diff --git a/frr.fc b/frr.fc index 16878e6..1c5d652 100644 --- a/frr.fc +++ b/frr.fc @@ -21,5 +21,9 @@ /var/lock/subsys/ripngd -- gen_context(system_u:object_r:frr_lock_t,s0) /var/lock/subsys/staticd -- gen_context(system_u:object_r:frr_lock_t,s0) /var/lock/subsys/zebra -- gen_context(system_u:object_r:frr_lock_t,s0) +/var/lock/subsys/vrrpd -- gen_context(system_u:object_r:frr_lock_t,s0) +/var/lock/subsys/pathd -- gen_context(system_u:object_r:frr_lock_t,s0) /var/run/frr(/.*)? gen_context(system_u:object_r:frr_var_run_t,s0) + +/usr/bin/vtysh -- gen_context(system_u:object_r:frr_exec_t,s0) diff --git a/frr.spec b/frr.spec index 8fff4bf..8ac72c3 100644 --- a/frr.spec +++ b/frr.spec @@ -7,7 +7,7 @@ Name: frr Version: 8.3.1 -Release: 2%{?checkout}%{?dist} +Release: 3%{?checkout}%{?dist} Summary: Routing daemon License: GPLv2+ URL: http://www.frrouting.org @@ -275,6 +275,9 @@ make check PYTHON=%{__python3} %endif %changelog +* Wed Oct 19 2022 Michal Ruprich - 8.3.1-3 +- Related: #2129743 - Adding missing rules for vtysh and other daemons + * Mon Oct 17 2022 Michal Ruprich - 8.3.1-2 - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service