 @@ Index: fedora-policy-20210628/policy/modules/system/logging.fc /var/run/systemd/journal/syslog -s gen_context(system_u:object_r:devlog_t,mls_systemhigh) /var/spool/audit(/.*)? gen_context(system_u:object_r:audit_spool_t,mls_systemhigh) -Index: fedora-policy-20210628/policy/modules/system/logging.if +Index: fedora-policy-20211111/policy/modules/system/logging.if =================================================================== ---- fedora-policy-20210628.orig/policy/modules/system/logging.if -+++ fedora-policy-20210628/policy/modules/system/logging.if -@@ -1782,3 +1782,22 @@ interface(`logging_dgram_send',` +--- fedora-policy-20211111.orig/policy/modules/system/logging.if ++++ fedora-policy-20211111/policy/modules/system/logging.if +@@ -1787,3 +1787,22 @@ interface(`logging_dgram_send',` allow $1 syslogd_t:unix_dgram_socket sendto; ') diff --git a/fix_networkmanager.patch b/fix_networkmanager.patch index abaa320..6dcab29 100644 --- a/fix_networkmanager.patch +++ b/fix_networkmanager.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210628/policy/modules/contrib/networkmanager.te +Index: fedora-policy-20211111/policy/modules/contrib/networkmanager.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/contrib/networkmanager.te -+++ fedora-policy-20210628/policy/modules/contrib/networkmanager.te +--- fedora-policy-20211111.orig/policy/modules/contrib/networkmanager.te ++++ fedora-policy-20211111/policy/modules/contrib/networkmanager.te @@ -243,6 +243,9 @@ userdom_read_home_certs(NetworkManager_t userdom_read_user_home_content_files(NetworkManager_t) userdom_dgram_send(NetworkManager_t) @@ -27,11 +27,11 @@ Index: fedora-policy-20210628/policy/modules/contrib/networkmanager.te bind_domtrans(NetworkManager_t) bind_manage_cache(NetworkManager_t) bind_kill(NetworkManager_t) -Index: fedora-policy-20210628/policy/modules/contrib/networkmanager.if +Index: fedora-policy-20211111/policy/modules/contrib/networkmanager.if =================================================================== ---- fedora-policy-20210628.orig/policy/modules/contrib/networkmanager.if -+++ fedora-policy-20210628/policy/modules/contrib/networkmanager.if -@@ -114,6 +114,24 @@ interface(`networkmanager_initrc_domtran +--- fedora-policy-20211111.orig/policy/modules/contrib/networkmanager.if ++++ fedora-policy-20211111/policy/modules/contrib/networkmanager.if +@@ -132,6 +132,24 @@ interface(`networkmanager_initrc_domtran init_labeled_script_domtrans($1, NetworkManager_initrc_exec_t) ') diff --git a/fix_systemd.patch b/fix_systemd.patch index bdab982..ae8dc7e 100644 --- a/fix_systemd.patch +++ b/fix_systemd.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210716/policy/modules/system/systemd.te +Index: fedora-policy-20211111/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20210716.orig/policy/modules/system/systemd.te -+++ fedora-policy-20210716/policy/modules/system/systemd.te +--- fedora-policy-20211111.orig/policy/modules/system/systemd.te ++++ fedora-policy-20211111/policy/modules/system/systemd.te @@ -352,6 +352,10 @@ userdom_manage_user_tmp_chr_files(system xserver_dbus_chat(systemd_logind_t) @@ -13,7 +13,7 @@ Index: fedora-policy-20210716/policy/modules/system/systemd.te apache_read_tmp_files(systemd_logind_t) ') -@@ -859,6 +863,10 @@ optional_policy(` +@@ -866,6 +870,10 @@ optional_policy(` udev_read_pid_files(systemd_hostnamed_t) ') @@ -24,9 +24,9 @@ Index: fedora-policy-20210716/policy/modules/system/systemd.te ####################################### # # rfkill policy -@@ -1097,6 +1105,8 @@ systemd_unit_file_filetrans(systemd_gpt_ - systemd_create_unit_file_dirs(systemd_gpt_generator_t) - systemd_create_unit_file_lnk(systemd_gpt_generator_t) +@@ -1109,6 +1117,8 @@ optional_policy(` + udev_read_pid_files(systemd_gpt_generator_t) + ') +udev_read_pid_files(systemd_gpt_generator_t) + diff --git a/fix_systemd_watch.patch b/fix_systemd_watch.patch index 65b98c8..6771ad7 100644 --- a/fix_systemd_watch.patch +++ b/fix_systemd_watch.patch @@ -1,10 +1,10 @@ -Index: fedora-policy-20210716/policy/modules/system/systemd.te +Index: fedora-policy-20211111/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20210716.orig/policy/modules/system/systemd.te -+++ fedora-policy-20210716/policy/modules/system/systemd.te -@@ -1396,6 +1396,12 @@ fstools_rw_swap_files(systemd_sleep_t) - # systemd-sleep needs to getattr swap partitions +--- fedora-policy-20211111.orig/policy/modules/system/systemd.te ++++ fedora-policy-20211111/policy/modules/system/systemd.te +@@ -1415,6 +1415,12 @@ fstools_rw_swap_files(systemd_sleep_t) storage_getattr_fixed_disk_dev(systemd_sleep_t) + storage_getattr_removable_dev(systemd_sleep_t) +####################################### +# diff --git a/fix_unconfined.patch b/fix_unconfined.patch index 114c71d..a9b5b32 100644 --- a/fix_unconfined.patch +++ b/fix_unconfined.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210628/policy/modules/system/unconfined.te +Index: fedora-policy-20211111/policy/modules/system/unconfined.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/system/unconfined.te -+++ fedora-policy-20210628/policy/modules/system/unconfined.te +--- fedora-policy-20211111.orig/policy/modules/system/unconfined.te ++++ fedora-policy-20211111/policy/modules/system/unconfined.te @@ -1,5 +1,10 @@ policy_module(unconfined, 3.5.0) @@ -13,7 +13,7 @@ Index: fedora-policy-20210628/policy/modules/system/unconfined.te ######################################## # # Declarations -@@ -41,3 +46,6 @@ optional_policy(` +@@ -39,3 +44,6 @@ optional_policy(` optional_policy(` container_runtime_domtrans(unconfined_service_t) ') diff --git a/fix_unconfineduser.patch b/fix_unconfineduser.patch index 0161703..54458d4 100644 --- a/fix_unconfineduser.patch +++ b/fix_unconfineduser.patch @@ -1,8 +1,8 @@ -Index: fedora-policy-20210628/policy/modules/roles/unconfineduser.te +Index: fedora-policy-20211111/policy/modules/roles/unconfineduser.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/roles/unconfineduser.te -+++ fedora-policy-20210628/policy/modules/roles/unconfineduser.te -@@ -126,6 +126,11 @@ tunable_policy(`unconfined_dyntrans_all' +--- fedora-policy-20211111.orig/policy/modules/roles/unconfineduser.te ++++ fedora-policy-20211111/policy/modules/roles/unconfineduser.te +@@ -122,6 +122,11 @@ tunable_policy(`unconfined_dyntrans_all' domain_dyntrans(unconfined_t) ') @@ -14,7 +14,7 @@ Index: fedora-policy-20210628/policy/modules/roles/unconfineduser.te optional_policy(` gen_require(` type unconfined_t; -@@ -212,6 +217,10 @@ optional_policy(` +@@ -208,6 +213,10 @@ optional_policy(` ') optional_policy(` @@ -25,7 +25,7 @@ Index: fedora-policy-20210628/policy/modules/roles/unconfineduser.te chrome_role_notrans(unconfined_r, unconfined_t) tunable_policy(`unconfined_chrome_sandbox_transition',` -@@ -246,6 +255,18 @@ optional_policy(` +@@ -242,6 +251,18 @@ optional_policy(` dbus_stub(unconfined_t) optional_policy(` @@ -44,7 +44,7 @@ Index: fedora-policy-20210628/policy/modules/roles/unconfineduser.te bluetooth_dbus_chat(unconfined_t) ') -@@ -309,6 +330,10 @@ optional_policy(` +@@ -305,6 +326,10 @@ optional_policy(` ') optional_policy(` diff --git a/fix_xserver.patch b/fix_xserver.patch index 785494c..686a68d 100644 --- a/fix_xserver.patch +++ b/fix_xserver.patch @@ -1,7 +1,7 @@ -Index: fedora-policy-20210628/policy/modules/services/xserver.fc +Index: fedora-policy-20211111/policy/modules/services/xserver.fc =================================================================== ---- fedora-policy-20210628.orig/policy/modules/services/xserver.fc -+++ fedora-policy-20210628/policy/modules/services/xserver.fc +--- fedora-policy-20211111.orig/policy/modules/services/xserver.fc ++++ fedora-policy-20211111/policy/modules/services/xserver.fc @@ -71,6 +71,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ /etc/X11/[wxg]dm/Xsession -- gen_context(system_u:object_r:xsession_exec_t,s0) /etc/X11/wdm(/.*)? gen_context(system_u:object_r:xdm_rw_etc_t,s0) @@ -18,7 +18,7 @@ Index: fedora-policy-20210628/policy/modules/services/xserver.fc /usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0) /usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0) /usr/bin/razor-lightdm-.* -- gen_context(system_u:object_r:xdm_exec_t,s0) -@@ -136,6 +138,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ +@@ -137,6 +139,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ /usr/X11R6/lib/X11/xkb -d gen_context(system_u:object_r:xkb_var_lib_t,s0) /usr/X11R6/lib/X11/xkb/.* -- gen_context(system_u:object_r:xkb_var_lib_t,s0) @@ -26,10 +26,10 @@ Index: fedora-policy-20210628/policy/modules/services/xserver.fc ifndef(`distro_debian',` /usr/var/[xgkw]dm(/.*)? gen_context(system_u:object_r:xserver_log_t,s0) ') -Index: fedora-policy-20210628/policy/modules/services/xserver.te +Index: fedora-policy-20211111/policy/modules/services/xserver.te =================================================================== ---- fedora-policy-20210628.orig/policy/modules/services/xserver.te -+++ fedora-policy-20210628/policy/modules/services/xserver.te +--- fedora-policy-20211111.orig/policy/modules/services/xserver.te ++++ fedora-policy-20211111/policy/modules/services/xserver.te @@ -473,6 +473,10 @@ userdom_delete_user_home_content_files(x userdom_signull_unpriv_users(xdm_t) userdom_dontaudit_read_admin_home_lnk_files(xdm_t) diff --git a/selinux-policy.changes b/selinux-policy.changes index 87e9a1a..5fc9185 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Thu Nov 11 14:21:47 UTC 2021 - Johannes Segitz + +- Update to version 20211111. Refreshed: + * fix_dbus.patch + * fix_systemd.patch + * fix_authlogin.patch + * fix_auditd.patch + * fix_kernel_sysctl.patch + * fix_networkmanager.patch + * fix_chronyd.patch + * fix_unconfineduser.patch + * fix_unconfined.patch + * fix_firewalld.patch + * fix_init.patch + * fix_xserver.patch + * fix_logging.patch + * fix_hadoop.patch + ------------------------------------------------------------------- Mon Oct 25 11:35:24 UTC 2021 - Marcus Meissner diff --git a/selinux-policy.spec b/selinux-policy.spec index e916d1e..b90c137 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -33,7 +33,7 @@ Summary: SELinux policy configuration License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20210716 +Version: 20211111 Release: 0 Source: fedora-policy-%{version}.tar.bz2 Source1: selinux-policy-rpmlintrc