forked from pool/selinux-policy
7cbab402c1
- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for network interface definition instead of /etc/sysconfig/network-scripts/, modified sysnetwork.fc to reflect that (bsc#1205580). OBS-URL: https://build.opensuse.org/request/show/1037928 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=157
26 lines
1.4 KiB
Diff
26 lines
1.4 KiB
Diff
Index: fedora-policy-20221019/policy/modules/system/sysnetwork.fc
|
|
===================================================================
|
|
--- fedora-policy-20221019.orig/policy/modules/system/sysnetwork.fc
|
|
+++ fedora-policy-20221019/policy/modules/system/sysnetwork.fc
|
|
@@ -33,9 +33,9 @@ ifdef(`distro_debian',`
|
|
/etc/dhcp3?/dhclient.* gen_context(system_u:object_r:dhcp_etc_t,s0)
|
|
|
|
ifdef(`distro_redhat',`
|
|
-/etc/sysconfig/network-scripts/.*resolv\.conf -- gen_context(system_u:object_r:net_conf_t,s0)
|
|
+/etc/sysconfig/network/.*resolv\.conf -- gen_context(system_u:object_r:net_conf_t,s0)
|
|
/etc/sysconfig/networking(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
-/etc/sysconfig/network-scripts(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
+/etc/sysconfig/network(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
/var/run/systemd/network(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
/var/run/systemd/resolve/resolv\.conf -- gen_context(system_u:object_r:net_conf_t,s0)
|
|
/var/run/systemd/resolve/stub-resolv\.conf gen_context(system_u:object_r:net_conf_t,s0)
|
|
@@ -103,6 +103,8 @@ ifdef(`distro_debian',`
|
|
/var/run/network(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
')
|
|
|
|
+/var/run/netconfig(/.*)? gen_context(system_u:object_r:net_conf_t,s0)
|
|
+
|
|
/var/run/netns -d gen_context(system_u:object_r:ifconfig_var_run_t,s0)
|
|
/var/run/netns/[^/]+ <<none>>
|
|
|