diff --git a/SOURCES/policy-rhel-7.3.z-contrib.patch b/SOURCES/policy-rhel-7.3.z-contrib.patch index f0bd107..bea65c0 100644 --- a/SOURCES/policy-rhel-7.3.z-contrib.patch +++ b/SOURCES/policy-rhel-7.3.z-contrib.patch @@ -99,6 +99,30 @@ index 48811e2..a8877f7 100644 mount_domtrans(glusterd_t) +diff --git a/openvswitch.te b/openvswitch.te +index ed109d3..42cb208 100644 +--- a/openvswitch.te ++++ b/openvswitch.te +@@ -100,6 +100,8 @@ auth_use_nsswitch(openvswitch_t) + + logging_send_syslog_msg(openvswitch_t) + ++init_read_script_state(openvswitch_t) ++ + modutils_exec_insmod(openvswitch_t) + modutils_list_module_config(openvswitch_t) + modutils_read_module_config(openvswitch_t) +@@ -108,6 +110,10 @@ modutils_read_module_deps(openvswitch_t) + sysnet_dns_name_resolve(openvswitch_t) + + optional_policy(` ++ hostname_exec(openvswitch_t) ++') ++ ++optional_policy(` + iptables_domtrans(openvswitch_t) + ') + diff --git a/puppet.te b/puppet.te index b80cb1e..46a4b5d 100644 --- a/puppet.te diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index b71125d..ca2f040 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 102%{?dist}.15 +Release: 102%{?dist}.16 License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -643,6 +643,11 @@ fi %endif %changelog +* Thu Mar 09 2017 Lukas Vrabec - 3.13.1-102.16 +- Allow openvswitch read script state. +- Allow openvswitch exec hostname and readinitrc_t files +Resolves: rhbz#1430751 + * Tue Feb 07 2017 Lukas Vrabec - 3.13.1-102.15 - Allow sssd_t domain setpgid Resolves:rhbz#1419836