Received: by 2002:a25:ad19:0:0:0:0:0 with SMTP id y25csp3483336ybi; Tue, 2 Jul 2019 08:31:28 -0700 (PDT) X-Google-Smtp-Source: APXvYqxleV4W49WaaMOysI7TWW2QLvn6tnPTwf4pJAapRi56ic2O8pvq7CLq8KIH9SheKn5aQWFG X-Received: by 2002:a17:90a:ac13:: with SMTP id o19mr6227425pjq.143.1562081488688; Tue, 02 Jul 2019 08:31:28 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1562081488; cv=none; d=google.com; s=arc-20160816; b=FYdHN+oioj9Nho6zUz7DccuDZeEPXaEZGvfyuHouA0gGsmKswnknOrFA8HVy2x6zDZ rlXPubyyxA84ZBoNAOnHAt0SNY2K9FOKagTH4eBqLL6SIiSiGr1tcBUlkD4FF5wknF5b 4ll8HwaUia7Dh76LSPMf1quHux8dqT5O1eBpuk3TC0PN1Pnnv3Ii+aDM1HKbe8MElily r9AtmE3r67GNDMucEf9l4GRpVKH+DrbUTpzKOMUfuRcdViCZg7Y8JtI2Tp7qfCuhBdIR nV4zIqAwCyfipPsZhE1raBh5bC79ZgDdiXjBzCkvXEHA9aRi+tRTy+zt6qw9cAVQv5my Rhxg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:content-transfer-encoding :content-language:accept-language:message-id:date:thread-index :thread-topic:subject:to:from:dkim-signature; bh=rfRtkeWUjIv57u4Px9Gp8TnfvMVtu8zXVFKYe962lY4=; b=Zh0s//SlxfsjBXoJ5PhejTXHMwdCXS4tFybku7GNwgVdyr7tO8wdELIT9luPY5kwkW KDWJGtwM9U1aEQ2xVKwbjBsS3Nq+izhfaY2Q9W5vLeZdhU9jFOocZbrC63pEBcsSwD9u sIbgS7uo12cHs13XC/vzKsyad2DvbOQzIqdcmSxG6jep+pAigKM9AHk5Hz7SoYqSKdxa +5QeTdiWjt6+wjdr8PHI5y5H4SoC9q81Ie0LxD2go/km7JB9MUYqnrhkrLEBg5B1OaGQ /5JPVg4YwnjSTPcgG/mt4HItB7uyRRONV+zgavluiqtofLTX9oJGRRjbd/Xe/Yz4TXoY 1r/A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@tresys.onmicrosoft.com header.s=selector2-tresys-onmicrosoft-com header.b=v9ukOhF4; spf=pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id o7si2828822pgi.74.2019.07.02.08.31.26; Tue, 02 Jul 2019 08:31:28 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@tresys.onmicrosoft.com header.s=selector2-tresys-onmicrosoft-com header.b=v9ukOhF4; spf=pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1725835AbfGBPad (ORCPT + 11 others); Tue, 2 Jul 2019 11:30:33 -0400 Received: from mail-eopbgr700116.outbound.protection.outlook.com ([40.107.70.116]:63562 "EHLO NAM04-SN1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1725780AbfGBPac (ORCPT ); Tue, 2 Jul 2019 11:30:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tresys.onmicrosoft.com; s=selector2-tresys-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rfRtkeWUjIv57u4Px9Gp8TnfvMVtu8zXVFKYe962lY4=; b=v9ukOhF4jIMf+v4R9ue74w4SZ3obc1vI1kpZsgAuf3jD3jonqV6zPcy5Ktk4IKsPswg+PaY4x0A/6nDdAyvSrPYQY8Ii41FLM77BtnlDNI2LTin+pHvRyfLkcejxDJPDZscDaPUk0Xjybi/6SpONo3W4HJEkxT8VZwxjcuk31Es= Received: from BN6PR15MB1507.namprd15.prod.outlook.com (10.172.151.147) by BN6PR15MB1170.namprd15.prod.outlook.com (10.172.206.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2032.18; Tue, 2 Jul 2019 15:30:29 +0000 Received: from BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::80fc:6403:1abc:cb23]) by BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::80fc:6403:1abc:cb23%6]) with mapi id 15.20.2032.019; Tue, 2 Jul 2019 15:30:28 +0000 From: "Sugar, David" To: "selinux-refpolicy@vger.kernel.org" Subject: [PATCH 0/5] Updates for RPM module Thread-Topic: [PATCH 0/5] Updates for RPM module Thread-Index: AQHVMOsTD+Tp6V1yI0WST8gszIPRtw== Date: Tue, 2 Jul 2019 15:30:28 +0000 Message-ID: <20190702153014.14097-1-dsugar@tresys.