File fix_usermanage.patch of Package selinux-policy

Overview Repositories Revisions Requests Users Attributes Meta

File fix_usermanage.patch of Package selinux-policy (Revision 4008478ada5af4c165762e5241cc4083)

Currently displaying revision 4008478ada5af4c165762e5241cc4083 , Show latest

Index: fedora-policy-20220428/policy/modules/admin/usermanage.te
===================================================================
--- fedora-policy-20220428.orig/policy/modules/admin/usermanage.te
+++ fedora-policy-20220428/policy/modules/admin/usermanage.te
@@ -226,6 +226,7 @@ allow groupadd_t self:unix_dgram_socket
 allow groupadd_t self:unix_stream_socket create_stream_socket_perms;
 allow groupadd_t self:unix_dgram_socket sendto;
 allow groupadd_t self:unix_stream_socket connectto;
+allow groupadd_t self:netlink_selinux_socket create_socket_perms;
 
 fs_getattr_xattr_fs(groupadd_t)
 fs_search_auto_mountpoints(groupadd_t)
@@ -538,6 +539,7 @@ allow useradd_t self:unix_dgram_socket c
 allow useradd_t self:unix_stream_socket create_stream_socket_perms;
 allow useradd_t self:unix_dgram_socket sendto;
 allow useradd_t self:unix_stream_socket connectto;
+allow useradd_t self:netlink_selinux_socket create_socket_perms;
 
 manage_dirs_pattern(useradd_t, useradd_var_run_t, useradd_var_run_t)
 manage_files_pattern(useradd_t, useradd_var_run_t, useradd_var_run_t)
@@ -546,6 +548,8 @@ files_pid_filetrans(useradd_t, useradd_v
 # for getting the number of groups
 kernel_read_kernel_sysctls(useradd_t)
 
+selinux_compute_access_vector(useradd_t)
+
 corecmd_exec_shell(useradd_t)
 # Execute /usr/bin/{passwd,chfn,chsh} and /usr/sbin/{useradd,vipw}.
 corecmd_exec_bin(useradd_t)

Places

File fix_usermanage.patch of Package selinux-policy (Revision 4008478ada5af4c165762e5241cc4083)

Places