diff options
| author | Joe MacDonald <joe_macdonald@mentor.com> | 2017-05-03 21:05:44 -0400 |
|---|---|---|
| committer | Joe MacDonald <joe_macdonald@mentor.com> | 2017-05-03 21:05:44 -0400 |
| commit | 0cfdbb47aafef9e9af562c9dffebd0aefefe5457 (patch) | |
| tree | 3ab165035cc90e193aeb0de686fb3a80fa4d9285 /recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch | |
| parent | 849cd74b5ff3c915356ae7411746194728594212 (diff) | |
| download | meta-selinux-0cfdbb47aafef9e9af562c9dffebd0aefefe5457.tar.gz | |
refpolicy: update git recipes
The targeted, mls and minimum recipes had fallen far behind the upstream
refpolicy repository. Refresh all patches and discard ones that are
obviously no longer needed. This should not have any functional change on
the policies.
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch')
| -rw-r--r-- | recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch b/recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch index d907095..fb912b5 100644 --- a/recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch +++ b/recipes-security/refpolicy/refpolicy-git/poky-policy-add-rules-for-var-log-symlink-apache.patch | |||
| @@ -10,17 +10,18 @@ logging.if. So still need add a individual rule for apache.te. | |||
| 10 | Upstream-Status: Inappropriate [only for Poky] | 10 | Upstream-Status: Inappropriate [only for Poky] |
| 11 | 11 | ||
| 12 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | 12 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> |
| 13 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
| 13 | --- | 14 | --- |
| 14 | policy/modules/contrib/apache.te | 1 + | 15 | policy/modules/contrib/apache.te | 1 + |
| 15 | 1 file changed, 1 insertion(+) | 16 | 1 file changed, 1 insertion(+) |
| 16 | 17 | ||
| 17 | --- a/policy/modules/contrib/apache.te | 18 | --- a/policy/modules/contrib/apache.te |
| 18 | +++ b/policy/modules/contrib/apache.te | 19 | +++ b/policy/modules/contrib/apache.te |
| 19 | @@ -409,10 +409,11 @@ allow httpd_t httpd_log_t:dir setattr_di | 20 | @@ -407,10 +407,11 @@ allow httpd_t httpd_lock_t:file manage_f |
| 20 | create_dirs_pattern(httpd_t, httpd_log_t, httpd_log_t) | 21 | files_lock_filetrans(httpd_t, httpd_lock_t, { file dir }) |
| 21 | create_files_pattern(httpd_t, httpd_log_t, httpd_log_t) | 22 | |
| 22 | append_files_pattern(httpd_t, httpd_log_t, httpd_log_t) | 23 | manage_dirs_pattern(httpd_t, httpd_log_t, httpd_log_t) |
| 23 | read_files_pattern(httpd_t, httpd_log_t, httpd_log_t) | 24 | manage_files_pattern(httpd_t, httpd_log_t, httpd_log_t) |
| 24 | read_lnk_files_pattern(httpd_t, httpd_log_t, httpd_log_t) | 25 | read_lnk_files_pattern(httpd_t, httpd_log_t, httpd_log_t) |
| 25 | +read_lnk_files_pattern(httpd_t, var_log_t, var_log_t) | 26 | +read_lnk_files_pattern(httpd_t, var_log_t, var_log_t) |
| 26 | logging_log_filetrans(httpd_t, httpd_log_t, file) | 27 | logging_log_filetrans(httpd_t, httpd_log_t, file) |
