public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: systemd-sleep has a private type
@ 2026-09-11 13:18 Zdenek Pytela
0 siblings, 0 replies; only message in thread
From: Zdenek Pytela @ 2026-09-11 13:18 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : tests/selinux
Branch : pr775-checkpolicy-revdeps
Commit : 6117dc293c5f88abe0feba7110982ddfbd1fc201
Author : Zdenek Pytela <zpytela@redhat.com>
Date : 2020-10-07T13:21:11+00:00
Stats : +2/-2 in 1 file(s)
URL : https://src.fedoraproject.org/tests/selinux/c/6117dc293c5f88abe0feba7110982ddfbd1fc201?branch=pr775-checkpolicy-revdeps
Log:
selinux-policy: systemd-sleep has a private type
In latest selinux-policy, the systemd-sleep service is now confined.
The executable and the corresponding process have private types and
the process is allowed to write to swapfiles.
---
diff --git a/selinux-policy/swap-file-and-systemd-access/runtest.sh b/selinux-policy/swap-file-and-systemd-access/runtest.sh
index 7ac9261..920eee1 100755
--- a/selinux-policy/swap-file-and-systemd-access/runtest.sh
+++ b/selinux-policy/swap-file-and-systemd-access/runtest.sh
@@ -61,8 +61,8 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#1797543 + bz#1798872"
- rlSEMatchPathCon "/usr/lib/systemd/systemd-sleep" "init_exec_t"
- rlSESearchRule "allow init_t swapfile_t : file { open read ioctl } [ ]"
+ rlSEMatchPathCon "/usr/lib/systemd/systemd-sleep" "systemd_sleep_exec_t"
+ rlSESearchRule "allow systemd_sleep_t swapfile_t : file { append getattr ioctl lock open read write } [ ]"
rlPhaseEnd
rlPhaseStartTest "bz#1845594"
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-11 13:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:18 [tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: systemd-sleep has a private type Zdenek Pytela
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox