From 973ebb8068d787c26006ddb391fb62d854da5498 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Fri, 11 Oct 2013 16:07:22 -0400 Subject: [PATCH] Need to create the policy.kern symbolic link in the shipping policy. This patch needs to be pushed into RHEL7. It fixes a blocker bug. --- config.tgz | Bin 3336 -> 3189 bytes selinux-policy.spec | 3 ++- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/config.tgz b/config.tgz index b83b86f223359f1c3d06edb6657de98ff30d80ef..c4a79da059ef4d99cb7e5d14e615195b6df9a142 100644 GIT binary patch literal 3189 zcmZ`*c{tST`<@{o%ZO|zLW`(DWfzUIRg#i~FsXyeGM2JrnHWEmG9+YckStjyTgo=1 z6U9+T#K{aJV;_uJjG52-ozwaI_x|_1&vo7R^*;A=-`A^_Dh6w%4P1Z;FMFN|qrR1A zH8Bs%u;1ydR4>f;7w1^L(#);QTd_Kn$hwd|uVfn5ax6T}Uipp_fCvkgQZOJzT64vbR_WwQCdMg)@3h zGZ|tv$Fe^g==A6#dsq(&eavQ#9J7se64!0xSCtJ+ULmEj->uC`p^f?wQSrv5$o`=~ zgHGMak2VUr>wMV6ekt6a8KqT`SKZjkevz39krj8J6Qftc7jl54`V2Uhl4H-6(~c1!2TVKEev^is1=D<;IcVvsA$2~n0=Cn>X2yQT5LQu08jPlMMS z*cWU*TBil1hDD%7%h&kny(x39Q9RfFP!$&+W^zJW#oaT^;%7&x^Gn6rkvGrw=6mYS zYyYBO*If4Z-BR&ud;}dTniv$*0Ac5@PTQ4lsW|hDEn0IyYqsO2;}xM!tZIed=PhFu{ytR__45lNq zPGFt$FIYMa3~bekW=J<0s3Z|8Y0oOp&$h|+PvR}hwZs_{^z+)Uwvm&8+}klOGOq%VXq+x`f+ ztE-iZq#e${Rbl34t7N4A@k3WyT$ykEc&lI0?e4?0hFo~|MKj9y67q~22Ax$H5%S7u z2D9s#G5c^#<=0p*gAWkF1%^pHX*mM&J%HnEybKsgXrQ7z5D^2~el~Gj+w6Fnl*B&; zs`IxBJMVnz9=Prq;MY#~9$h$YvU;z4P|ira!~HZLP#r+lB6jrXk4=)u8p>jBKJVpP z^vMWhQy{y->BYdE*^6((n}8wd@a>Jl$+#Zx!MZY| zrl?KBafNC9&vGjX0T~~foA}@8)FJgrU}wf@r5Gt|!%wRM<6Mqfu3RUFC}OVd_!!83 z)a#_G&!Cob*nb)+VG>5fV(*6n(p1aZmz;Yt#(e_W*UH;Gb~f9W z#og)5+6yA~s|gtJ^g15fAqCuwHz}Lkf%%Hq7-Mg^DEAN2j`p)_T0X=tYs7U|lA(>c zLSQ$qsjjzKCjtA#C9D$`P^Pt06PiqrulcX^VcffZ&{9{h2ro)iW*v)rVWLF;<18S3 zS^;-e<#UoAb?mB#!=oZj2TK;@nX z8EK%_a{=W9)aFnpEE1QASHa+QDyj%nNI1R(VtHwL!l$6c@7P8UBhbej(+`f7lx@GNluS_OKgS(nJjYj=L*WsG2(Bqcs#Ep9T@RN`|)H2@(V z+Bbt;fX|^^!i&Hd3pf%5!v~HMmSC-3;CTNLtijFKgrDHXgdhVW4Y~Mfm8@I4)Y0i4 zFCzKG%Yb-?6|w1fqML`782ApX>T%bF5>6L+WpswwY?VT&$6QQW;A<)=uoFV-L@N9! z5aJt;1VbNWgB2Sp1j3xJY)7t@LTuSy5wOtN_pAV_gB?&``< zPeRM5)PDd0>tiJBEe|Ef1MaZ;fSkvZJX9bTBV7)B;h^c-Ybbx*9+wdd0T)9cKD@y{uj@ipg-r)wPeHKGRT zY(RYgdqoA+5PnLD0tSWNL2Bt6vg$Mtx%WPeL2ism0siqG0KvhE|K_)p2dcPKFcb*u z#7a@VV+&>qP1+`Ie1A-5DIJ4P?&;HfKXJopg(2@2d_X9_@~XGl#s{pe9Nc*YTw?