diff --git a/add-var_lib_t-for-obs-server.patch b/add-var_lib_t-for-obs-server.patch new file mode 100644 index 0000000000000000000000000000000000000000..d4734d7998aecae69ded5019cdf802655c34774f --- /dev/null +++ b/add-var_lib_t-for-obs-server.patch @@ -0,0 +1,24 @@ +From 9e7850609bc85ac2f176393baa14edd364ce9ddd Mon Sep 17 00:00:00 2001 +From: wang--ge +Date: Tue, 13 Dec 2022 19:29:22 +0800 +Subject: [PATCH] add var_lib_t for obs server + +--- + policy/modules/system/miscfiles.fc | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc +index a71b638..b731a4f 100644 +--- a/policy/modules/system/miscfiles.fc ++++ b/policy/modules/system/miscfiles.fc +@@ -35,6 +35,7 @@ ifdef(`distro_redhat',` + # + /srv/([^/]*/)?ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0) + /srv/([^/]*/)?rsync(/.*)? gen_context(system_u:object_r:public_content_t,s0) ++/srv/obs(/.*)? gen_context(system_u:object_r:var_lib_t,s0) + + # + # /usr +-- +2.27.0 + diff --git a/selinux-policy.spec b/selinux-policy.spec index 8424d0ae34c8f1baa503a6792473f282a7d4c09b..7e27b930fecf84f75ebfc62554fa8cbaf2c1dc05 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 35.5 -Release: 14 +Release: 15 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -197,6 +197,7 @@ Patch9001: fix-context-of-usr-bin-rpmdb.patch Patch9002: Add-permission-open-to-files_read_inherited_tmp_file.patch Patch9003: allow-httpd-to-put-files-in-httpd-config-dir.patch Patch9004: allow-map-postfix_master_t.patch +Patch9005: add-var_lib_t-for-obs-server.patch BuildArch: noarch BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc @@ -862,6 +863,9 @@ exit 0 %endif %changelog +* Mon Dec 12 2022 Ge Wang - 35.5-15 +- add var_lib_t for obs-server + * Sun Nov 27 2022 lujie - 35.5-14 - backport upstream patches