diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy/0021-fc-postgresql-apply-policy-to-postgresql-alternative.patch')
| -rw-r--r-- | recipes-security/refpolicy/refpolicy/0021-fc-postgresql-apply-policy-to-postgresql-alternative.patch | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy/0021-fc-postgresql-apply-policy-to-postgresql-alternative.patch b/recipes-security/refpolicy/refpolicy/0021-fc-postgresql-apply-policy-to-postgresql-alternative.patch new file mode 100644 index 0000000..8bce781 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy/0021-fc-postgresql-apply-policy-to-postgresql-alternative.patch | |||
| @@ -0,0 +1,37 @@ | |||
| 1 | From dd6dc74388daffba5c336059fbc046e632bee0f6 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Yi Zhao <yi.zhao@windriver.com> | ||
| 3 | Date: Fri, 15 Nov 2019 11:13:16 +0800 | ||
| 4 | Subject: [PATCH] fc/postgresql: apply policy to postgresql alternatives | ||
| 5 | |||
| 6 | Upstream-Status: Inappropriate [embedded specific] | ||
| 7 | |||
| 8 | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> | ||
| 9 | --- | ||
| 10 | policy/modules/services/postgresql.fc | 11 +++++++++++ | ||
| 11 | 1 file changed, 11 insertions(+) | ||
| 12 | |||
| 13 | diff --git a/policy/modules/services/postgresql.fc b/policy/modules/services/postgresql.fc | ||
| 14 | index f31a52cf8..f9bf46870 100644 | ||
| 15 | --- a/policy/modules/services/postgresql.fc | ||
| 16 | +++ b/policy/modules/services/postgresql.fc | ||
| 17 | @@ -27,6 +27,17 @@ | ||
| 18 | /usr/lib/postgresql(-.*)?/(.*/)?bin/postgres -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 19 | /usr/lib/postgresql(-.*)?/(.*/)?bin/postmaster -l gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 20 | |||
| 21 | +/usr/bin/pg_archivecleanup -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 22 | +/usr/bin/pg_basebackup -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 23 | +/usr/bin/pg_controldata -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 24 | +/usr/bin/pg_ctl -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 25 | +/usr/bin/pg_resetxlog -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 26 | +/usr/bin/pg_standby -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 27 | +/usr/bin/pg_upgrade -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 28 | +/usr/bin/pg_xlogdump -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 29 | +/usr/bin/postgres -- gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 30 | +/usr/bin/postmaster -l gen_context(system_u:object_r:postgresql_exec_t,s0) | ||
| 31 | + | ||
| 32 | ifdef(`distro_redhat', ` | ||
| 33 | /usr/share/jonas/pgsql(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0) | ||
| 34 | ') | ||
| 35 | -- | ||
| 36 | 2.25.1 | ||
| 37 | |||