!52 add rule for systemd timedated on master

From: @HuaxinLuGitee
Reviewed-by: @zhujianwei001
Signed-off-by: @zhujianwei001

add-allow-systemd-timedated-to-unlink-etc-link.patch

@@ -0,0 +1,25 @@
+From 3180fd91dae6cad5367e850eabf765d442a7bd08 Mon Sep 17 00:00:00 2001
+From: HuaxinLuGitee <1539327763@qq.com>
+Date: Tue, 8 Dec 2020 19:12:03 +0800
+Subject: [PATCH] add allow systemd timedated to unlink etc link
+
+---
+ policy/modules/system/systemd.te | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
+index 0a65c1d..6e69517 100644
+--- a/policy/modules/system/systemd.te
++++ b/policy/modules/system/systemd.te
+@@ -877,6 +877,8 @@ allow systemd_timedated_t self:fifo_file rw_fifo_file_perms;
+ allow systemd_timedated_t self:unix_stream_socket create_stream_socket_perms;
+ allow systemd_timedated_t self:unix_dgram_socket create_socket_perms;
+ 
++allow systemd_timedated_t etc_t:lnk_file unlink;
++
+ allow systemd_timedated_t systemd_timedated_unit_file_t:service manage_service_perms;
+ 
+ manage_dirs_pattern(systemd_timedated_t, systemd_timedated_var_run_t, systemd_timedated_var_run_t)
+-- 
+1.8.3.1
+

selinux-policy.spec

@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 62
+Release: 63
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -68,6 +68,7 @@ Patch15: allow-systemd-machined-create-userdbd-runtime-sock-file.patch
 Patch16: allow-systemd_machined_t-delete-userdbd-runtime-sock.patch
 Patch17: allow-systemd-hostnamed-and-logind-read-policy.patch
 Patch18: add-firewalld-fc.patch
+Patch19: add-allow-systemd-timedated-to-unlink-etc-link.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -733,6 +734,9 @@ exit 0
 %endif
 
 %changelog
+* Tue Dec 8 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-63
+- add allow systemd timedated to unlink etc link
+
 * Fri Dec 4 2020 luhuaxin <1539327763@qq.com> - 3.14.2-62
 - rebuild selinux-policy with policycoreutils-3.1-5