forked from pool/selinux-policy
1fd70ac29b
- Update to version 20200219 Refreshed fix_hadoop.patch Updated * fix_dbus.patch * fix_hadoop.patch * fix_nscd.patch * fix_xserver.patch Renamed postfix_paths.patch to fix_postfix.patch Added * fix_init.patch * fix_locallogin.patch * fix_policykit.patch * fix_iptables.patch * fix_irqbalance.patch * fix_ntp.patch * fix_fwupd.patch * fix_firewalld.patch * fix_logrotate.patch * fix_selinuxutil.patch * fix_corecommand.patch * fix_snapper.patch * fix_systemd.patch * fix_unconfined.patch * fix_unconfineduser.patch * fix_chronyd.patch * fix_networkmanager.patch * xdm_entrypoint_pam.patch - Removed modules minimum_temp_fixes and targeted_temp_fixes from the corresponding policies - Reduced default module list of minimum policy by removing OBS-URL: https://build.opensuse.org/request/show/781805 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=74
41 lines
883 B
Plaintext
41 lines
883 B
Plaintext
## <summary>A temporary policy for packagekit.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow reading of fifo files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to mange files
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`packagekit_read_write_fifo',`
|
|
gen_require(`
|
|
type packagekit_t;
|
|
')
|
|
|
|
allow $1 packagekit_t:fifo_file rw_inherited_fifo_file_perms;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Send and receive messages from
|
|
## packagekit over dbus.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`packagekit_dbus_chat',`
|
|
gen_require(`
|
|
type packagekit_t;
|
|
class dbus send_msg;
|
|
')
|
|
|
|
allow $1 packagekit_t:dbus send_msg;
|
|
allow packagekit_t $1:dbus send_msg;
|
|
')
|