diff options
author | Yi Zhao <yi.zhao@windriver.com> | 2023-07-27 14:07:48 -0400 |
---|---|---|
committer | Joe MacDonald <joe@deserted.net> | 2023-07-31 15:05:30 -0400 |
commit | 1924d975283210f0c36bc3c0e8ce516ccc06961f (patch) | |
tree | 494be7575b6219b816613ddefb6072973d8e78d4 /recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch | |
parent | 4f3ec6e10f13aaf19fbca9a18547f9e72ba1ec0a (diff) | |
download | meta-selinux-dunfell.tar.gz |
refpolicy: update to 20200229+gitdunfell
* Drop obsolete and unused patches.
* Rebase patches.
* Add patches to make systemd and sysvinit can work with all policy types.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
(cherry picked from commit 15fed8756aa4828fa12a3d813754b4ca65a7607d)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch b/recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch deleted file mode 100644 index ced90be..0000000 --- a/recipes-security/refpolicy/refpolicy-git/0032-policy-module-init-update-for-systemd-related-allow-.patch +++ /dev/null | |||
@@ -1,32 +0,0 @@ | |||
1 | From ddb7393018483be0ce1cfc4734043b413e3b8a04 Mon Sep 17 00:00:00 2001 | ||
2 | From: Shrikant Bobade <shrikant_bobade@mentor.com> | ||
3 | Date: Fri, 12 Jun 2015 19:37:52 +0530 | ||
4 | Subject: [PATCH 32/34] policy/module/init: update for systemd related allow | ||
5 | rules | ||
6 | |||
7 | It provide, the systemd support related allow rules | ||
8 | |||
9 | Upstream-Status: Pending | ||
10 | |||
11 | Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com> | ||
12 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
13 | --- | ||
14 | policy/modules/system/init.te | 5 +++++ | ||
15 | 1 file changed, 5 insertions(+) | ||
16 | |||
17 | diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te | ||
18 | index f7635d6f..2e6b57a6 100644 | ||
19 | --- a/policy/modules/system/init.te | ||
20 | +++ b/policy/modules/system/init.te | ||
21 | @@ -1418,3 +1418,8 @@ optional_policy(` | ||
22 | userdom_dontaudit_rw_all_users_stream_sockets(systemprocess) | ||
23 | userdom_dontaudit_write_user_tmp_files(systemprocess) | ||
24 | ') | ||
25 | + | ||
26 | +# systemd related allow rules | ||
27 | +allow kernel_t init_t:process dyntransition; | ||
28 | +allow devpts_t device_t:filesystem associate; | ||
29 | +allow init_t self:capability2 block_suspend; | ||
30 | -- | ||
31 | 2.19.1 | ||
32 | |||