CaROS/meta-selinux
3
0
Fork 0
mirror of git://git.yoctoproject.org/meta-selinux synced 2026-01-01 13:58:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

refpolicy: add file context for findfs alternative

Browse Source 
Add file context for findfs alternative which is provided by util-linux.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
This commit is contained in:
Yi Zhao 2022-05-24 23:52:54 +08:00 committed by Joe MacDonald
parent 4e17405f48
commit a401f4b281
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
recipes-security/refpolicy/refpolicy/0069-fc-fstools-apply-policy-to-findfs-alternative.patch Normal file
View File

@ -0,0 +1,29 @@
From 3e3ec39659ae068d20efbb5f13054d90960c3c3f Mon Sep 17 00:00:00 2001
From: Yi Zhao <yi.zhao@windriver.com>
Date: Thu, 19 May 2022 16:51:49 +0800
Subject: [PATCH] fc/fstools: apply policy to findfs alternative
Add file context for findfs alternative which is provided by util-linux.
Upstream-Status: Inappropriate [embedded specific]
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
---
policy/modules/system/fstools.fc | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
index bef711850..91be0ef3d 100644
--- a/policy/modules/system/fstools.fc
+++ b/policy/modules/system/fstools.fc
@@ -77,6 +77,7 @@
/usr/sbin/fdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fdisk\.util-linux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/findfs -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+/usr/sbin/findfs\.util-linux -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/fsck.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/gdisk -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/hdparm -- gen_context(system_u:object_r:fsadm_exec_t,s0)
--
2.25.1

1
recipes-security/refpolicy/refpolicy_common.inc
View File

@ -84,6 +84,7 @@ SRC_URI += " \
file://0066-systemd-add-missing-file-context-for-run-systemd-net.patch \
file://0067-systemd-add-file-contexts-for-systemd-network-genera.patch \
file://0068-systemd-udev-allow-udev-to-read-systemd-networkd-run.patch \
file://0069-fc-fstools-apply-policy-to-findfs-alternative.patch \
"
S = "${WORKDIR}/refpolicy"