commit selinux-policy for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2022-07-29 16:47:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "selinux-policy" Fri Jul 29 16:47:11 2022 rev:29 rq:991558 version:20220714 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2022-07-18 18:32:44.773655833 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1533/selinux-policy.changes 2022-07-29 16:47:24.582571111 +0200 @@ -1,0 +2,13 @@ +Wed Jul 27 14:00:55 UTC 2022 - Hu <cathy.hu@suse.com> + +- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t + and NetworkManager_dispatcher_custom_t to access nscd socket + (bsc#1201741) + +------------------------------------------------------------------- +Thu Jul 26 10:50:21 UTC 2022 - Zdenek Kubala <zkubala@suse.com> + +- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper + (bnc#201015) + +------------------------------------------------------------------- New: ---- fix_cloudform.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.ObA03f/_old 2022-07-29 16:47:25.718574269 +0200 +++ /var/tmp/diff_new_pack.ObA03f/_new 2022-07-29 16:47:25.722574281 +0200 @@ -142,6 +142,7 @@ Patch059: systemd_domain_dyntrans_type.patch Patch060: fix_dnsmasq.patch Patch061: fix_userdomain.patch +Patch062: fix_cloudform.patch Patch100: sedoctool.patch ++++++ fix_cloudform.patch ++++++ Index: fedora-policy/policy/modules/contrib/cloudform.te =================================================================== --- cloudform.te 2022-07-18 14:06:56.735383426 +0200 +++ cloudform.te.new 2022-07-18 14:07:36.003069544 +0200 @@ -81,6 +81,8 @@ init_dbus_chat(cloud_init_t) +snapper_dbus_chat(cloud_init_t) + kernel_read_network_state(cloud_init_t) corenet_tcp_connect_http_port(cloud_init_t) ++++++ fix_networkmanager.patch ++++++ --- /var/tmp/diff_new_pack.ObA03f/_old 2022-07-29 16:47:25.946574904 +0200 +++ /var/tmp/diff_new_pack.ObA03f/_new 2022-07-29 16:47:25.950574914 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20220624/policy/modules/contrib/networkmanager.te +Index: fedora-policy-20220714/policy/modules/contrib/networkmanager.te =================================================================== ---- fedora-policy-20220624.orig/policy/modules/contrib/networkmanager.te -+++ fedora-policy-20220624/policy/modules/contrib/networkmanager.te +--- fedora-policy-20220714.orig/policy/modules/contrib/networkmanager.te ++++ fedora-policy-20220714/policy/modules/contrib/networkmanager.te @@ -276,6 +276,9 @@ userdom_read_home_certs(NetworkManager_t userdom_read_user_home_content_files(NetworkManager_t) userdom_dgram_send(NetworkManager_t) @@ -27,10 +27,19 @@ bind_domtrans(NetworkManager_t) bind_manage_cache(NetworkManager_t) bind_kill(NetworkManager_t) -Index: fedora-policy-20220624/policy/modules/contrib/networkmanager.if +@@ -420,6 +431,8 @@ optional_policy(` + nscd_kill(NetworkManager_t) + nscd_initrc_domtrans(NetworkManager_t) + nscd_systemctl(NetworkManager_t) ++ nscd_socket_use(NetworkManager_dispatcher_tlp_t) ++ nscd_socket_use(NetworkManager_dispatcher_custom_t) + ') + + optional_policy(` +Index: fedora-policy-20220714/policy/modules/contrib/networkmanager.if =================================================================== ---- fedora-policy-20220624.orig/policy/modules/contrib/networkmanager.if -+++ fedora-policy-20220624/policy/modules/contrib/networkmanager.if +--- fedora-policy-20220714.orig/policy/modules/contrib/networkmanager.if ++++ fedora-policy-20220714/policy/modules/contrib/networkmanager.if @@ -132,6 +132,24 @@ interface(`networkmanager_initrc_domtran init_labeled_script_domtrans($1, NetworkManager_initrc_exec_t) ')
participants (1)
-
Source-Sync