diff options
| author |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2011-08-13 18:59:52 +0200 |
|---|---|---|
| committer | Sven Vermeulen <sven.vermeulen@siphos.be> | 2011-08-13 18:59:52 +0200 |
| commit | 1c6f34b263b07f43b9cfa15ce0ab934f198cb8b5 (patch) | |
| tree | 26c74ad8e71f7917e682173be6b223c32f5c3f11 | |
| parent | Bluez is no SELinux module, point to bluetooth (diff) | |
| download | hardened-dev-1c6f34b263b07f43b9cfa15ce0ab934f198cb8b5.tar.gz hardened-dev-1c6f34b263b07f43b9cfa15ce0ab934f198cb8b5.tar.bz2 hardened-dev-1c6f34b263b07f43b9cfa15ce0ab934f198cb8b5.zip | |
Fix consolekit, should not hard depend on dbus stuff
3 files changed, 24 insertions, 1 deletions
diff --git a/sec-policy/selinux-consolekit/Manifest b/sec-policy/selinux-consolekit/Manifest index d5ceb926..bcb37412 100644 --- a/sec-policy/selinux-consolekit/Manifest +++ b/sec-policy/selinux-consolekit/Manifest @@ -1,4 +1,5 @@ +AUX fix-services-consolekit.patch 588 RMD160 3e1ce442607ca023c9e1acd4aba2543dfb474764 SHA1 834ca643739656515425e98f48c305f3eba14a7b SHA256 2a20cec0865225d4a284261c34cb20566883e1f217d67bf6f3bc68afda40712b DIST refpolicy-2.20110726.tar.bz2 588033 RMD160 9803effffe1dbb28d52bee03432e052f4fdc8d3f SHA1 cc27b06c3f541d8f2c57c52804ab6893afcd9db2 SHA256 8159b7535aa0f805510e4e3504b1317d7083b227f0ef3df51c6f002ed70ecedb -EBUILD selinux-consolekit-2.20110726.ebuild 251 RMD160 03dadb34bfa11ecdec179758a3b29a94629e4201 SHA1 a7578cbcecfd1d69f1721e104243ff119486135f SHA256 9901c3fbb24b402ba574004eb1ab7544b1509ea338c1ada4216783c0909acae7 +EBUILD selinux-consolekit-2.20110726.ebuild 308 RMD160 c874532e6dbe31a550596ccc0a85777cf8d57019 SHA1 e102f156ec7fa7e8efb15f096cd2165f6bc6e9df SHA256 42267f50d9969ab1cb8e564f363809ef151720f93643a209560678f916676854 MISC ChangeLog 444 RMD160 463fa3952fa00a40c163bdc8c2070baab4642871 SHA1 2a84499125cffc50257a565a00d2b6c9f8bdcdae SHA256 a7b007e507933f644ae589a9228006917643c1f5abb6f974864fc3f9b9255452 MISC metadata.xml 234 RMD160 ab8fb902f4a0f0013829837826a981e5a2ff0c5f SHA1 2b3075de1818eed808b6e74136803ee7a3ce35e8 SHA256 e24a8801c64479da295eba58b6a3ac8f7e2bf05b447213ad0ce206bcfc6a438f diff --git a/sec-policy/selinux-consolekit/files/fix-services-consolekit.patch b/sec-policy/selinux-consolekit/files/fix-services-consolekit.patch new file mode 100644 index 00000000..fb42b9f7 --- /dev/null +++ b/sec-policy/selinux-consolekit/files/fix-services-consolekit.patch @@ -0,0 +1,21 @@ +--- refpolicy-20110726/policy/modules/services/consolekit.te 2011-07-26 14:10:40.000000000 +0200 ++++ services/consolekit.te 2011-08-13 18:58:01.008001037 +0200 +@@ -72,7 +72,6 @@ + userdom_dontaudit_read_user_home_content_files(consolekit_t) + userdom_read_user_tmp_files(consolekit_t) + +-hal_ptrace(consolekit_t) + + tunable_policy(`use_nfs_home_dirs',` + fs_read_nfs_files(consolekit_t) +@@ -84,6 +83,10 @@ + + optional_policy(` + dbus_system_domain(consolekit_t, consolekit_exec_t) ++ ++ optional_policy(` ++ hal_ptrace(consolekit_t) ++ ') + + optional_policy(` + hal_dbus_chat(consolekit_t) diff --git a/sec-policy/selinux-consolekit/selinux-consolekit-2.20110726.ebuild b/sec-policy/selinux-consolekit/selinux-consolekit-2.20110726.ebuild index e7a52303..7deafb97 100644 --- a/sec-policy/selinux-consolekit/selinux-consolekit-2.20110726.ebuild +++ b/sec-policy/selinux-consolekit/selinux-consolekit-2.20110726.ebuild @@ -5,6 +5,7 @@ EAPI="4" IUSE="" MODS="consolekit" +POLICY_PATCH="${FILESDIR}/fix-services-consolekit.patch" inherit selinux-policy-2 |