diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch b/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch deleted file mode 100644 index 8443e31..0000000 --- a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch +++ /dev/null | |||
@@ -1,37 +0,0 @@ | |||
1 | From 2f5981f2244289a1cc79748e9ffdaaea168b1df2 Mon Sep 17 00:00:00 2001 | ||
2 | From: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
3 | Date: Fri, 23 Aug 2013 16:36:09 +0800 | ||
4 | Subject: [PATCH] fix dmesg to use /dev/kmsg as default input | ||
5 | |||
6 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
7 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
8 | --- | ||
9 | policy/modules/admin/dmesg.if | 1 + | ||
10 | policy/modules/admin/dmesg.te | 2 ++ | ||
11 | 2 files changed, 3 insertions(+) | ||
12 | |||
13 | --- a/policy/modules/admin/dmesg.if | ||
14 | +++ b/policy/modules/admin/dmesg.if | ||
15 | @@ -35,6 +35,7 @@ interface(`dmesg_exec',` | ||
16 | type dmesg_exec_t; | ||
17 | ') | ||
18 | |||
19 | corecmd_search_bin($1) | ||
20 | can_exec($1, dmesg_exec_t) | ||
21 | + dev_read_kmsg($1) | ||
22 | ') | ||
23 | --- a/policy/modules/admin/dmesg.te | ||
24 | +++ b/policy/modules/admin/dmesg.te | ||
25 | @@ -28,10 +28,12 @@ kernel_read_proc_symlinks(dmesg_t) | ||
26 | # for when /usr is not mounted: | ||
27 | kernel_dontaudit_search_unlabeled(dmesg_t) | ||
28 | |||
29 | dev_read_sysfs(dmesg_t) | ||
30 | |||
31 | +dev_read_kmsg(dmesg_t) | ||
32 | + | ||
33 | fs_search_auto_mountpoints(dmesg_t) | ||
34 | |||
35 | term_dontaudit_use_console(dmesg_t) | ||
36 | |||
37 | domain_use_interactive_fds(dmesg_t) | ||