From 5d8b207b89bb62ba8d45f2ce434c2e1c3d6526f7 Mon Sep 17 00:00:00 2001 From: lujie42 Date: Mon, 28 Feb 2022 14:12:17 +0800 Subject: [PATCH] fix context of /usr/bin/rpmdb --- fix-context-of-usr-bin-rpmdb.patch | 25 +++++++++++++++++++++++++ selinux-policy.spec | 6 +++++- 2 files changed, 30 insertions(+), 1 deletion(-) create mode 100644 fix-context-of-usr-bin-rpmdb.patch diff --git a/fix-context-of-usr-bin-rpmdb.patch b/fix-context-of-usr-bin-rpmdb.patch new file mode 100644 index 0000000..0c3b637 --- /dev/null +++ b/fix-context-of-usr-bin-rpmdb.patch @@ -0,0 +1,25 @@ +From 52211f802fa1a34f22fca6acbc5a6dd5119d0f8e Mon Sep 17 00:00:00 2001 +From: lujie42 +Date: Mon, 28 Feb 2022 11:59:33 +0800 +Subject: [PATCH] fix context of /usr/bin/rpmdb + +Signed-off-by: lujie42 +--- + policy/modules/contrib/rpm.fc | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc +index 8a5a4ad..2db8826 100644 +--- a/policy/modules/contrib/rpm.fc ++++ b/policy/modules/contrib/rpm.fc +@@ -8,7 +8,6 @@ + /usr/bin/dnf-automatic -- gen_context(system_u:object_r:rpm_exec_t,s0) + /usr/bin/dnf-[0-9]+ -- gen_context(system_u:object_r:rpm_exec_t,s0) + /usr/bin/rpm -- gen_context(system_u:object_r:rpm_exec_t,s0) +-/usr/bin/rpmdb -- gen_context(system_u:object_r:rpmdb_exec_t,s0) + /usr/bin/smart -- gen_context(system_u:object_r:rpm_exec_t,s0) + + /bin/yum-builddep -- gen_context(system_u:object_r:rpm_exec_t,s0) +-- +1.8.3.1 + diff --git a/selinux-policy.spec b/selinux-policy.spec index dcf8161..66111e9 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 35.5 -Release: 2 +Release: 3 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -67,6 +67,7 @@ Patch10: add-avc-for-systemd.patch #Patch6000: backport-Allow-kdump_t-net_admin-capability.patch Patch9000: add-qemu_exec_t-for-stratovirt.patch +Patch9001: fix-context-of-usr-bin-rpmdb.patch BuildArch: noarch BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc @@ -732,6 +733,9 @@ exit 0 %endif %changelog +* Mon Feb 28 2022 lujie42 - 35.5-3 +- fix context of /usr/bin/rpmdb + * Mon Feb 21 2022 lujie42 - 35.5-2 - selinux-requires macro shouldn't depend on policycoreutils-python -- Gitee