diff options
author | Joe MacDonald <joe@deserted.net> | 2019-04-08 13:50:40 -0400 |
---|---|---|
committer | Joe MacDonald <joe@deserted.net> | 2019-04-10 10:57:14 -0400 |
commit | 776da889b550ac9e5be414a8cc10fd86b1923264 (patch) | |
tree | 79771fa29c551e934321434f4b5f3da7a27fd91f /recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch | |
parent | a6a3cadb1ef3203a123d8f5f9df27832f55b2ce3 (diff) | |
download | meta-selinux-jjm/RELEASE_2.20190201.tar.gz |
refpolicy: update to 2.20190201 and git HEAD policiesjjm/RELEASE_2.20190201
Additionally, the README has fallen out of date, update it to reflect the
current reality of layer dependencies.
Signed-off-by: Joe MacDonald <joe@deserted.net>
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch b/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch deleted file mode 100644 index 8443e31..0000000 --- a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch +++ /dev/null | |||
@@ -1,37 +0,0 @@ | |||
1 | From 2f5981f2244289a1cc79748e9ffdaaea168b1df2 Mon Sep 17 00:00:00 2001 | ||
2 | From: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
3 | Date: Fri, 23 Aug 2013 16:36:09 +0800 | ||
4 | Subject: [PATCH] fix dmesg to use /dev/kmsg as default input | ||
5 | |||
6 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
7 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
8 | --- | ||
9 | policy/modules/admin/dmesg.if | 1 + | ||
10 | policy/modules/admin/dmesg.te | 2 ++ | ||
11 | 2 files changed, 3 insertions(+) | ||
12 | |||
13 | --- a/policy/modules/admin/dmesg.if | ||
14 | +++ b/policy/modules/admin/dmesg.if | ||
15 | @@ -35,6 +35,7 @@ interface(`dmesg_exec',` | ||
16 | type dmesg_exec_t; | ||
17 | ') | ||
18 | |||
19 | corecmd_search_bin($1) | ||
20 | can_exec($1, dmesg_exec_t) | ||
21 | + dev_read_kmsg($1) | ||
22 | ') | ||
23 | --- a/policy/modules/admin/dmesg.te | ||
24 | +++ b/policy/modules/admin/dmesg.te | ||
25 | @@ -28,10 +28,12 @@ kernel_read_proc_symlinks(dmesg_t) | ||
26 | # for when /usr is not mounted: | ||
27 | kernel_dontaudit_search_unlabeled(dmesg_t) | ||
28 | |||
29 | dev_read_sysfs(dmesg_t) | ||
30 | |||
31 | +dev_read_kmsg(dmesg_t) | ||
32 | + | ||
33 | fs_search_auto_mountpoints(dmesg_t) | ||
34 | |||
35 | term_dontaudit_use_console(dmesg_t) | ||
36 | |||
37 | domain_use_interactive_fds(dmesg_t) | ||