meta-selinux/recipes-security/refpolicy/refpolicy/0068-fix-building-when-dbus-module-is-not-enabled.patch
Yi Zhao 85a97cd9fc refpolicy: fix build for refpolicy-minimum
Backport 2 patches to fix build for refpolicy-minimum when INIT_MANAGER
is set to sysvinit.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
2025-09-19 10:02:22 +08:00

43 lines
1.3 KiB
Diff

From 1d62379321c19e89268ac7854a8ff8dce280ed07 Mon Sep 17 00:00:00 2001
From: Dave Sugar <dsugar100@gmail.com>
Date: Thu, 15 May 2025 10:05:24 -0400
Subject: [PATCH] fix building when dbus module is not enabled
Upstream-Status: Backport
[https://github.com/SELinuxProject/refpolicy/commit/1d62379321c19e89268ac7854a8ff8dce280ed07]
Signed-off-by: Dave Sugar <dsugar100@gmail.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
---
policy/modules/system/selinuxutil.te | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
index 86a6e5503..cd0e8762f 100644
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@@ -99,7 +99,8 @@ role run_init_roles types run_init_t;
type selinux_dbus_t;
type selinux_dbus_exec_t;
-dbus_system_domain(selinux_dbus_t, selinux_dbus_exec_t)
+domain_type(selinux_dbus_t)
+domain_entry_file(selinux_dbus_t, selinux_dbus_exec_t)
type semanage_t;
type semanage_exec_t;
@@ -504,6 +505,10 @@ miscfiles_read_localization(selinux_dbus_t)
seutil_domtrans_semanage(selinux_dbus_t)
+optional_policy(`
+ dbus_system_domain(selinux_dbus_t, selinux_dbus_exec_t)
+')
+
optional_policy(`
policykit_dbus_chat(selinux_dbus_t)
')
--
2.34.1