-c zw-8@XAStQO){*CDuv38MNq7w0(}bxch2C(VI_UUG-jz3wsZx@Rt;T^0-rM;{VTNH= zD6IFSUUg&f6U+B@l)}!K>5OxKJ6_{@u*#U#z)pa^MmAPS0!B;V+qUO7L-j~boA@05 zV&(Z3jXRyn0Xh0JPs6gu3~h$R7x%1+B)Ji-L<`SCk3 z4ruJ&mL=mD5WY8^!>Me@NJ_<{x1iu#^tIbdJ|!iWNNY5ae}xjTlBxhLYYP?I3r2*# zg4TeICGdyCwhO9&%EH2dVeu7!7~?Ex{GR4#9-^Bru;R>-e$ZrT^aux|_!Q}Z8_1oO zf|Sf30UO9MP$N=aN_?~ZS|)2myDDa?uw*>=i=nb|LO1CC1Z0ElTrSZ0B#77re| z*&8B?#6Y6d47r)e6xov>9>&uWC0nF>(}vUfG%5QqG*KxoG1&GgMLdY96|5zuQom{z03D1<*KRQU)fRYR>bS82iTCTS7%d><5gx1E34eS96H0vd*$S-=VA(K<9L5_mOI;Dp?v+V#7YxX$e{n=hxJ= z%Soo6gP+yDStFR7Y8G{_4*989G}NV}DB5VBX=0wfV~{vedaSs-#N_=%g0t=In%npb zZ3mL`?VrTIx{PKn>)_M#jJn`IvzgWgHGEgU3%lH6TJ?_995VT7Wzk;qe8FC(_AtZH zG{;?D%d-UOAn0i2EqvlnRo{DUmYxuuj+HHb`bIdaBPO{!Qh8XBWL^4)`(GAO2O{lTw^~eB>);P; z_5_5N-pbaF8X44_{1|nTuvB|b@k3EeE&W#=w-TB_HmCI=H%NqMEyvo%Gb5a@IF0Ol e$#J!68rnS!AZ_C^O literal 3336 zcmY+Gc|6qH8^>piWr{2*lF(I2j7T9RV@dX%7i$KA-3Pe2!KY8o}vvJB2_k;T*4w9adR0 z;cqSZwj&GCrWf0;;K(=fI`$4XGH^C5%*igR@YS`=CIKC9-V3=%hntm+il<$!wyt(v zHMpfPDUswefwDAsx1`r~7jLl#vymD530kCjbAhI6iQ>6$#X7Rd3(L5O{PV_?*d^ZoLUcVf>Izyz&v(b-cSRcD&W{491EZ0ze zf96-1W#lJy;S^@BPP^T3S*t@@KZqWAdM3{xDJP*g?fHL7Axf%Ii{RoxXL97YNBvG?BLn9#0CA2_eY)wm4?hVzaJBmr;5@ z&vWz*nxn{WNsUzEslms&@-s7+hm15XFU6^=eplJ}q5QfSw{;bzH%({f6EskQY)V2(~v zw3qvp8s#EdA!v*AE^Nu1a=om)q@JQhOV0%#m!;tIs_R4v*FA=me-?Ti z-feeh()6{8V-jiYaq&1%HW&snKkbalQiV(^Lhr8c)W03|EH>WX>*QF1Q@Z0$H-v)laQ43W|s z>C=8zHr74x$I%68huqfR<(yxcJ>A>MIy*Xl)cjY11{7W{dT+Ar*ETT;k;RZ)CTJJ( z75b5YqI9|W`OTkG2jXiV(Q}Cn{D|v;59mINviydlo7!JS%ohW>op|8e*~NIzR~YIS zh?uPe>Ih$<6=?achhzw#17>hY;)@iZvvW<5@gl=?a@BSa zxNhm|i5q3~K?lT7r{+ot&C)KERI9%q-MGjN_ewOn9o3e&Ekd)87kh)P*HyDiE@t_4 z!u*-YqI?Q?zJEo@EG1k7snDVFZob07^@9)h6YD&uu%%iNS55l6k_PKYupe z78<|3RMI$ZD%aHb62tHb=sXg380$tx|8Z zzx&NnEIvkV>kH{Tb|fA+usz?_gK6NQ^mHuh~ZrB~=St+!*ei@YvB&j@bu$Bs~X z{=k(|F8T#~RYYBHI&{Ow+xjWJYyw|6qVOT~({XcGNL6)Vt$+ucYwlMf;TL1t>@L%d z<>s@l4I6K`7kT>0c-8fNz&#PJv6Q#hsd7x$T434+7fFq&^Sujpcb@+_ zK0iiF4jbHO0|}Psq%0Hx5VmsKj#a9QQXJ z4Zpc7Og7)|TTifkR`8vF&S+ekBK)bkIB;np)_PO@EZ_Tnc-cHHF{i`ZNED+LTH3wWL zN9Ld*6TL?#5s>vCUrxcLAD}hfDzk-}!lo(Ja`5SBHEzSC`n{_KS9@8Ll1+}r`Fi$p zT>^VO7uxOCbd;f`8_$_X3;>^$*WJ6tgl~*Loexz_>@7;MEN!