diff --git a/SOURCES/policy-rhel-7.5.z-contrib.patch b/SOURCES/policy-rhel-7.5.z-contrib.patch index 9ed0487..f5fd13d 100644 --- a/SOURCES/policy-rhel-7.5.z-contrib.patch +++ b/SOURCES/policy-rhel-7.5.z-contrib.patch @@ -48,3 +48,19 @@ index faf4fc9fca..fda6e0b289 100644 storage_raw_read_fixed_disk(snapperd_t) +diff --git a/virt.te b/virt.te +index d4245b7168..51a9cd851d 100644 +--- a/virt.te ++++ b/virt.te +@@ -766,6 +766,11 @@ optional_policy(` + dbus_system_bus_client(virtlogd_t) + ') + ++optional_policy(` ++ systemd_write_inhibit_pipes(virtlogd_t) ++ systemd_dbus_chat_logind(virtlogd_t) ++') ++ + ######################################## + # + # virtual domains common policy diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index 1ea9ce9..3ce5e81 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 192%{?dist}.4 +Release: 192%{?dist}.6 License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -656,6 +656,14 @@ fi %endif %changelog +* Tue Jul 31 2018 Lukas Vrabec - 3.13.1-192.6 +- Allow virtlogd_t domain to chat via dbus with systemd_logind +Resolves: rhbz#1593740 + +* Fri Jun 29 2018 Lukas Vrabec - 3.13.1-192.5 +- Allow virtlogd_t domain to write inhibit systemd pipes. +Resolves: rhbz#1596730 + * Thu Jun 07 2018 Lukas Vrabec - 3.13.1-192.4 - Allow certmonger to sends emails Resolves: rhbz#1588363