rpm/selinux-policy
SHA256
1
0
Fork 0
forked from pool/selinux-policy
Code Pull Requests Activity

Accepting request 953129 from security:SELinux

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/953129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=23
This commit is contained in:
Dominique Leuenberger 2022-02-11 22:07:09 +00:00 committed by Git OBS Bridge
commit f8fd46faf9
4 changed files with 42 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
fix_bitlbee.patch Normal file
View File

@ -0,0 +1,12 @@
Index: fedora-policy-20220124/policy/modules/contrib/bitlbee.fc
===================================================================
--- fedora-policy-20220124.orig/policy/modules/contrib/bitlbee.fc
+++ fedora-policy-20220124/policy/modules/contrib/bitlbee.fc
@@ -9,6 +9,5 @@
/var/log/bip.* gen_context(system_u:object_r:bitlbee_log_t,s0)
-/var/run/bitlbee\.pid -- gen_context(system_u:object_r:bitlbee_var_run_t,s0)
-/var/run/bitlbee\.sock -s gen_context(system_u:object_r:bitlbee_var_run_t,s0)
+/var/run/bitlbee(/.*)? gen_context(system_u:object_r:bitlbee_var_run_t,s0)
/var/run/bip(/.*)? gen_context(system_u:object_r:bitlbee_var_run_t,s0)

25
fix_cron.patch
View File

@ -1,7 +1,7 @@
Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
Index: fedora-policy-20220124/policy/modules/contrib/cron.fc
===================================================================
--- fedora-policy-20210309.orig/policy/modules/contrib/cron.fc
+++ fedora-policy-20210309/policy/modules/contrib/cron.fc
--- fedora-policy-20220124.orig/policy/modules/contrib/cron.fc
+++ fedora-policy-20220124/policy/modules/contrib/cron.fc
@@ -34,7 +34,7 @@
/var/spool/cron -d gen_context(system_u:object_r:user_cron_spool_t,s0)
@ -11,7 +11,18 @@ Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
/var/spool/cron/crontabs -d gen_context(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/crontabs/.* -- <<none>>
@@ -69,9 +69,3 @@ ifdef(`distro_gentoo',`
@@ -55,6 +55,10 @@ ifdef(`distro_suse', `
/var/spool/cron/lastrun -d gen_context(system_u:object_r:crond_tmp_t,s0)
/var/spool/cron/lastrun/[^/]* -- <<none>>
/var/spool/cron/tabs -d gen_context(system_u:object_r:cron_spool_t,s0)
+
+/var/spool/atjobs -d gen_context(system_u:object_r:cron_spool_t,s0)
+/var/spool/atjobs/.SEQ -- gen_context(system_u:object_r:user_cron_spool_t,s0)
+/var/spool/atjobs/[^/]* -- <<none>>
')
ifdef(`distro_debian',`
@@ -69,9 +73,3 @@ ifdef(`distro_gentoo',`
/var/spool/cron/lastrun -d gen_context(system_u:object_r:crond_tmp_t,s0)
/var/spool/cron/lastrun/[^/]* -- <<none>>
')
@ -21,10 +32,10 @@ Index: fedora-policy-20210309/policy/modules/contrib/cron.fc
-/var/spool/cron/lastrun/[^/]* -- <<none>>
-/var/spool/cron/tabs -d gen_context(system_u:object_r:cron_spool_t,s0)
-')
Index: fedora-policy-20210309/policy/modules/contrib/cron.if
Index: fedora-policy-20220124/policy/modules/contrib/cron.if
===================================================================
--- fedora-policy-20210309.orig/policy/modules/contrib/cron.if
+++ fedora-policy-20210309/policy/modules/contrib/cron.if
--- fedora-policy-20220124.orig/policy/modules/contrib/cron.if
+++ fedora-policy-20220124/policy/modules/contrib/cron.if
@@ -1057,7 +1057,7 @@ interface(`cron_generic_log_filetrans_lo
#
interface(`cron_system_spool_entrypoint',`

11
selinux-policy.changes
View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Thu Feb 10 09:04:08 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Updated fix_cron.patch. Adjust labeling for at (bsc#1195683)
-------------------------------------------------------------------
Wed Feb 9 16:04:09 UTC 2022 - Filippo Bonazzi <filippo.bonazzi@suse.com>
- Fix bitlbee runtime directory (bsc#1193230)
* add fix_bitlbee.patch
-------------------------------------------------------------------
Mon Jan 24 07:33:34 UTC 2022 - Johannes Segitz <jsegitz@suse.com>

1
selinux-policy.spec
View File

@ -139,6 +139,7 @@ Patch054: fix_kernel_sysctl.patch
Patch055: fix_auditd.patch
Patch056: fix_wine.patch
Patch057: fix_hypervkvp.patch
Patch058: fix_bitlbee.patch
Patch100: sedoctool.patch