flatpak/flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch

From 1c73110795b865246ce3595042dcd2d5e7891359 Mon Sep 17 00:00:00 2001
From: Debarshi Ray <debarshir@gnome.org>
Date: Mon, 6 Nov 2023 20:27:16 +0100
Subject: [PATCH] Revert "selinux: Permit using systemd-userdbd"

This reverts commit 399710ada185c1ee232bc3e6266a71688eb152b7.
---
 selinux/flatpak.te | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/selinux/flatpak.te b/selinux/flatpak.te
index bb3d80e316eb..4cf895c44abe 100644
--- a/selinux/flatpak.te
+++ b/selinux/flatpak.te
@@ -33,10 +33,6 @@ optional_policy(`
    policykit_dbus_chat(flatpak_helper_t)
 ')
 
-optional_policy(`
-   systemd_userdbd_stream_connect(flatpak_helper_t)
-')
-
 optional_policy(`                   
     unconfined_domain(flatpak_helper_t)
 ')
-- 
2.41.0
Rebase to 1.12.8 RHEL 8's SELinux stack doesn't have the systemd_userdbd_stream_connect() interface, and hence it was dropped. Otherwise, it leads to: flatpak.te:36:ERROR 'syntax error' at token 'systemd_userdbd_stream_connect' on line 4970: systemd_userdbd_stream_connect(flatpak_helper_t) The dependencies specified by the %systemd_requires RPM macro are not required for the %systemd_post, %systemd_postun_with_restart and %systemd_preun macros that are used [1]. Hence, %systemd_requires was dropped. The workaround to cope better with /var/lib/flatpak existing but being empty, by using 'flatpak remote-list --system' in %post, was dropped because the root cause was fixed in 1.12.7 [2]. [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/ [2] https://github.com/flatpak/flatpak/issues/4111 https://github.com/flatpak/flatpak/releases/tag/1.12.7 Resolves: RHEL-4220 2023-11-06 16:50:31 +00:00			`From 1c73110795b865246ce3595042dcd2d5e7891359 Mon Sep 17 00:00:00 2001`
			`From: Debarshi Ray <debarshir@gnome.org>`
			`Date: Mon, 6 Nov 2023 20:27:16 +0100`
			`Subject: [PATCH] Revert "selinux: Permit using systemd-userdbd"`

			`This reverts commit 399710ada185c1ee232bc3e6266a71688eb152b7.`
			`---`
			`selinux/flatpak.te \| 4 ----`
			`1 file changed, 4 deletions(-)`

			`diff --git a/selinux/flatpak.te b/selinux/flatpak.te`
			`index bb3d80e316eb..4cf895c44abe 100644`
			`--- a/selinux/flatpak.te`
			`+++ b/selinux/flatpak.te`
			@@ -33,10 +33,6 @@ optional_policy(`
			`policykit_dbus_chat(flatpak_helper_t)`
			`')`

			-optional_policy(`
			`- systemd_userdbd_stream_connect(flatpak_helper_t)`
			`-')`
			`-`
			optional_policy(`
			`unconfined_domain(flatpak_helper_t)`
			`')`
			`--`
			`2.41.0`