Received: by 2002:a05:6a10:7420:0:0:0:0 with SMTP id hk32csp412843pxb; Thu, 17 Feb 2022 06:50:52 -0800 (PST) X-Google-Smtp-Source: ABdhPJw+VPgguGUyf6OM0NPZwST8SmmfADcu9hv0LHO9yGiEtfBq1H2fbp0gvm1rNeM0V49bgp5r X-Received: by 2002:a17:906:1948:b0:6b5:1ca3:a34f with SMTP id b8-20020a170906194800b006b51ca3a34fmr2563514eje.451.1645109452541; Thu, 17 Feb 2022 06:50:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1645109452; cv=none; d=google.com; s=arc-20160816; b=YsP0xjFf76O2rJUOaI0EHLf8fAxWeqO775zjrjLy7FKSdQf9tCpHiMuJHo8K6eTWgW eXJBR2FYVriOd71AOYcnUlXcxO+wuk2KuCKGLkd5DOR++8EO8132/Da9vn7y6rXRz/AJ xGU21CmAiLwhk/uTYatFtJPj0Ip0RnbR11xPMSD+XYbWMlotsJsdHK5reElTw+Ez7c+U FrLxhPUMxxCg2fF+csrZuJfzCLVdZKsG9wk4qiN+K/LZP9aGkctolr2pIqczo9671XqR AO/4WO1NmDLKeaRdpR2YbjUnH1mHN/WhI3AeuSkVu2fkf5TcGtQrIpiRK7Pc/mRJB/9O hQYQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-disposition:mime-version:message-id :subject:to:from:date:dkim-signature; bh=15nyWOq3A3TRZhKr7BX/H+BDkE2oCVWM6aecsgAtKjs=; b=Qnd/ZKVrXcVlieTMmRamI54wWhbZuPG9yVlDSVpUndc7AnpLLItX3ur+aRvCapKifV iYkVYzB/s7wIdlQNKv8SJUwaz/WYA+ODQRIbTJ0t8JaU9W6XC2rRhyDe/QxUC08kzezQ 4x14Suq2uNkgrKySTiaSeFQBE6KSAe5sx2S2puV50UzDHr1G6aLNmC3oy/qx4XohRpoW ENL0YBUD3iXosP/N4OVvZGv6JwnhWoxxd93a5V7ASab0AAeUB5pDnF6byEfwAqrT8mcm 4m7kTpVFeBZnlruhLWXf+o3fB7MNtwoVeP+LHK++8/7NbOZDo+i430+Jnx0zXo+6XdKO oXaA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@coker.com.au header.s=2008 header.b=wxTsoHzd; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=coker.com.au Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id f20si4080650edc.256.2022.02.17.06.50.44; Thu, 17 Feb 2022 06:50:52 -0800 (PST) Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@coker.com.au header.s=2008 header.b=wxTsoHzd; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=coker.com.au Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S237937AbiBQIyb (ORCPT + 22 others); Thu, 17 Feb 2022 03:54:31 -0500 Received: from mxb-00190b01.gslb.pphosted.com ([23.128.96.19]:37362 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229830AbiBQIy3 (ORCPT ); Thu, 17 Feb 2022 03:54:29 -0500 Received: from smtp.sws.net.au (smtp.sws.net.au [IPv6:2a01:4f8:201:1e6::dada:cafe]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id D0AE723969A for ; Thu, 17 Feb 2022 00:54:14 -0800 (PST) Received: from xev.coker.com.au (localhost [127.0.0.1]) by smtp.sws.net.au (Postfix) with ESMTP id 5B78DF249 for ; Thu, 17 Feb 2022 19:54:12 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coker.com.au; s=2008; t=1645088052; bh=15nyWOq3A3TRZhKr7BX/H+BDkE2oCVWM6aecsgAtKjs=; l=1840; h=Date:From:To:Subject:From; b=wxTsoHzdanOqTgJDz7NIDGXNdtsIFl4YR84sjRCihr/6i9WXShhF4hIItD/x+M6cr DfaRqpznuvjvQPXJ8U3SNzkB0bOHYfA0ngbF0T/2W7QeHmnH7RkNGM0q2LR/cO8RjB q73mXwyRaKtfsXUGkEK1Vt+/+cUQ2LGtE3uYOPZQ= Received: by xev.coker.com.au (Postfix, from userid 1001) id C94DF17347BE; Thu, 17 Feb 2022 19:54:07 +1100 (AEDT) Date: Thu, 17 Feb 2022 19:54:07 +1100 From: Russell Coker To: selinux-refpolicy@vger.kernel.org Subject: [PATCH] init dbus patch for GetDynamicUsers with systemd_use_nss() Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org As requested changed this patch to use systemd_use_nss(). I think it's ready to merge. Signed-off-by: Russell Coker Index: refpolicy-2.20220217/policy/modules/services/dictd.te =================================================================== --- refpolicy-2.20220217.orig/policy/modules/services/dictd.te +++ refpolicy-2.20220217/policy/modules/services/dictd.te @@ -79,3 +79,6 @@ optional_policy(` seutil_sigchld_newrole(dictd_t) ') +ifdef(`init_systemd',` + systemd_use_nss(dictd_t) +') Index: refpolicy-2.20220217/policy/modules/services/postfix.te =================================================================== --- refpolicy-2.20220217.orig/policy/modules/services/postfix.te +++ refpolicy-2.20220217/policy/modules/services/postfix.te @@ -374,11 +374,7 @@ manage_files_pattern(postfix_bounce_t, p manage_lnk_files_pattern(postfix_bounce_t, postfix_spool_bounce_t, postfix_spool_bounce_t) optional_policy(` - init_dbus_chat(postfix_bounce_t) -') - -optional_policy(` - dbus_system_bus_client(postfix_bounce_t) + systemd_use_nss(postfix_bounce_t) ') ######################################## @@ -753,6 +749,10 @@ optional_policy(` unconfined_run_to(postfix_showq_t, postfix_showq_exec_t) ') +optional_policy(` + systemd_use_nss(postfix_showq_t) +') + ######################################## # # Smtp delivery local policy @@ -777,6 +777,10 @@ optional_policy(` ') optional_policy(` + systemd_use_nss(postfix_smtp_t) +') + +optional_policy(` dovecot_stream_connect(postfix_smtp_t) ') @@ -814,9 +818,7 @@ optional_policy(` ') optional_policy(` - dbus_send_system_bus(postfix_smtp_t) - dbus_system_bus_client(postfix_smtp_t) - init_dbus_chat(postfix_smtp_t) + systemd_use_nss(postfix_smtpd_t) ') optional_policy(`