!71 [sync] PR-63: selinux: call init_nnp_daemon_domain for domain to allow for systemd

From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee, @zhujianwei001 
Signed-off-by: @HuaxinLuGitee, @zhujianwei001
This commit is contained in:
openeuler-ci-bot 2025-04-30 03:51:01 +00:00 committed by Gitee
commit c586f5b233
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 33 additions and 1 deletions

View File

@ -0,0 +1,25 @@
From 2740de19da2153df8eb0e2ab0a98544e7db2d7da Mon Sep 17 00:00:00 2001
From: jiawenhao <jiawenhao@xfusion.com>
Date: Sun, 20 Apr 2025 09:33:56 +0800
Subject: [PATCH] call-init_nnp_daemon_domain-for-domain-to-allow-for-systemd
---
selinux/tabrmd.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/selinux/tabrmd.te b/selinux/tabrmd.te
index 8996a46..efd2336 100644
--- a/selinux/tabrmd.te
+++ b/selinux/tabrmd.te
@@ -9,7 +9,7 @@ gen_tunable(`tabrmd_connect_all_unreserved', false)
type tabrmd_t;
type tabrmd_exec_t;
-init_daemon_domain(tabrmd_t, tabrmd_exec_t)
+init_nnp_daemon_domain(tabrmd_t, tabrmd_exec_t)
allow tabrmd_t self:unix_dgram_socket { create_socket_perms };
--
2.43.0

View File

@ -2,7 +2,7 @@
Name: tpm2-abrmd
Version: 3.0.0
Release: 5
Release: 6
Summary: A system daemon implementing the TPM2 access broker (TAB) & Resource Manager (RM) spec from the TCG
License: BSD
URL: https://github.com/tpm2-software/tpm2-abrmd
@ -10,6 +10,7 @@ Source0: https://github.com/tpm2-software/tpm2-abrmd/releases/download/%
Patch3001: Hygon-Add-support-for-TCM-devices.patch
Patch3002: backport-fix-in-SELinux-interface-file-a-typo.patch
Patch3003: backport-call-init_nnp_daemon_domain-for-domain-to-allow.patch
BuildRequires: systemd pkgconfig(cmocka) pkgconfig(dbus-1) pkgconfig(gio-unix-2.0) pkgconfig(tss2-mu) pkgconfig(tss2-sys)
BuildRequires: tpm2-tss-devel >= 2.4.0 libtool autoconf-archive libgcrypt libgcrypt-devel
@ -139,6 +140,12 @@ fi
%{_datadir}/selinux/packages/tabrmd.pp.bz2
%changelog
* Sun Apr 20 2025 jiawenhao <jiawenhao@xfusion.com> - 3.0.0-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: call init_nnp_daemon_domain for domain to allow for systemd
* Fri Apr 18 2025 jiawenhao <jiawenhao@xfusion.com> - 3.0.0-5
- Type:bugfix
- ID:NA