flatpak/flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch
Debarshi Ray b231e9912a Rebase to 1.12.8
RHEL 8's SELinux stack doesn't have the systemd_userdbd_stream_connect()
interface, and hence it was dropped.  Otherwise, it leads to:
  flatpak.te:36:ERROR 'syntax error' at token
    'systemd_userdbd_stream_connect' on line 4970:
      systemd_userdbd_stream_connect(flatpak_helper_t)

The dependencies specified by the %systemd_requires RPM macro are not
required for the %systemd_post, %systemd_postun_with_restart and
%systemd_preun macros that are used [1].  Hence, %systemd_requires was
dropped.

The workaround to cope better with /var/lib/flatpak existing but being
empty, by using 'flatpak remote-list --system' in %post, was dropped
because the root cause was fixed in 1.12.7 [2].

[1] https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/

[2] https://github.com/flatpak/flatpak/issues/4111
    https://github.com/flatpak/flatpak/releases/tag/1.12.7

Resolves: RHEL-4220
2023-11-06 20:29:25 +01:00

29 lines
743 B
Diff

From 1c73110795b865246ce3595042dcd2d5e7891359 Mon Sep 17 00:00:00 2001
From: Debarshi Ray <debarshir@gnome.org>
Date: Mon, 6 Nov 2023 20:27:16 +0100
Subject: [PATCH] Revert "selinux: Permit using systemd-userdbd"
This reverts commit 399710ada185c1ee232bc3e6266a71688eb152b7.
---
selinux/flatpak.te | 4 ----
1 file changed, 4 deletions(-)
diff --git a/selinux/flatpak.te b/selinux/flatpak.te
index bb3d80e316eb..4cf895c44abe 100644
--- a/selinux/flatpak.te
+++ b/selinux/flatpak.te
@@ -33,10 +33,6 @@ optional_policy(`
policykit_dbus_chat(flatpak_helper_t)
')
-optional_policy(`
- systemd_userdbd_stream_connect(flatpak_helper_t)
-')
-
optional_policy(`
unconfined_domain(flatpak_helper_t)
')
--
2.41.0