public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/icecream] epel9: selinux: allow symlinks in foreign environment
@ 2026-07-30 15:34 Michal Schmidt
0 siblings, 0 replies; only message in thread
From: Michal Schmidt @ 2026-07-30 15:34 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/icecream
Branch : epel9
Commit : 7fe5a6fd507e5341b952d6bfcf9e5622ee6c488f
Author : Michal Schmidt <mschmidt@redhat.com>
Date : 2018-11-09T12:04:44+01:00
Stats : +1/-0 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/icecream/c/7fe5a6fd507e5341b952d6bfcf9e5622ee6c488f?branch=epel9
Log:
selinux: allow symlinks in foreign environment
Some users have custom icecc-create-env scripts that create
environments including symlinks.
BZ: https://bugzilla.redhat.com/show_bug.cgi?id=1479048
---
diff --git a/icecream.te b/icecream.te
index c1d7248..76c5687 100644
--- a/icecream.te
+++ b/icecream.te
@@ -175,6 +175,7 @@ allow iceccd_untrusted_t self:process signal_perms;
allow iceccd_untrusted_t iceccd_t:unix_stream_socket rw_stream_socket_perms;
manage_files_pattern(iceccd_untrusted_t, iceccd_cache_t, iceccd_cache_t)
+manage_lnk_files_pattern(iceccd_untrusted_t, iceccd_cache_t, iceccd_cache_t)
can_exec(iceccd_untrusted_t, iceccd_cache_t)
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-30 15:34 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-30 15:34 [rpms/icecream] epel9: selinux: allow symlinks in foreign environment Michal Schmidt
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox