selinux-policy/backport-Label-var-run-ecblp0-pipe-with-cupsd_var_run_t.patch
2022-09-15 09:20:10 +08:00

35 lines
1.5 KiB
Diff

From a203bc37147e4480375faebc76021e7548790c70 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Mon, 14 Mar 2022 14:20:15 +0100
Subject: [PATCH] Label /var/run/ecblp0 pipe with cupsd_var_run_t
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/a203bc37147e4480375faebc76021e7548790c70
Conflict: NA
With the edce3e31ec2 (Label /var/run/ecblp0 as cupsd_var_run_t) commit,
default file context for /var/run/ecblp0 was defined for a plain file
instead of a named pipe which is actually used by epson drivers.
Resolves: rhbz#2061427
Signed-off-by: lujie54 <lujie54@huawei.com>
---
policy/modules/contrib/cups.fc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/contrib/cups.fc b/policy/modules/contrib/cups.fc
index f09217f..467eb7e 100644
--- a/policy/modules/contrib/cups.fc
+++ b/policy/modules/contrib/cups.fc
@@ -70,7 +70,7 @@
/var/ekpd(/.*)? gen_context(system_u:object_r:cupsd_var_run_t,s0)
/var/run/cups(/.*)? gen_context(system_u:object_r:cupsd_var_run_t,mls_systemhigh)
/var/run/hplip(/.*) gen_context(system_u:object_r:cupsd_var_run_t,s0)
-/var/run/ecblp0 -- gen_context(system_u:object_r:cupsd_var_run_t,s0)
+/var/run/ecblp0 -p gen_context(system_u:object_r:cupsd_var_run_t,s0)
/var/run/hp.*\.pid -- gen_context(system_u:object_r:cupsd_var_run_t,s0)
/var/run/hp.*\.port -- gen_context(system_u:object_r:cupsd_var_run_t,s0)
/var/run/ptal-printd(/.*)? gen_context(system_u:object_r:ptal_var_run_t,s0)
--
1.8.3.1