diff options
| author | Sajjad Ahmed <sajjad_ahmed@mentor.com> | 2018-01-09 16:10:12 +0500 |
|---|---|---|
| committer | Joe MacDonald <joe_macdonald@mentor.com> | 2018-01-19 13:06:46 -0500 |
| commit | e8d39ffb15b4d78f8b95711bbb509f9afbd46c05 (patch) | |
| tree | a8b1a70441cbf3da129c83cf68eb298726f4155c /recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch | |
| parent | d855c624f32c5e599bf27e06cb8f5b25b3aae12d (diff) | |
| download | meta-selinux-e8d39ffb15b4d78f8b95711bbb509f9afbd46c05.tar.gz | |
Fix URL, update refpolicy patches and dependencies
* audit_2.7.6.bb : fix error [gzip: stdin: not in gzip format] and checksum
* refpolicy-minimum_git.bb : fix [Failed to resolve typeattributeset statement], dependency for "fsadm" in init.pp
* refpolicy-targeted_2.20170204.bb : added version dependent patches
* patches : separate patches for release 2.20170204 version and 2.20170805+git version
Signed-off-by: Sajjad Ahmed <sajjad_ahmed@mentor.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch')
| -rw-r--r-- | recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch index 7a72f18..b5ca0f8 100644 --- a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch +++ b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch | |||
| @@ -35,13 +35,10 @@ diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te | |||
| 35 | index d710fb0..f9d7114 100644 | 35 | index d710fb0..f9d7114 100644 |
| 36 | --- a/policy/modules/system/init.te | 36 | --- a/policy/modules/system/init.te |
| 37 | +++ b/policy/modules/system/init.te | 37 | +++ b/policy/modules/system/init.te |
| 38 | @@ -1100,4 +1100,8 @@ optional_policy(` | 38 | @@ -1114,3 +1114,7 @@ optional_policy(` |
| 39 | # systemd related allow rules | ||
| 40 | allow kernel_t init_t:process dyntransition; | 39 | allow kernel_t init_t:process dyntransition; |
| 41 | allow devpts_t device_t:filesystem associate; | 40 | allow devpts_t device_t:filesystem associate; |
| 42 | -allow init_t self:capability2 block_suspend; | 41 | allow init_t self:capability2 block_suspend; |
| 43 | \ No newline at end of file | ||
| 44 | +allow init_t self:capability2 block_suspend; | ||
| 45 | +allow init_t self:capability2 audit_read; | 42 | +allow init_t self:capability2 audit_read; |
| 46 | + | 43 | + |
| 47 | +allow initrc_t init_t:system { start status }; | 44 | +allow initrc_t init_t:system { start status }; |
