rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* Mon Feb 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239 

- Allow syslog client to connect to kernel socket. BZ(1419946)
This commit is contained in:
Lukas Vrabec 2017-02-13 10:17:47 +01:00
parent 67dffb1bc1
commit 7c40aea259
3 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
container-selinux.tgz
View File

Binary file not shown.

7
policy-rawhide-base.patch
View File

@ -41908,7 +41908,7 @@ index 4e94884..0690edf 100644
+ filetrans_pattern($1, syslogd_var_run_t, $2, $3, $4) + filetrans_pattern($1, syslogd_var_run_t, $2, $3, $4)
+') +')
diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te
index 59b04c1..2be561d 100644 index 59b04c1..d9eb312 100644
--- a/policy/modules/system/logging.te --- a/policy/modules/system/logging.te
+++ b/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te
@@ -4,6 +4,29 @@ policy_module(logging, 1.20.1) @@ -4,6 +4,29 @@ policy_module(logging, 1.20.1)
@ -42359,7 +42359,7 @@ index 59b04c1..2be561d 100644
') ')
optional_policy(` optional_policy(`
@@ -526,3 +669,26 @@ optional_policy(` @@ -526,3 +669,29 @@ optional_policy(`
# log to the xconsole # log to the xconsole
xserver_rw_console(syslogd_t) xserver_rw_console(syslogd_t)
') ')
@ -42377,6 +42377,9 @@ index 59b04c1..2be561d 100644
+allow syslog_client_type self:unix_dgram_socket create_socket_perms; +allow syslog_client_type self:unix_dgram_socket create_socket_perms;
+allow syslog_client_type self:unix_stream_socket create_socket_perms; +allow syslog_client_type self:unix_stream_socket create_socket_perms;
+ +
+
+kernel_stream_connect(syslog_client_type)
+
+# If syslog is down, the glibc syslog() function +# If syslog is down, the glibc syslog() function
+# will write to the console. +# will write to the console.
+term_write_console(syslog_client_type) +term_write_console(syslog_client_type)

5
selinux-policy.spec
View File

@ -19,7 +19,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.13.1 Version: 3.13.1
Release: 238%{?dist} Release: 239%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -675,6 +675,9 @@ exit 0
%endif %endif
%changelog %changelog
* Mon Feb 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239
- Allow syslog client to connect to kernel socket. BZ(1419946)
* Thu Feb 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238 * Thu Feb 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238
- Allow shiftfs to use xattr SELinux labels - Allow shiftfs to use xattr SELinux labels
- Fix ssh_server_template by add sshd_t to require section. - Fix ssh_server_template by add sshd_t to require section.