diff --git a/SOURCES/policy-rhel-7.7.z-contrib.patch b/SOURCES/policy-rhel-7.7.z-contrib.patch new file mode 100644 index 0000000..943bed2 --- /dev/null +++ b/SOURCES/policy-rhel-7.7.z-contrib.patch @@ -0,0 +1,13 @@ +diff --git a/sbd.te b/sbd.te +index 0ba6d491f..927cb8f64 100644 +--- a/sbd.te ++++ b/sbd.te +@@ -37,6 +37,8 @@ manage_files_pattern(sbd_t, sbd_tmpfs_t, sbd_tmpfs_t) + manage_dirs_pattern(sbd_t, sbd_tmpfs_t, sbd_tmpfs_t) + fs_tmpfs_filetrans(sbd_t, sbd_tmpfs_t, { file dir }) + ++auth_use_nsswitch(sbd_t) ++ + kernel_read_system_state(sbd_t) + kernel_dgram_send(sbd_t) + kernel_rw_all_sysctls(sbd_t) diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index 2b6de56..74747b8 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -20,12 +20,13 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 252%{?dist} +Release: 252%{?dist}.1 License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz patch0: policy-rhel-7.7-base.patch patch1: policy-rhel-7.7-contrib.patch +patch2: policy-rhel-7.7.z-contrib.patch Source1: modules-targeted-base.conf Source31: modules-targeted-contrib.conf Source2: booleans-targeted.conf @@ -340,6 +341,7 @@ Based off of reference policy: Checked out revision 2.20091117 %prep %setup -n serefpolicy-contrib-%{version} -q -b 29 %patch1 -p1 +%patch2 -p1 contrib_path=`pwd` %setup -n serefpolicy-%{version} -q %patch0 -p1 @@ -653,6 +655,10 @@ fi %endif %changelog +* Wed Jul 10 2019 Lukas Vrabec - 3.13.1-252.1 +- Allow sbd_t domain to use nsswitch +Resolves: rhbz#1728593 + * Thu Jun 27 2019 Lukas Vrabec - 3.13.1-252 - Allow ganesha_t domain to connect to tcp portmap_port_t Resolves: rhbz#1715088