Attachment 892453 Details for Bug 1094150 – Patch to fix org.selinux.policy

[patch] Patch to fix org.selinux.policy

org.selinux.policy.patch (text/plain), 3.21 KB, created by Stef Walter on 2014-05-05 07:50:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Stef Walter

Created: 2014-05-05 07:50:16 UTC

Size: 3.21 KB

patch

obsolete

>--- org.selinux.policy	2014-01-16 18:42:23.000000000 +0100
>+++ /tmp/org.selinux.policy	2014-05-05 09:46:26.619545796 +0200
>@@ -11,7 +11,7 @@
>         <description>SELinux write access</description>
>         <message>System policy prevents restorecon access to SELinux</message>
>         <defaults>
>-            <allow_any>no</allow_any>
>+            <allow_any>auth_admin</allow_any>
>             <allow_inactive>no</allow_inactive>
>             <allow_active>auth_admin_keep</allow_active>
>         </defaults>
>@@ -20,7 +20,7 @@
>         <description>SELinux write access</description>
>         <message>System policy prevents setenforce access to SELinux</message>
>         <defaults>
>-            <allow_any>no</allow_any>
>+            <allow_any>auth_admin</allow_any>
>             <allow_inactive>no</allow_inactive>
>             <allow_active>auth_admin_keep</allow_active>
>         </defaults>
>@@ -29,7 +29,7 @@
>         <description>SELinux write access</description>
>         <message>System policy prevents semanage access to SELinux</message>
>         <defaults>
>-            <allow_any>no</allow_any>
>+            <allow_any>auth_admin</allow_any>
>             <allow_inactive>no</allow_inactive>
>             <allow_active>auth_admin_keep</allow_active>
>         </defaults>
>@@ -38,8 +38,8 @@
>         <description>SELinux Read access</description>
>         <message>System policy prevents read access to SELinux</message>
>         <defaults>
>-          <allow_any>no</allow_any>
>-          <allow_inactive>no</allow_inactive>
>+          <allow_any>yes</allow_any>
>+          <allow_inactive>yes</allow_inactive>
> 	  <allow_active>yes</allow_active>
>         </defaults>
>     </action>
>@@ -47,8 +47,8 @@
>         <description>SELinux list modules access</description>
>         <message>System policy prevents read access to SELinux modules</message>
>         <defaults>
>-          <allow_any>no</allow_any>
>-          <allow_inactive>no</allow_inactive>
>+          <allow_any>yes</allow_any>
>+          <allow_inactive>yes</allow_inactive>
> 	  <allow_active>yes</allow_active>
>         </defaults>
>     </action>
>@@ -56,7 +56,7 @@
>         <description>SELinux write access</description>
>         <message>System policy prevents relabel_on_boot access to SELinux</message>
>         <defaults>
>-          <allow_any>no</allow_any>
>+          <allow_any>auth_admin</allow_any>
>           <allow_inactive>no</allow_inactive>
> 	  <allow_active>auth_admin_keep</allow_active>
>         </defaults>
>@@ -65,7 +65,7 @@
>         <description>SELinux write access</description>
>         <message>System policy prevents change_default_policy access to SELinux</message>
>         <defaults>
>-          <allow_any>no</allow_any>
>+          <allow_any>auth_admin</allow_any>
>           <allow_inactive>no</allow_inactive>
> 	  <allow_active>auth_admin_keep</allow_active>
>         </defaults>
>@@ -74,7 +74,7 @@
>         <description>Change SELinux default enforcing mode</description>
>         <message>System policy prevents change_default_policy access to SELinux</message>
>         <defaults>
>-          <allow_any>no</allow_any>
>+          <allow_any>auth_admin</allow_any>
>           <allow_inactive>no</allow_inactive>
> 	  <allow_active>auth_admin_keep</allow_active>
>         </defaults>

Actions: View | Diff

Attachments on bug 1094150: 892453