selinux-policy/backport-Allow-pppd-create-a-file-in-the-locks-directory.patch
2022-09-15 09:20:10 +08:00

34 lines
1.2 KiB
Diff

From 699f4dcf2a9b39a02427bd859c91c625e11998a6 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Fri, 8 Apr 2022 15:50:13 +0200
Subject: [PATCH] Allow pppd create a file in the locks directory
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/699f4dcf2a9b39a02427bd859c91c625e11998a6
Conflict: NA
So far, a rule for creating a private lock dir was defined in the
policy. Since this commit there is also a rule for a plain file.
Resolves: rhbz#2022902
Signed-off-by: lujie54 <lujie54@huawei.com>
---
policy/modules/contrib/ppp.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/contrib/ppp.te b/policy/modules/contrib/ppp.te
index c2da84b..9b08134 100644
--- a/policy/modules/contrib/ppp.te
+++ b/policy/modules/contrib/ppp.te
@@ -106,7 +106,7 @@ manage_files_pattern(pppd_t, pppd_etc_rw_t, pppd_etc_rw_t)
filetrans_pattern(pppd_t, pppd_etc_t, pppd_etc_rw_t, file)
manage_files_pattern(pppd_t, pppd_lock_t, pppd_lock_t)
-files_lock_filetrans(pppd_t, pppd_lock_t, dir)
+files_lock_filetrans(pppd_t, pppd_lock_t, { dir file })
files_search_locks(pppd_t)
manage_files_pattern(pppd_t, pppd_log_t, pppd_log_t)
--
1.8.3.1