(Ogx>M#PxR-of(j5U*~zCj z7N7UcOHhGWHb$smW4sY07IbSgbHTebAaEWah&M*CYW}b^`)zn(SXKxBkL2 zu`&l{b>IzvWgnoBzks@R8&K^G^<-*H*8Mh1J1Gho;wI&Smq@s@XMj(4h(7i6De6{e zv-WV!O;fQFexNv009k<{xiTl9dWeLV{dC(bfMI8tkzV(yv&9 zF?7)9{|3wbKp+lV=?aiIk-rSo=D@j0noI|wArox{xE&8Zf^ct8e3=co zV38ol>Io>#KMx#ZK!=dgyu7^< zb>RS4jur!10@PA1g7neqH`B7~=N{)5DvWoT?_1HCzzoNK`(Tmz$*EfWDKtZ-h7Mk^l__f7a$I7c5{=~fR9kXi z@hwL`RG>&v!%(-FozyX2{a(v3F?no0(>L$2oB7mZSKI(o`o81xYJ9Dhw7ET|W)1fwJ-uxdsTRa-eJk2TP}}&a*+bjzs+uAeD}S zHKRA;+0yuAFRf6Sk`4b>$s&9m!i#uipE7#C!7e=EGC|9qj#v z(N*O|REx4l(F*h}m)1ND_vdvvrV%U0L@%9h*c24hBq801(E@B4x*(sVdCrr@o|Q5I{mQ8$Y-ZDScKOm( zFp7T9r&twUNwI_laY{Z0fRvX7Hbu~%YafWFcN|18^TCBbH zzvNVago(Lwkhe=Bk-x5`tneM2U@T3Ur@52D5vaMZAXK~Y2rMY-Wiw*}wgL6jmwRdg zW=J+hA*|zb18!S+Y6UizZRH*QY2Te;A0z!KCRTD&BTG}Gup;`Jo~xE8{GXZRRUpe} zNv;#of2Pf=TYGvBn7+{+#&eeh2L^GX|4jGM z05@I%_~C4jjQE?=yNY*Lf{t19wtg;g999Neu9DshV0sn5!5=9n?q&vbjL2C6n$D8m qN8wn~S8h4s7f?geUQ#S-JDpl^so{wKU)|0x0J1KQlZe=cMEnodT=>TT diff --git a/selinux-policy.spec b/selinux-policy.spec index e7a49905..a8cf1ecf 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -189,6 +189,7 @@ mkdir -p %{buildroot}%{_usr}/share/selinux/packages \ /usr/bin/sha512sum %{buildroot}%{_sysconfdir}/selinux/%1/policy/policy.%{POLICYVER} | cut -d' ' -f 1 > %{buildroot}%{_sysconfdir}/selinux/%1/.policy.sha512; \ rm -rf %{buildroot}%{_sysconfdir}/selinux/%1/contexts/netfilter_contexts \ rm -rf %{buildroot}%{_sysconfdir}/selinux/%1/modules/active/policy.kern \ +ln -sf /etc/selinux/%1/policy/policy.%{POLICYVER} %{buildroot}%{_sysconfdir}/selinux/%1/modules/active/policy.kern \ %nil %define fileList() \ @@ -213,7 +214,7 @@ rm -rf %{buildroot}%{_sysconfdir}/selinux/%1/modules/active/policy.kern \ %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/selinux/%1/modules/active/users_extra \ %verify(not md5 size mtime) %{_sysconfdir}/selinux/%1/modules/active/homedir_template \ %verify(not md5 size mtime) %{_sysconfdir}/selinux/%1/modules/active/modules/*.pp \ -%ghost %{_sysconfdir}/selinux/%1/modules/active/policy.kern \ +%verify(not md5 size mtime) %{_sysconfdir}/selinux/%1/modules/active/policy.kern \ %ghost %{_sysconfdir}/selinux/%1/modules/active/*.local \ %ghost %{_sysconfdir}/selinux/%1/modules/active/*.bin \ %ghost %{_sysconfdir}/selinux/%1/modules/active/seusers \