Blame SOURCES/0002-extensions-SECMARK-Use-a-better-context-in-test-case.patch

6d5a60
From 231626933e5fd54b8d9e66dfc9a8a374a9192121 Mon Sep 17 00:00:00 2001
9b084b
From: Phil Sutter <psutter@redhat.com>
9b084b
Date: Fri, 16 Jul 2021 21:51:49 +0200
9b084b
Subject: [PATCH] extensions: SECMARK: Use a better context in test case
9b084b
9b084b
RHEL SELinux policies don't allow setting
9b084b
system_u:object_r:firewalld_exec_t:s0 context. Use one instead which has
9b084b
'packet_type' attribute (identified via
9b084b
'seinfo -xt | grep packet_type').
9b084b
---
9b084b
 extensions/libxt_SECMARK.t | 2 +-
9b084b
 1 file changed, 1 insertion(+), 1 deletion(-)
9b084b
9b084b
diff --git a/extensions/libxt_SECMARK.t b/extensions/libxt_SECMARK.t
9b084b
index 39d4c09348bf4..295e7a7244902 100644
9b084b
--- a/extensions/libxt_SECMARK.t
9b084b
+++ b/extensions/libxt_SECMARK.t
9b084b
@@ -1,4 +1,4 @@
9b084b
 :INPUT,FORWARD,OUTPUT
9b084b
 *security
9b084b
--j SECMARK --selctx system_u:object_r:firewalld_exec_t:s0;=;OK
9b084b
+-j SECMARK --selctx system_u:object_r:ssh_server_packet_t:s0;=;OK
9b084b
 -j SECMARK;;FAIL
9b084b
-- 
9b084b
2.34.1
9b084b