File fix_kernel_sysctl.patch of Package selinux-policy

Overview Repositories Revisions Requests Users Attributes Meta

File fix_kernel_sysctl.patch of Package selinux-policy (Revision 430d2e01b26af6073875fa6954468dc5)

Currently displaying revision 430d2e01b26af6073875fa6954468dc5 , Show latest

Index: fedora-policy-20220428/policy/modules/kernel/files.fc
===================================================================
--- fedora-policy-20220428.orig/policy/modules/kernel/files.fc
+++ fedora-policy-20220428/policy/modules/kernel/files.fc
@@ -236,6 +236,8 @@ ifdef(`distro_redhat',`
 /usr/lib/ostree-boot(/.*)?                gen_context(system_u:object_r:usr_t,s0)
 /usr/lib/modules(/.*)/vmlinuz         -- 	gen_context(system_u:object_r:usr_t,s0)
 /usr/lib/modules(/.*)/initramfs.img   --	gen_context(system_u:object_r:usr_t,s0)
+/usr/lib/modules(/.*)/sysctl.conf     --	gen_context(system_u:object_r:usr_t,s0)
+/usr/lib/modules(/.*)/System.map      --	gen_context(system_u:object_r:system_map_t,s0)
 
 /usr/doc(/.*)?/lib(/.*)?	gen_context(system_u:object_r:usr_t,s0)
 
Index: fedora-policy-20220428/policy/modules/system/systemd.te
===================================================================
--- fedora-policy-20220428.orig/policy/modules/system/systemd.te
+++ fedora-policy-20220428/policy/modules/system/systemd.te
@@ -1052,6 +1052,8 @@ init_stream_connect(systemd_sysctl_t)
 logging_send_syslog_msg(systemd_sysctl_t)
 
 systemd_read_efivarfs(systemd_sysctl_t)
+# kernel specific sysctl.conf may be in modules dir
+allow systemd_sysctl_t modules_object_t:dir search;
 
 #######################################
 #

Places

File fix_kernel_sysctl.patch of Package selinux-policy (Revision 430d2e01b26af6073875fa6954468dc5)

Places