Compare commits

..

No commits in common. 'i9' and 'c9' have entirely different histories.
i9 ... c9

@ -1,44 +0,0 @@
--- selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.if.orig 2024-11-18 22:57:25.780148480 +0300
+++ selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.if 2024-11-18 22:52:43.561598444 +0300
@@ -6806,6 +6806,7 @@
type smartcard_device_t;
type mtrr_device_t;
type ecryptfs_device_t;
+ type fprintd_device_t;
type mptctl_device_t;
type hypervkvp_device_t;
type hypervvssd_device_t;
@@ -6988,6 +6989,7 @@
filetrans_pattern($1, device_t, framebuf_device_t, chr_file, "fb7")
filetrans_pattern($1, device_t, framebuf_device_t, chr_file, "fb8")
filetrans_pattern($1, device_t, framebuf_device_t, chr_file, "fb9")
+ filetrans_pattern($1, device_t, fprintd_device_t, chr_file, "focal_moh_spi")
filetrans_pattern($1, device_t, null_device_t, chr_file, "full")
filetrans_pattern($1, device_t, usb_device_t, chr_file, "fw0")
filetrans_pattern($1, device_t, usb_device_t, chr_file, "fw1")
--- selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.fc.orig 2024-11-18 23:04:01.420517717 +0300
+++ selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.fc 2024-11-18 23:04:54.842432548 +0300
@@ -39,6 +39,7 @@
/dev/event.* -c gen_context(system_u:object_r:event_device_t,s0)
/dev/evtchn -c gen_context(system_u:object_r:xen_device_t,s0)
/dev/fb[0-9]* -c gen_context(system_u:object_r:framebuf_device_t,s0)
+/dev/focal_moh_spi -c gen_context(system_u:object_r:fprintd_device_t,s0)
/dev/full -c gen_context(system_u:object_r:null_device_t,s0)
/dev/fw.* -c gen_context(system_u:object_r:usb_device_t,s0)
/dev/gfx -c gen_context(system_u:object_r:xserver_misc_device_t,s0)
--- selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.te.orig 2024-11-18 23:31:22.140887322 +0300
+++ selinux-policy-0113b35519369e628e7fcd87af000cfcd4b1fa6c/policy/modules/kernel/devices.te 2024-11-18 23:33:28.487683696 +0300
@@ -132,6 +132,12 @@
dev_node(framebuf_device_t)
#
+# Type for fpr /dev/focal_moh_spi
+#
+type fprintd_device_t;
+dev_node(fprintd_device_t)
+
+#
# Type for hyperv devices
#
type hypervkvp_device_t;

@ -24,7 +24,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 38.1.45 Version: 38.1.45
Release: 3%{?dist}.inferit Release: 3%{?dist}
License: GPLv2+ License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: modules-targeted-base.conf Source1: modules-targeted-base.conf
@ -64,10 +64,6 @@ Source36: selinux-check-proper-disable.service
# Provide rpm macros for packages installing SELinux modules # Provide rpm macros for packages installing SELinux modules
Source102: rpm.macros Source102: rpm.macros
# MSVSphere
# Added policy fprintd_t for facal fingerprint driver
Patch0: selinux-policy-focal-moh-spi.patch
Url: %{giturl} Url: %{giturl}
BuildArch: noarch BuildArch: noarch
BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2
@ -408,7 +404,6 @@ end
%prep %prep
%setup -n %{name}-%{commit} -q %setup -n %{name}-%{commit} -q
%patch -P0 -p1 -b .focal
tar -C policy/modules/contrib -xf %{SOURCE35} tar -C policy/modules/contrib -xf %{SOURCE35}
mkdir selinux_config mkdir selinux_config
@ -814,9 +809,6 @@ exit 0
%endif %endif
%changelog %changelog
* Tue Nov 19 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 38.1.45-3.inferit
- Added policy fprintd_t for focal fingerprint
* Mon Sep 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.45-3 * Mon Sep 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.45-3
- Rebuild - Rebuild
Resolves: RHEL-55414 Resolves: RHEL-55414
@ -827,6 +819,7 @@ Resolves: RHEL-55414
* Thu Aug 29 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.45-1 * Thu Aug 29 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.45-1
- Allow setsebool_t relabel selinux data files - Allow setsebool_t relabel selinux data files
Resolves: RHEL-55414
* Mon Aug 12 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.44-1 * Mon Aug 12 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.44-1
- Allow coreos-installer-generator work with partitions - Allow coreos-installer-generator work with partitions
@ -1452,9 +1445,6 @@ Resolves: rhbz#2178612
- Allow wg load kernel modules, search debugfs dir - Allow wg load kernel modules, search debugfs dir
Resolves: rhbz#2176487 Resolves: rhbz#2176487
* Wed Mar 15 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 38.1.8-1
- Rebuilt for MSVSphere 9.1.
* Thu Feb 16 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1 * Thu Feb 16 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
- Allow svirt to map svirt_image_t char files - Allow svirt to map svirt_image_t char files
Resolves: rhbz#2170482 Resolves: rhbz#2170482

Loading…
Cancel
Save