From 776da889b550ac9e5be414a8cc10fd86b1923264 Mon Sep 17 00:00:00 2001 From: Joe MacDonald Date: Mon, 8 Apr 2019 13:50:40 -0400 Subject: refpolicy: update to 2.20190201 and git HEAD policies Additionally, the README has fallen out of date, update it to reflect the current reality of layer dependencies. Signed-off-by: Joe MacDonald --- ...c-udev-apply-policy-to-udevadm-in-libexec.patch | 28 ++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-2.20190201/0013-fc-udev-apply-policy-to-udevadm-in-libexec.patch (limited to 'recipes-security/refpolicy/refpolicy-2.20190201/0013-fc-udev-apply-policy-to-udevadm-in-libexec.patch') diff --git a/recipes-security/refpolicy/refpolicy-2.20190201/0013-fc-udev-apply-policy-to-udevadm-in-libexec.patch b/recipes-security/refpolicy/refpolicy-2.20190201/0013-fc-udev-apply-policy-to-udevadm-in-libexec.patch new file mode 100644 index 0000000..495b82f --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-2.20190201/0013-fc-udev-apply-policy-to-udevadm-in-libexec.patch @@ -0,0 +1,28 @@ +From e38e269b172ec75dcd218cfeac64271fbb3d17db Mon Sep 17 00:00:00 2001 +From: Joe MacDonald +Date: Fri, 29 Mar 2019 09:36:08 -0400 +Subject: [PATCH 13/34] fc/udev: apply policy to udevadm in libexec + +Upstream-Status: Pending + +Signed-off-by: Joe MacDonald +--- + policy/modules/system/udev.fc | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/policy/modules/system/udev.fc b/policy/modules/system/udev.fc +index 009d821a..cc438609 100644 +--- a/policy/modules/system/udev.fc ++++ b/policy/modules/system/udev.fc +@@ -28,6 +28,8 @@ ifdef(`distro_debian',` + /usr/sbin/udevstart -- gen_context(system_u:object_r:udev_exec_t,s0) + /usr/sbin/wait_for_sysfs -- gen_context(system_u:object_r:udev_exec_t,s0) + ++/usr/libexec/udevadm -- gen_context(system_u:object_r:udev_exec_t,s0) ++ + ifdef(`distro_redhat',` + /usr/sbin/start_udev -- gen_context(system_u:object_r:udev_exec_t,s0) + ') +-- +2.19.1 + -- cgit v1.2.3-54-g00ecf