1 files changed, 32 insertions, 0 deletions

diff --git a/recipes-security/refpolicy/refpolicy/0007-fc-bind-fix-real-path-for-bind.patch b/recipes-security/refpolicy/refpolicy/0007-fc-bind-fix-real-path-for-bind.patch
new file mode 100644
index 0000000..cfd8dfc
--- /dev/null
+++ b/recipes-security/refpolicy/refpolicy/0007-fc-bind-fix-real-path-for-bind.patch
@@ -0,0 +1,32 @@
+From fcf91092015155c4a10a1d7c4dd352ead0b5698b Mon Sep 17 00:00:00 2001
+From: Joe MacDonald <joe_macdonald@mentor.com>
+Date: Thu, 28 Mar 2019 21:58:53 -0400
+Subject: [PATCH] fc/bind: fix real path for bind
+
+Upstream-Status: Inappropriate [embedded specific]
+
+Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
+Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ policy/modules/services/bind.fc | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/policy/modules/services/bind.fc b/policy/modules/services/bind.fc
+index 7c1df4895..9f87a21a6 100644
+--- a/policy/modules/services/bind.fc
++++ b/policy/modules/services/bind.fc
+@@ -1,8 +1,10 @@
+ /etc/rc\.d/init\.d/named       --      gen_context(system_u:object_r:named_initrc_exec_t,s0)
++/etc/rc\.d/init\.d/bind        --      gen_context(system_u:object_r:named_initrc_exec_t,s0)
+ /etc/rc\.d/init\.d/unbound     --      gen_context(system_u:object_r:named_initrc_exec_t,s0)
+ 
+ /etc/bind(/.*)?        gen_context(system_u:object_r:named_zone_t,s0)
+ /etc/bind/named\.conf.*        --      gen_context(system_u:object_r:named_conf_t,s0)
++/etc/bind/rndc\.conf.* --      gen_context(system_u:object_r:named_conf_t,s0)
+ /etc/bind/rndc\.key    --      gen_context(system_u:object_r:dnssec_t,s0)
+ /etc/dnssec-trigger/dnssec_trigger_server\.key --      gen_context(system_u:object_r:dnssec_t,s0)
+ /etc/named\.rfc1912\.zones     --      gen_context(system_u:object_r:named_conf_t,s0)
+-- 
+2.17.1
+