summaryrefslogtreecommitdiffstats
path: root/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
diff options
context:
space:
mode:
authorSajjad Ahmed <sajjad_ahmed@mentor.com>2018-01-09 16:10:12 +0500
committerJoe MacDonald <joe_macdonald@mentor.com>2018-01-19 13:06:46 -0500
commite8d39ffb15b4d78f8b95711bbb509f9afbd46c05 (patch)
treea8b1a70441cbf3da129c83cf68eb298726f4155c /recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
parentd855c624f32c5e599bf27e06cb8f5b25b3aae12d (diff)
downloadmeta-selinux-e8d39ffb15b4d78f8b95711bbb509f9afbd46c05.tar.gz
Fix URL, update refpolicy patches and dependencies
* audit_2.7.6.bb : fix error [gzip: stdin: not in gzip format] and checksum * refpolicy-minimum_git.bb : fix [Failed to resolve typeattributeset statement], dependency for "fsadm" in init.pp * refpolicy-targeted_2.20170204.bb : added version dependent patches * patches : separate patches for release 2.20170204 version and 2.20170805+git version Signed-off-by: Sajjad Ahmed <sajjad_ahmed@mentor.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch')
-rw-r--r--recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch7
1 files changed, 2 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
index 7a72f18..b5ca0f8 100644
--- a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
+++ b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
@@ -35,13 +35,10 @@ diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
35index d710fb0..f9d7114 100644 35index d710fb0..f9d7114 100644
36--- a/policy/modules/system/init.te 36--- a/policy/modules/system/init.te
37+++ b/policy/modules/system/init.te 37+++ b/policy/modules/system/init.te
38@@ -1100,4 +1100,8 @@ optional_policy(` 38@@ -1114,3 +1114,7 @@ optional_policy(`
39 # systemd related allow rules
40 allow kernel_t init_t:process dyntransition; 39 allow kernel_t init_t:process dyntransition;
41 allow devpts_t device_t:filesystem associate; 40 allow devpts_t device_t:filesystem associate;
42-allow init_t self:capability2 block_suspend; 41 allow init_t self:capability2 block_suspend;
43\ No newline at end of file
44+allow init_t self:capability2 block_suspend;
45+allow init_t self:capability2 audit_read; 42+allow init_t self:capability2 audit_read;
46+ 43+
47+allow initrc_t init_t:system { start status }; 44+allow initrc_t init_t:system { start status };