Allow unconfined users to transition to dpkg_t domain
PATCH 1/1 Allow unconfined users to transition to dpkg_t domain
From: Laurent Bigonville <[email protected]>
dpkg is now using rpm_execcon()/setexecfilecon()-like function to transition to the dpkg_script_t domain. This function will fail in enforcing mode if the transition is not allowed.
--- policy/modules/system/unconfined.te | 4 ++++ 1 file changed, 4 insertions(+)
policy/modules/system/unconfined.te +4 -0
@@ -76,6 +76,10 @@ optional_policy(` ') optional_policy(` + dpkg_run(unconfined_t, unconfined_r) +') + +optional_policy(` firstboot_run(unconfined_t, unconfined_r) ')
Signature · 1 line
1.8.5.2
PATCH 1/1 Allow unconfined users to transition to dpkg_t domain
Hi,
Le Sat, 11 Jan 2014 15:23:22 +0100,
Laurent Bigonville <[email protected]> a ?crit :
Quoted 14 lines
From: Laurent Bigonville <[email protected]>
dpkg is now using rpm_execcon()/setexecfilecon()-like function to transition to the
dpkg_script_tdomain. This function will fail in enforcing mode if the transition is not allowed.--- policy/modules/system/unconfined.te | 4 ++++ 1 file changed, 4 insertions(+)(quoted diff) +0
-0b/policy/modules/system/unconfined.te index 667f2a0..c22d964 100644
policy/modules/system/unconfined.te optional_policy(` · line 85
Quoted 10 lines
policy/modules/system/unconfined.te +4
-0@@ -76,6 +76,10 @@ optional_policy(` ') optional_policy(` + dpkg_run(unconfined_t, unconfined_r) +') + +optional_policy(` firstboot_run(unconfined_t, unconfined_r) ')
Is there any plans to merge this patch then? (*ping*)
Cheers,
Laurent Bigonville
PATCH 1/1 Allow unconfined users to transition to dpkg_t domain
In reply to Laurent BigonvilleQuoted 14 lines · Laurent Bigonville
From: Laurent Bigonville <[email protected]>
dpkg is now using rpm_execcon()/setexecfilecon()-like function to transition to the
dpkg_script_tdomain. This function will fail in enforcing mode if the transition is not allowed.--- policy/modules/system/unconfined.te | 4 ++++ 1 file changed, 4 insertions(+)policy/modules/system/unconfined.te +0
-0
policy/modules/system/unconfined.te optional_policy(` · line 84
Quoted 9 lines
policy/modules/system/unconfined.te +4
-0@@ -76,6 +76,10 @@ optional_policy(` ') optional_policy(` + dpkg_run(unconfined_t, unconfined_r) +') + +optional_policy(` firstboot_run(unconfined_t, unconfined_r) ')
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com