mirror of
git://git.yoctoproject.org/meta-selinux
synced 2026-01-01 13:58:04 +00:00
6f88a2fba5
ChangeLog: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618 https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923 Notable Changes 20250618: * Updates to support screen 5.0. * Add labeling for bcachefs. * Various systemd updates and fixes. 20250923: * Several updates and fixes for systemd * Add new permissions and policy capabilities * Drop reiserfs support (it was removed in kernel 6.13) Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
65 lines
3.0 KiB
Diff
65 lines
3.0 KiB
Diff
From 4a1c5f7649d960a1a5456f84da1fcc88d992b155 Mon Sep 17 00:00:00 2001
|
|
From: Yi Zhao <yi.zhao@windriver.com>
|
|
Date: Tue, 30 Jun 2020 10:45:57 +0800
|
|
Subject: [PATCH] fc: add fcontext for init scripts and systemd service files
|
|
|
|
Upstream-Status: Inappropriate [embedded specific]
|
|
|
|
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
|
|
---
|
|
policy/modules/services/cron.fc | 1 +
|
|
policy/modules/services/rngd.fc | 1 +
|
|
policy/modules/services/rpc.fc | 2 ++
|
|
policy/modules/system/logging.fc | 1 +
|
|
4 files changed, 5 insertions(+)
|
|
|
|
diff --git a/policy/modules/services/cron.fc b/policy/modules/services/cron.fc
|
|
index e71ad22c1..bb1351732 100644
|
|
--- a/policy/modules/services/cron.fc
|
|
+++ b/policy/modules/services/cron.fc
|
|
@@ -1,4 +1,5 @@
|
|
/etc/rc\.d/init\.d/(anacron|atd) -- gen_context(system_u:object_r:crond_initrc_exec_t,s0)
|
|
+/etc/rc\.d/init\.d/crond -- gen_context(system_u:object_r:crond_initrc_exec_t,s0)
|
|
|
|
/etc/cron\.d(/.*)? gen_context(system_u:object_r:system_cron_spool_t,s0)
|
|
/etc/crontab -- gen_context(system_u:object_r:system_cron_spool_t,s0)
|
|
diff --git a/policy/modules/services/rngd.fc b/policy/modules/services/rngd.fc
|
|
index 382c067f9..0ecc5acc4 100644
|
|
--- a/policy/modules/services/rngd.fc
|
|
+++ b/policy/modules/services/rngd.fc
|
|
@@ -1,4 +1,5 @@
|
|
/etc/rc\.d/init\.d/rngd -- gen_context(system_u:object_r:rngd_initrc_exec_t,s0)
|
|
+/etc/rc\.d/init\.d/rng-tools -- gen_context(system_u:object_r:rngd_initrc_exec_t,s0)
|
|
|
|
/usr/bin/rngd -- gen_context(system_u:object_r:rngd_exec_t,s0)
|
|
|
|
diff --git a/policy/modules/services/rpc.fc b/policy/modules/services/rpc.fc
|
|
index fb579bc9d..12e086b8d 100644
|
|
--- a/policy/modules/services/rpc.fc
|
|
+++ b/policy/modules/services/rpc.fc
|
|
@@ -2,7 +2,9 @@
|
|
/etc/exports\.d(/.*)? gen_context(system_u:object_r:exports_t,s0)
|
|
|
|
/etc/rc\.d/init\.d/nfs -- gen_context(system_u:object_r:nfsd_initrc_exec_t,s0)
|
|
+/etc/rc\.d/init\.d/nfsserver -- gen_context(system_u:object_r:nfsd_initrc_exec_t,s0)
|
|
/etc/rc\.d/init\.d/nfslock -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0)
|
|
+/etc/rc\.d/init\.d/nfscommon -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0)
|
|
/etc/rc\.d/init\.d/rpcidmapd -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0)
|
|
|
|
/usr/bin/blkmapd -- gen_context(system_u:object_r:blkmapd_exec_t,s0)
|
|
diff --git a/policy/modules/system/logging.fc b/policy/modules/system/logging.fc
|
|
index 102a89e48..b10ea8acf 100644
|
|
--- a/policy/modules/system/logging.fc
|
|
+++ b/policy/modules/system/logging.fc
|
|
@@ -24,6 +24,7 @@
|
|
/usr/lib/systemd/system/auditd.* -- gen_context(system_u:object_r:auditd_unit_t,s0)
|
|
/usr/lib/systemd/system/[^/]*systemd-journal.* -- gen_context(system_u:object_r:syslogd_unit_t,s0)
|
|
/usr/lib/systemd/system/rsyslog.*\.service -- gen_context(system_u:object_r:syslogd_unit_t,s0)
|
|
+/usr/lib/systemd/system/syslog.*\.service -- gen_context(system_u:object_r:syslogd_unit_t,s0)
|
|
/usr/lib/systemd/systemd-journald -- gen_context(system_u:object_r:syslogd_exec_t,s0)
|
|
/usr/lib/systemd/systemd-kmsg-syslogd -- gen_context(system_u:object_r:syslogd_exec_t,s0)
|
|
|
|
--
|
|
2.34.1
|
|
|