diff --git a/add-avc-for-haveged.patch b/add-avc-for-haveged.patch index 0253fcbb094832094ae876a469a6c6ec8353b4d6..a6b9c679e2a93c9b99a0449741ac41a2d9d7f02c 100644 --- a/add-avc-for-haveged.patch +++ b/add-avc-for-haveged.patch @@ -17,7 +17,7 @@ index 7e63592..5b5a2ec 100644 allow entropyd_t self:process signal_perms; +fs_rw_inherited_tmpfs_files(entropyd_t) -+allow entropyd_t tmpfs_t:file {map getattr open}; ++allow entropyd_t tmpfs_t:file {manage_file_perms map}; + manage_files_pattern(entropyd_t, entropyd_var_run_t, entropyd_var_run_t) files_pid_filetrans(entropyd_t, entropyd_var_run_t, file) diff --git a/selinux-policy.spec b/selinux-policy.spec index e2f900cb858d4c92961294a931a293a0546e0393..b1b8d21b67ec1beffbf06d917609c60be93a7be7 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 40.7 -Release: 7 +Release: 8 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -746,6 +746,9 @@ exit 0 %endif %changelog +* Tue Mar 04 2025 Linux_zhang - 40.7-8 +- add more avc(eg:create link unlink) for haveged + * Wed Feb 26 2025 yixiangzhike - 40.7-7 - Allow init_t nnp domain transition to rngd_t