diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/0008-fc-bind-fix-real-path-for-bind.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-git/0008-fc-bind-fix-real-path-for-bind.patch | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/0008-fc-bind-fix-real-path-for-bind.patch b/recipes-security/refpolicy/refpolicy-git/0008-fc-bind-fix-real-path-for-bind.patch new file mode 100644 index 0000000..6472a21 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-git/0008-fc-bind-fix-real-path-for-bind.patch @@ -0,0 +1,31 @@ +From 9207386c0a860b3b6520eca5e509b9633c67c1e4 Mon Sep 17 00:00:00 2001 +From: Joe MacDonald <joe_macdonald@mentor.com> +Date: Thu, 28 Mar 2019 21:58:53 -0400 +Subject: [PATCH 08/34] fc/bind: fix real path for bind + +Upstream-Status: Pending + +Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> +Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> +--- + policy/modules/services/bind.fc | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/policy/modules/services/bind.fc b/policy/modules/services/bind.fc +index b4879dc1..59498e25 100644 +--- a/policy/modules/services/bind.fc ++++ b/policy/modules/services/bind.fc +@@ -1,8 +1,10 @@ + /etc/rc\.d/init\.d/named -- gen_context(system_u:object_r:named_initrc_exec_t,s0) ++/etc/rc\.d/init\.d/bind -- gen_context(system_u:object_r:named_initrc_exec_t,s0) + /etc/rc\.d/init\.d/unbound -- gen_context(system_u:object_r:named_initrc_exec_t,s0) + + /etc/bind(/.*)? gen_context(system_u:object_r:named_zone_t,s0) + /etc/bind/named\.conf.* -- gen_context(system_u:object_r:named_conf_t,s0) ++/etc/bind/rndc\.conf -- gen_context(system_u:object_r:named_conf_t,s0) + /etc/bind/rndc\.key -- gen_context(system_u:object_r:dnssec_t,s0) + /etc/dnssec-trigger/dnssec_trigger_server\.key -- gen_context(system_u:object_r:dnssec_t,s0) + /etc/named\.rfc1912\.zones -- gen_context(system_u:object_r:named_conf_t,s0) +-- +2.19.1 + |