2019-01-14 11:35:23

by Russell Coker

[permalink] [raw]
Subject: [PATCH] another trivial

This adds a hostnamed rule and also corrects an error in a previous patch I
sent (a copy/paste error).

Index: refpolicy-2.20180701/policy/modules/system/systemd.te
===================================================================
--- refpolicy-2.20180701.orig/policy/modules/system/systemd.te
+++ refpolicy-2.20180701/policy/modules/system/systemd.te
@@ -347,6 +347,10 @@ optional_policy(`
networkmanager_dbus_chat(systemd_hostnamed_t)
')

+optional_policy(`
+ unconfined_dbus_send(systemd_hostnamed_t)
+')
+
#########################################
#
# hw local policy
Index: refpolicy-2.20180701/policy/modules/admin/usermanage.te
===================================================================
--- refpolicy-2.20180701.orig/policy/modules/admin/usermanage.te
+++ refpolicy-2.20180701/policy/modules/admin/usermanage.te
@@ -550,7 +550,7 @@ optional_policy(`
')

optional_policy(`
- apt_use_fds(groupadd_t)
+ apt_use_fds(useradd_t)
')

optional_policy(`


2019-01-14 22:47:52

by Chris PeBenito

[permalink] [raw]
Subject: Re: [PATCH] another trivial

On 1/14/19 6:35 AM, Russell Coker wrote:
> This adds a hostnamed rule and also corrects an error in a previous patch I
> sent (a copy/paste error).

I merged the copy-paste error, but the hostnamed one still has a
question from the previous patch (subj: "some little stuff")

> Index: refpolicy-2.20180701/policy/modules/system/systemd.te
> ===================================================================
> --- refpolicy-2.20180701.orig/policy/modules/system/systemd.te
> +++ refpolicy-2.20180701/policy/modules/system/systemd.te
> @@ -347,6 +347,10 @@ optional_policy(`
> networkmanager_dbus_chat(systemd_hostnamed_t)
> ')
>
> +optional_policy(`
> + unconfined_dbus_send(systemd_hostnamed_t)
> +')
> +
> #########################################
> #
> # hw local policy
> Index: refpolicy-2.20180701/policy/modules/admin/usermanage.te
> ===================================================================
> --- refpolicy-2.20180701.orig/policy/modules/admin/usermanage.te
> +++ refpolicy-2.20180701/policy/modules/admin/usermanage.te
> @@ -550,7 +550,7 @@ optional_policy(`
> ')
>
> optional_policy(`
> - apt_use_fds(groupadd_t)
> + apt_use_fds(useradd_t)
> ')
>
> optional_policy(`
>


--
Chris PeBenito