diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy/0041-policy-modules-system-mount-make-mount_t-domain-MLS-.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy/0041-policy-modules-system-mount-make-mount_t-domain-MLS-.patch | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy/0041-policy-modules-system-mount-make-mount_t-domain-MLS-.patch b/recipes-security/refpolicy/refpolicy/0041-policy-modules-system-mount-make-mount_t-domain-MLS-.patch new file mode 100644 index 0000000..5ced4ae --- /dev/null +++ b/recipes-security/refpolicy/refpolicy/0041-policy-modules-system-mount-make-mount_t-domain-MLS-.patch | |||
@@ -0,0 +1,35 @@ | |||
1 | From 53a770736133d84be9cab23732811f96304bf737 Mon Sep 17 00:00:00 2001 | ||
2 | From: Wenzong Fan <wenzong.fan@windriver.com> | ||
3 | Date: Sat, 15 Feb 2014 04:22:47 -0500 | ||
4 | Subject: [PATCH] policy/modules/system/mount: make mount_t domain MLS trusted | ||
5 | for writing to processes up to its clearance | ||
6 | |||
7 | Fixes: | ||
8 | avc: denied { setsched } for pid=148 comm="mount" | ||
9 | scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 | ||
10 | tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=process | ||
11 | permissive=1 | ||
12 | |||
13 | Upstream-Status: Inappropriate [embedded specific] | ||
14 | |||
15 | Signen-off-by: Wenzong Fan <wenzong.fan@windriver.com> | ||
16 | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> | ||
17 | --- | ||
18 | policy/modules/system/mount.te | 1 + | ||
19 | 1 file changed, 1 insertion(+) | ||
20 | |||
21 | diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te | ||
22 | index 8cd51d563..3fc37619e 100644 | ||
23 | --- a/policy/modules/system/mount.te | ||
24 | +++ b/policy/modules/system/mount.te | ||
25 | @@ -117,6 +117,7 @@ fs_dontaudit_write_all_image_files(mount_t) | ||
26 | |||
27 | mls_file_read_all_levels(mount_t) | ||
28 | mls_file_write_all_levels(mount_t) | ||
29 | +mls_process_write_to_clearance(mount_t) | ||
30 | |||
31 | selinux_get_enforce_mode(mount_t) | ||
32 | |||
33 | -- | ||
34 | 2.25.1 | ||
35 | |||