1 files changed, 39 insertions, 0 deletions

diff --git a/recipes-security/refpolicy/refpolicy/0011-fc-sysnetwork-apply-policy-to-ip-alternatives.patch b/recipes-security/refpolicy/refpolicy/0011-fc-sysnetwork-apply-policy-to-ip-alternatives.patch
new file mode 100644
index 0000000..aeb63f7
--- /dev/null
+++ b/recipes-security/refpolicy/refpolicy/0011-fc-sysnetwork-apply-policy-to-ip-alternatives.patch
@@ -0,0 +1,39 @@
+From bb8832629e85af2a16800f5cfec97ca0bf8319e6 Mon Sep 17 00:00:00 2001
+From: Xin Ouyang <Xin.Ouyang@windriver.com>
+Date: Tue, 9 Jun 2015 21:22:52 +0530
+Subject: [PATCH] fc/sysnetwork: apply policy to ip alternatives
+
+Upstream-Status: Inappropriate [embedded specific]
+
+Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
+Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com>
+Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ policy/modules/system/sysnetwork.fc | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/policy/modules/system/sysnetwork.fc b/policy/modules/system/sysnetwork.fc
+index acf539656..d8902d725 100644
+--- a/policy/modules/system/sysnetwork.fc
++++ b/policy/modules/system/sysnetwork.fc
+@@ -59,13 +59,16 @@ ifdef(`distro_redhat',`
+ /usr/sbin/dhcpcd               --      gen_context(system_u:object_r:dhcpc_exec_t,s0)
+ /usr/sbin/ethtool              --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/ifconfig             --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
++/usr/sbin/ifconfig\.net-tools          --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/ip                   --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
++/usr/sbin/ip\.iproute2                 --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/ipx_configure                --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/ipx_interface                --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/ipx_internal_net     --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/iw                   --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/iwconfig             --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/mii-tool             --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
++/usr/sbin/mii-tool\.net-tools          --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ /usr/sbin/pump                 --      gen_context(system_u:object_r:dhcpc_exec_t,s0)
+ /usr/sbin/tc                   --      gen_context(system_u:object_r:ifconfig_exec_t,s0)
+ 
+-- 
+2.17.1
+