diff --git a/fix-context-of-usr-bin-rpmdb.patch b/fix-context-of-usr-bin-rpmdb.patch new file mode 100644 index 0000000000000000000000000000000000000000..0c3b63715c8e1ce8e662dbe928b7d397834de72d --- /dev/null +++ b/fix-context-of-usr-bin-rpmdb.patch @@ -0,0 +1,25 @@ +From 52211f802fa1a34f22fca6acbc5a6dd5119d0f8e Mon Sep 17 00:00:00 2001 +From: lujie42 +Date: Mon, 28 Feb 2022 11:59:33 +0800 +Subject: [PATCH] fix context of /usr/bin/rpmdb + +Signed-off-by: lujie42 +--- + policy/modules/contrib/rpm.fc | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc +index 8a5a4ad..2db8826 100644 +--- a/policy/modules/contrib/rpm.fc ++++ b/policy/modules/contrib/rpm.fc +@@ -8,7 +8,6 @@ + /usr/bin/dnf-automatic -- gen_context(system_u:object_r:rpm_exec_t,s0) + /usr/bin/dnf-[0-9]+ -- gen_context(system_u:object_r:rpm_exec_t,s0) + /usr/bin/rpm -- gen_context(system_u:object_r:rpm_exec_t,s0) +-/usr/bin/rpmdb -- gen_context(system_u:object_r:rpmdb_exec_t,s0) + /usr/bin/smart -- gen_context(system_u:object_r:rpm_exec_t,s0) + + /bin/yum-builddep -- gen_context(system_u:object_r:rpm_exec_t,s0) +-- +1.8.3.1 + diff --git a/selinux-policy.spec b/selinux-policy.spec index dcf8161b1ac8e6092bcb6018ee6d59174412de10..66111e9d8ffbfad1224e7bc6a7d15492ce8305d1 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 35.5 -Release: 2 +Release: 3 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -67,6 +67,7 @@ Patch10: add-avc-for-systemd.patch #Patch6000: backport-Allow-kdump_t-net_admin-capability.patch Patch9000: add-qemu_exec_t-for-stratovirt.patch +Patch9001: fix-context-of-usr-bin-rpmdb.patch BuildArch: noarch BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc @@ -732,6 +733,9 @@ exit 0 %endif %changelog +* Mon Feb 28 2022 lujie42 - 35.5-3 +- fix context of /usr/bin/rpmdb + * Mon Feb 21 2022 lujie42 - 35.5-2 - selinux-requires macro shouldn't depend on policycoreutils-python