diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy/0014-fc-init-fix-update-alternatives-for-sysvinit.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy/0014-fc-init-fix-update-alternatives-for-sysvinit.patch | 55 |
1 files changed, 55 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy/0014-fc-init-fix-update-alternatives-for-sysvinit.patch b/recipes-security/refpolicy/refpolicy/0014-fc-init-fix-update-alternatives-for-sysvinit.patch new file mode 100644 index 0000000..746a8be --- /dev/null +++ b/recipes-security/refpolicy/refpolicy/0014-fc-init-fix-update-alternatives-for-sysvinit.patch | |||
@@ -0,0 +1,55 @@ | |||
1 | From 4c6db6e9d637c6ecde7d104ae3544d18004d2a2c Mon Sep 17 00:00:00 2001 | ||
2 | From: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
3 | Date: Thu, 22 Aug 2013 13:37:23 +0800 | ||
4 | Subject: [PATCH] fc/init: fix update-alternatives for sysvinit | ||
5 | |||
6 | Upstream-Status: Inappropriate [embedded specific] | ||
7 | |||
8 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
9 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
10 | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> | ||
11 | --- | ||
12 | policy/modules/admin/shutdown.fc | 1 + | ||
13 | policy/modules/kernel/corecommands.fc | 2 ++ | ||
14 | policy/modules/system/init.fc | 1 + | ||
15 | 3 files changed, 4 insertions(+) | ||
16 | |||
17 | diff --git a/policy/modules/admin/shutdown.fc b/policy/modules/admin/shutdown.fc | ||
18 | index 89d682d36..354f4d1d9 100644 | ||
19 | --- a/policy/modules/admin/shutdown.fc | ||
20 | +++ b/policy/modules/admin/shutdown.fc | ||
21 | @@ -7,5 +7,6 @@ | ||
22 | |||
23 | /usr/sbin/halt -- gen_context(system_u:object_r:shutdown_exec_t,s0) | ||
24 | /usr/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) | ||
25 | +/usr/sbin/shutdown\.sysvinit -- gen_context(system_u:object_r:shutdown_exec_t,s0) | ||
26 | |||
27 | /run/shutdown\.pid -- gen_context(system_u:object_r:shutdown_runtime_t,s0) | ||
28 | diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc | ||
29 | index 30ac066e4..1edc035f3 100644 | ||
30 | --- a/policy/modules/kernel/corecommands.fc | ||
31 | +++ b/policy/modules/kernel/corecommands.fc | ||
32 | @@ -153,6 +153,8 @@ ifdef(`distro_gentoo',` | ||
33 | /usr/bin/mkfs\.cramfs -- gen_context(system_u:object_r:bin_t,s0) | ||
34 | /usr/bin/mksh -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
35 | /usr/bin/mountpoint -- gen_context(system_u:object_r:bin_t,s0) | ||
36 | +/usr/bin/mountpoint\.sysvinit -- gen_context(system_u:object_r:bin_t,s0) | ||
37 | +/usr/bin/mountpoint\.util-linux -- gen_context(system_u:object_r:bin_t,s0) | ||
38 | /usr/bin/nologin -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
39 | /usr/bin/sash -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
40 | /usr/bin/sesh -- gen_context(system_u:object_r:shell_exec_t,s0) | ||
41 | diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc | ||
42 | index 9ebd6094c..e9e9eae85 100644 | ||
43 | --- a/policy/modules/system/init.fc | ||
44 | +++ b/policy/modules/system/init.fc | ||
45 | @@ -48,6 +48,7 @@ ifdef(`distro_gentoo',` | ||
46 | /usr/libexec/dcc/stop-.* -- gen_context(system_u:object_r:initrc_exec_t,s0) | ||
47 | |||
48 | /usr/sbin/init(ng)? -- gen_context(system_u:object_r:init_exec_t,s0) | ||
49 | +/usr/sbin/init\.sysvinit -- gen_context(system_u:object_r:init_exec_t,s0) | ||
50 | /usr/sbin/open_init_pty -- gen_context(system_u:object_r:initrc_exec_t,s0) | ||
51 | /usr/sbin/upstart -- gen_context(system_u:object_r:init_exec_t,s0) | ||
52 | |||
53 | -- | ||
54 | 2.25.1 | ||
55 | |||