Received: by 2002:a05:6a10:7420:0:0:0:0 with SMTP id hk32csp824425pxb; Thu, 17 Feb 2022 15:52:44 -0800 (PST) X-Google-Smtp-Source: ABdhPJwYevMKUKSkSVNMTy9NwAcOkvMzNm+6Ce+FZamOOqt/GKqvjlYWJCFa0LY63JJ+42FFigjl X-Received: by 2002:a05:6a00:b41:b0:4e1:3a1:50a7 with SMTP id p1-20020a056a000b4100b004e103a150a7mr5477594pfo.30.1645141964192; Thu, 17 Feb 2022 15:52:44 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1645141964; cv=none; d=google.com; s=arc-20160816; b=h4fMtufR+7vWRantxIF3hswXeUebIe/VUX7PjFkoMXsjOBNKvSQhdaviq5Bzdf+OCt uIyT6lHsSyeN489KwDnZfis8wtA9ElSYefNViUQ26EmyqVrECYJGDosBD62ks2dUdwM/ 9fa+luWeFonhrimP4YVRczh5iw+kQTV2ZEJs/XuUH+xOokb+0oCeihSJ8tCpPN/V5FIw vSEexUdKbFPLredB0eWWts190awNSWXjtyyUJ6mnQ63/HJfB4NHiYI7zrG/XiBN3b3np 222ehlBPBIpQ2RanW2Jheigqdg6KT8yP9ze61ebCvSiqcUjC6fdtC16kOUnu5syZ1N1F gATQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-disposition:mime-version:message-id :subject:to:from:date:dkim-signature; bh=SDMLnA7pvpmrb53aB93dh2BICtlZtAEWxRVRPF/iGpw=; b=jUTIscpKSY4WVxv10mWQXB1nGnxkHfPW3nyJI6o/VOQXdZ7FBuUMLrCF28pf03BXob rbs7tiwxEjBzxKu76ARSq+nQHF/9VAvyMycxsr9+ghnWpFhtDyxNxixG8aF7h90h36iq prm19yG+GsYwLf/JHCosGGANUFfNgx5F9qLo97zJKTNX2Yunv29Iykrb49MDJdwTM3sV p8EHTF3SZE2Mfeq7iEySA921vcl34U12SQK5A0o1qf69pxXVtFCTCkLTnuf8kVVrIJnR t6gqu182NKMryUGslKuT/uQ8hD16c5sd8YVmEzJEFfz/dJdiOTJxp2CQVox3NygfV4IQ 9wpg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@coker.com.au header.s=2008 header.b=KhQJNEUb; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=coker.com.au Return-Path: Received: from lindbergh.monkeyblade.net (lindbergh.monkeyblade.net. [2620:137:e000::1:18]) by mx.google.com with ESMTPS id j71si9517373pge.712.2022.02.17.15.52.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 17 Feb 2022 15:52:44 -0800 (PST) Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) client-ip=2620:137:e000::1:18; Authentication-Results: mx.google.com; dkim=pass header.i=@coker.com.au header.s=2008 header.b=KhQJNEUb; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=coker.com.au Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id 32A3E2D344C; Thu, 17 Feb 2022 15:25:18 -0800 (PST) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S242055AbiBQOsG (ORCPT + 22 others); Thu, 17 Feb 2022 09:48:06 -0500 Received: from mxb-00190b01.gslb.pphosted.com ([23.128.96.19]:59274 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S242051AbiBQOsB (ORCPT ); Thu, 17 Feb 2022 09:48:01 -0500 Received: from smtp.sws.net.au (smtp.sws.net.au [144.76.241.179]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 74ADD15FCA9 for ; Thu, 17 Feb 2022 06:47:47 -0800 (PST) Received: from xev.coker.com.au (localhost [127.0.0.1]) by smtp.sws.net.au (Postfix) with ESMTP id 2C964F004 for ; Fri, 18 Feb 2022 01:47:45 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coker.com.au; s=2008; t=1645109265; bh=SDMLnA7pvpmrb53aB93dh2BICtlZtAEWxRVRPF/iGpw=; l=1852; h=Date:From:To:Subject:From; b=KhQJNEUbPeP3CX3urcZoHu2TfzIReP8rGdT0eG7Rkvn995IuaLQGON4HnQYBTdm/b D4TKgL3ftex0RbZX0Kxivmai4bCvesZQ6h3C5tfbOqFF7Cn+4NdkFqJYaeLiOKTh3V XKxjuiUPGy4+KmGcDuzTa2o/I1c+rEf+Sx79/Wkg= Received: by xev.coker.com.au (Postfix, from userid 1001) id 9C14D1734F1C; Fri, 18 Feb 2022 01:47:40 +1100 (AEDT) Date: Fri, 18 Feb 2022 01:47:40 +1100 From: Russell Coker To: selinux-refpolicy@vger.kernel.org Subject: [PATCH] init dbus patch for GetDynamicUsers with systemd_use_nss() V2 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RDNS_NONE,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org Same as before but moved to the top of my patch list so it will apply to the git policy. Should be ready to merge now. Signed-off-by: Russell Coker Index: refpolicy-2.20220217/policy/modules/services/dictd.te =================================================================== --- refpolicy-2.20220217.orig/policy/modules/services/dictd.te +++ refpolicy-2.20220217/policy/modules/services/dictd.te @@ -79,3 +79,6 @@ optional_policy(` seutil_sigchld_newrole(dictd_t) ') +ifdef(`init_systemd',` + systemd_use_nss(dictd_t) +') Index: refpolicy-2.20220217/policy/modules/services/postfix.te =================================================================== --- refpolicy-2.20220217.orig/policy/modules/services/postfix.te +++ refpolicy-2.20220217/policy/modules/services/postfix.te @@ -374,11 +374,7 @@ manage_files_pattern(postfix_bounce_t, p manage_lnk_files_pattern(postfix_bounce_t, postfix_spool_bounce_t, postfix_spool_bounce_t) optional_policy(` - init_dbus_chat(postfix_bounce_t) -') - -optional_policy(` - dbus_system_bus_client(postfix_bounce_t) + systemd_use_nss(postfix_bounce_t) ') ######################################## @@ -766,6 +762,10 @@ optional_policy(` ') optional_policy(` + systemd_use_nss(postfix_smtp_t) +') + +optional_policy(` dovecot_stream_connect(postfix_smtp_t) ') @@ -773,6 +773,10 @@ optional_policy(` milter_stream_connect_all(postfix_smtp_t) ') +optional_policy(` + systemd_use_nss(postfix_showq_t) +') + ######################################## # # Smtpd local policy @@ -803,9 +807,7 @@ optional_policy(` ') optional_policy(` - dbus_send_system_bus(postfix_smtp_t) - dbus_system_bus_client(postfix_smtp_t) - init_dbus_chat(postfix_smtp_t) + systemd_use_nss(postfix_smtpd_t) ') optional_policy(`