packages/selinux-policy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add rule for systemd timedated

Browse Source
This commit is contained in:
HuaxinLuGitee 2020-12-08 21:01:54 +08:00
parent 3ec818194a
commit 262c228f61
2 changed files with 30 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
add-allow-systemd-timedated-to-unlink-etc-link.patch Normal file
View File

@ -0,0 +1,25 @@
From 3180fd91dae6cad5367e850eabf765d442a7bd08 Mon Sep 17 00:00:00 2001
From: HuaxinLuGitee <1539327763@qq.com>
Date: Tue, 8 Dec 2020 19:12:03 +0800
Subject: [PATCH] add allow systemd timedated to unlink etc link
---
policy/modules/system/systemd.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 0a65c1d..6e69517 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -877,6 +877,8 @@ allow systemd_timedated_t self:fifo_file rw_fifo_file_perms;
allow systemd_timedated_t self:unix_stream_socket create_stream_socket_perms;
allow systemd_timedated_t self:unix_dgram_socket create_socket_perms;
+allow systemd_timedated_t etc_t:lnk_file unlink;
+
allow systemd_timedated_t systemd_timedated_unit_file_t:service manage_service_perms;
manage_dirs_pattern(systemd_timedated_t, systemd_timedated_var_run_t, systemd_timedated_var_run_t)
--
1.8.3.1

6
selinux-policy.spec
View File

@ -12,7 +12,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.14.2
Release: 62
Release: 63
License: GPLv2+
URL: https://github.com/fedora-selinux/selinux-policy/
@ -68,6 +68,7 @@ Patch15: allow-systemd-machined-create-userdbd-runtime-sock-file.patch
Patch16: allow-systemd_machined_t-delete-userdbd-runtime-sock.patch
Patch17: allow-systemd-hostnamed-and-logind-read-policy.patch
Patch18: add-firewalld-fc.patch
Patch19: add-allow-systemd-timedated-to-unlink-etc-link.patch
BuildArch: noarch
BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@ -733,6 +734,9 @@ exit 0
%endif
%changelog
* Tue Dec 8 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-63
- add allow systemd timedated to unlink etc link
* Fri Dec 4 2020 luhuaxin <1539327763@qq.com> - 3.14.2-62
- rebuild selinux-policy with policycoreutils-3.1-5