forked from pool/selinux-policy
9deff280f8
- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and nm-priv-helper until the packaging is adjusted (bsc#1206355) - Update fix_chronyd.patch to allow sendto towards NetworkManager_dispatcher_custom_t. Added new interface networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357) - Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895) - Updated fix_networkmanager.patch to allow NetworkManager to watch net_conf_t (bsc#1206109) OBS-URL: https://build.opensuse.org/request/show/1042579 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=161
22 lines
1.1 KiB
Diff
22 lines
1.1 KiB
Diff
Index: fedora-policy-20221019/policy/modules/contrib/dbus.te
|
|
===================================================================
|
|
--- fedora-policy-20221019.orig/policy/modules/contrib/dbus.te
|
|
+++ fedora-policy-20221019/policy/modules/contrib/dbus.te
|
|
@@ -81,6 +81,7 @@ manage_dirs_pattern(system_dbusd_t, syst
|
|
manage_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t)
|
|
manage_sock_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t)
|
|
files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file sock_file })
|
|
+allow system_dbusd_t system_dbusd_tmp_t:file execute;
|
|
|
|
manage_files_pattern(system_dbusd_t, system_dbusd_tmpfs_t, system_dbusd_tmpfs_t)
|
|
manage_dirs_pattern(system_dbusd_t, system_dbusd_tmpfs_t, system_dbusd_tmpfs_t)
|
|
@@ -109,6 +110,8 @@ files_read_var_lib_symlinks(system_dbusd
|
|
files_rw_inherited_non_security_files(system_dbusd_t)
|
|
files_watch_usr_dirs(system_dbusd_t)
|
|
files_watch_var_lib_dirs(system_dbusd_t)
|
|
+# bsc#1205895
|
|
+files_watch_lib_dirs(system_dbusd_t)
|
|
|
|
fs_getattr_all_fs(system_dbusd_t)
|
|
fs_search_auto_mountpoints(system_dbusd_t)
|