File fix_selinuxutil.patch of Package selinux-policy

Overview Repositories Revisions Requests Users Attributes Meta

File fix_selinuxutil.patch of Package selinux-policy (Revision 4995580e21668f1df92dc1659252d973)

Currently displaying revision 4995580e21668f1df92dc1659252d973 , Show latest

Index: fedora-policy-20210628/policy/modules/system/selinuxutil.te
===================================================================
--- fedora-policy-20210628.orig/policy/modules/system/selinuxutil.te
+++ fedora-policy-20210628/policy/modules/system/selinuxutil.te
@@ -238,6 +238,10 @@ ifdef(`hide_broken_symptoms',`
 ')
 
 optional_policy(`
+	packagekit_read_write_fifo(load_policy_t)
+')
+
+optional_policy(`
 	portage_dontaudit_use_fds(load_policy_t)
 ')
 
@@ -618,6 +622,10 @@ logging_send_audit_msgs(setfiles_t)
 logging_send_syslog_msg(setfiles_t)
 
 optional_policy(`
+	packagekit_read_write_fifo(setfiles_t)
+')
+
+optional_policy(`
     cloudform_dontaudit_write_cloud_log(setfiles_t)
 ')
 
Index: fedora-policy-20210628/policy/modules/system/selinuxutil.if
===================================================================
--- fedora-policy-20210628.orig/policy/modules/system/selinuxutil.if
+++ fedora-policy-20210628/policy/modules/system/selinuxutil.if
@@ -795,6 +795,8 @@ interface(`seutil_dontaudit_read_config'
 
 	dontaudit $1 selinux_config_t:dir search_dir_perms;
 	dontaudit $1 selinux_config_t:file read_file_perms;
+	# /etc/selinux/config was a link to /etc/sysconfig/selinux-policy, ignore read attemps
+	dontaudit $1 selinux_config_t:lnk_file read_lnk_file_perms;
 ')
 
 ########################################

Places

File fix_selinuxutil.patch of Package selinux-policy (Revision 4995580e21668f1df92dc1659252d973)

Places