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [96.244.17.66] x-clientproxiedby: BN8PR03CA0034.namprd03.prod.outlook.com (2603:10b6:408:94::47) To BN6PR15MB1507.namprd15.prod.outlook.com (2603:10b6:404:c6::19) authentication-results: spf=none (sender IP is ) smtp.mailfrom=dsugar@tresys.com; x-ms-exchange-messagesentrepresentingtype: 1 x-mailer: git-send-email 2.21.0 x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 5fb2b283-4b61-4a94-55ca-08d6ff0235d5 x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020);SRVR:BN6PR15MB1170; x-ms-traffictypediagnostic: BN6PR15MB1170: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 008663486A x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(4636009)(136003)(376002)(39830400003)(346002)(396003)(366004)(189003)(199004)(2616005)(305945005)(14444005)(86362001)(476003)(4744005)(2906002)(486006)(66476007)(66556008)(64756008)(66446008)(5660300002)(14454004)(186003)(25786009)(102836004)(6116002)(3846002)(2501003)(26005)(316002)(6506007)(508600001)(50226002)(66946007)(1076003)(386003)(5640700003)(52116002)(256004)(8676002)(66066001)(6916009)(6486002)(99286004)(6436002)(53936002)(36756003)(6512007)(81166006)(2351001)(7736002)(81156014)(73956011)(8936002)(71200400001)(71190400001)(68736007);DIR:OUT;SFP:1102;SCL:1;SRVR:BN6PR15MB1170;H:BN6PR15MB1507.namprd15.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:1; received-spf: None (protection.outlook.com: tresys.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: WkTnF1FAqmID47zRtj+Trr27Cji5M+FeVphYt1KIBckXVj9lgrihkcgtkn85uIPh+flUvQP00fySMjgVO8KEK6cUHX4tNi//OTD7TAU47+cZUIP/8DBykvwR02WKqBtYNQyDXI43qaiouHD0cVlJpk3nWhYdPOHpGR8okRn5FXrhEtz2ihA89oLrM80P5pgyjLH0cwC+OiG4kUwX3mjywc0h69X8pUicga36RvZ7PL8oBOYMZXgHDW9hop5WNmNStGg2jgRDVxPLAMDlkeXeZuuLVpdQ+NG8Kf5p3sA9HKDAvaAC9UqLdbaK9D+mCWNqXvgYjzWYPJFEPhUSDJEc11XQLK4+qw/NKLryq1Nyz4QStHVVAXKlAiyvw7R433WmX/X+S3N6KWzHOdgJwGDWbpmK5ZhY+xr+6vJG3Yblonk= Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: tresys.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5fb2b283-4b61-4a94-55ca-08d6ff0235d5 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2019 15:30:28.6171 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: a0d45667-6c07-4e88-868f-4ac9af95c7ed X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dsugar@tresys.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR15MB1170 Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org A series of changes for the RPM module. I reviewed the changes that are in= the=20 RedHat targeted policy while working on these patches to keep things as sim= ilar as possible. Dave Sugar (5): grant rpm permission to map rpm_var_lib_t grant permission for rpm to write to audit log grant rpm permissions on locale_t Allow rpm to map file contexts Allow rpm scripts to alter systemd services policy/modules/admin/rpm.te | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) --=20 2.21.0