From 1e78470431cbb389397cf67bbc73bb226f9ff7ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=8D=A2=E5=8D=8E=E6=AD=86?= <1539327763@qq.com> Date: Wed, 16 Sep 2020 14:36:24 +0800 Subject: [PATCH 1/2] set permissive domain --- permissivedomains.cil | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/permissivedomains.cil b/permissivedomains.cil index 400bcf6..e4c1ab6 100644 --- a/permissivedomains.cil +++ b/permissivedomains.cil @@ -1,2 +1,16 @@ (roleattributeset cil_gen_require system_r) +(optional permissivedomains_optional_1 + (typeattributeset cil_gen_require tangd_t) + (typepermissive tangd_t) +) + +(optional permissivedomains_optional_2 + (typeattributeset cil_gen_require opafm_t) + (typepermissive opafm_t) +) + +(optional permissivedomains_optional_3 + (typeattributeset cil_gen_require boltd_t) + (typepermissive boltd_t) +) \ No newline at end of file -- Gitee From 5e00ba87e5670d33899c4cda848386fa391f8490 Mon Sep 17 00:00:00 2001 From: HuaxinLuGitee <1539327763@qq.com> Date: Wed, 16 Sep 2020 15:44:42 +0800 Subject: [PATCH 2/2] change spec file --- permissivedomains.cil | 2 +- selinux-policy.spec | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/permissivedomains.cil b/permissivedomains.cil index e4c1ab6..12c6c19 100644 --- a/permissivedomains.cil +++ b/permissivedomains.cil @@ -13,4 +13,4 @@ (optional permissivedomains_optional_3 (typeattributeset cil_gen_require boltd_t) (typepermissive boltd_t) -) \ No newline at end of file +) diff --git a/selinux-policy.spec b/selinux-policy.spec index 2a76bb1..f3585b8 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -12,7 +12,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.2 -Release: 58 +Release: 59 License: GPLv2+ URL: https://github.com/fedora-selinux/selinux-policy/ @@ -730,6 +730,9 @@ exit 0 %endif %changelog +* Wed Sep 16 2020 openEuler Buildteam - 3.14.2-59 +- set domains to permissive + * Wed Sep 10 2020 openEuler Buildteam - 3.14.2-58 - add allow-systemd-machined-create-userdbd-runtime-sock-file.patch -- Gitee