diff --git a/add-var_lib_t-for-obs-server.patch b/add-var_lib_t-for-obs-server.patch new file mode 100644 index 0000000000000000000000000000000000000000..d4734d7998aecae69ded5019cdf802655c34774f --- /dev/null +++ b/add-var_lib_t-for-obs-server.patch @@ -0,0 +1,24 @@ +From 9e7850609bc85ac2f176393baa14edd364ce9ddd Mon Sep 17 00:00:00 2001 +From: wang--ge +Date: Tue, 13 Dec 2022 19:29:22 +0800 +Subject: [PATCH] add var_lib_t for obs server + +--- + policy/modules/system/miscfiles.fc | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/policy/modules/system/miscfiles.fc b/policy/modules/system/miscfiles.fc +index a71b638..b731a4f 100644 +--- a/policy/modules/system/miscfiles.fc ++++ b/policy/modules/system/miscfiles.fc +@@ -35,6 +35,7 @@ ifdef(`distro_redhat',` + # + /srv/([^/]*/)?ftp(/.*)? gen_context(system_u:object_r:public_content_t,s0) + /srv/([^/]*/)?rsync(/.*)? gen_context(system_u:object_r:public_content_t,s0) ++/srv/obs(/.*)? gen_context(system_u:object_r:var_lib_t,s0) + + # + # /usr +-- +2.27.0 + diff --git a/selinux-policy.spec b/selinux-policy.spec index 4f25359f0b76f324f9fef54eef9c281e6cee65ff..14dcd6beb6ad8daf5dc05e9ad8cac6a0642fbf86 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 38.6 -Release: 2 +Release: 3 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -71,6 +71,7 @@ Patch9003: allow-httpd-to-put-files-in-httpd-config-dir.patch Patch9004: allow-map-postfix_master_t.patch Patch9005: add-rule-for-hostnamed-to-rpmscript-dbus-chat.patch Patch9006: allow-init_t-create-fifo-file-in-net_conf-dir.patch +Patch9007: add-var_lib_t-for-obs-server.patch BuildArch: noarch BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc @@ -740,6 +741,9 @@ exit 0 %endif %changelog +* Wed Mar 8 2023 caodongxia - 38.6-3 +- add var_lib_t for obs-server + * Mon Feb 6 2023 luhuaxin - 38.6-2 - allow init_t create fifo file in net_conf dir