1 files changed, 45 insertions, 0 deletions

diff --git a/recipes-security/refpolicy/refpolicy-git/0028-policy-module-userdomain-fix-selinux-utils-to-manage.patch b/recipes-security/refpolicy/refpolicy-git/0028-policy-module-userdomain-fix-selinux-utils-to-manage.patch
new file mode 100644
index 0000000..732eaaf
--- /dev/null
+++ b/recipes-security/refpolicy/refpolicy-git/0028-policy-module-userdomain-fix-selinux-utils-to-manage.patch
@@ -0,0 +1,45 @@
+From 391ab30556a3276bac131b3d4bd6c5e52b49c77c Mon Sep 17 00:00:00 2001
+From: Xin Ouyang <Xin.Ouyang@windriver.com>
+Date: Thu, 22 Aug 2013 13:37:23 +0800
+Subject: [PATCH 28/34] policy/module/userdomain: fix selinux utils to manage
+ config files
+
+Upstream-Status: Pending
+
+Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
+Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
+---
+ policy/modules/system/selinuxutil.if | 1 +
+ policy/modules/system/userdomain.if  | 4 ++++
+ 2 files changed, 5 insertions(+)
+
+diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if
+index 20024993..0fdc8c10 100644
+--- a/policy/modules/system/selinuxutil.if
++++ b/policy/modules/system/selinuxutil.if
+@@ -674,6 +674,7 @@ interface(`seutil_manage_config',`
+        ')
+ 
+        files_search_etc($1)
++       manage_dirs_pattern($1, selinux_config_t, selinux_config_t)
+        manage_files_pattern($1, selinux_config_t, selinux_config_t)
+        read_lnk_files_pattern($1, selinux_config_t, selinux_config_t)
+ ')
+diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
+index 5221bd13..4cf987d1 100644
+--- a/policy/modules/system/userdomain.if
++++ b/policy/modules/system/userdomain.if
+@@ -1431,6 +1431,10 @@ template(`userdom_security_admin_template',`
+        logging_read_audit_config($1)
+ 
+        seutil_manage_bin_policy($1)
++       seutil_manage_default_contexts($1)
++       seutil_manage_file_contexts($1)
++       seutil_manage_module_store($1)
++       seutil_manage_config($1)
+        seutil_run_checkpolicy($1, $2)
+        seutil_run_loadpolicy($1, $2)
+        seutil_run_semanage($1, $2)
+-- 
+2.19.1
+