* [meta-selinux][PATCH 0/1] refpolicy: fix real path for su.shadow
@ 2014-02-13 8:09 wenzong.fan
2014-02-13 8:09 ` [meta-selinux][PATCH 1/1] " wenzong.fan
0 siblings, 1 reply; 4+ messages in thread
From: wenzong.fan @ 2014-02-13 8:09 UTC (permalink / raw)
To: yocto, xin.ouyang, mark.hatle
From: Wenzong Fan <wenzong.fan@windriver.com>
In yocto the su was linked to /bin/su.shadow, fix the path for it.
The following changes since commit 33e54aa891626c10f7cb865cc263b708c060fc85:
refpolicy: backport two patches to fix dhclient, hostname and ifconfig (2014-02-12 19:45:35 -0500)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib wenzong/fix-su
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-su
Wenzong Fan (1):
refpolicy: fix real path for su.shadow
.../poky-fc-fix-real-path_su.patch | 25 ++++++++++++++++++++
.../refpolicy/refpolicy_2.20130424.inc | 1 +
2 files changed, 26 insertions(+)
create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
--
1.7.9.5
^ permalink raw reply [flat|nested] 4+ messages in thread
* [meta-selinux][PATCH 1/1] refpolicy: fix real path for su.shadow
2014-02-13 8:09 [meta-selinux][PATCH 0/1] refpolicy: fix real path for su.shadow wenzong.fan
@ 2014-02-13 8:09 ` wenzong.fan
2014-02-13 9:48 ` Pascal Ouyang
2014-02-14 3:26 ` Joe MacDonald
0 siblings, 2 replies; 4+ messages in thread
From: wenzong.fan @ 2014-02-13 8:09 UTC (permalink / raw)
To: yocto, xin.ouyang, mark.hatle
From: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
---
.../poky-fc-fix-real-path_su.patch | 25 ++++++++++++++++++++
.../refpolicy/refpolicy_2.20130424.inc | 1 +
2 files changed, 26 insertions(+)
create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
new file mode 100644
index 0000000..b0392ce
--- /dev/null
+++ b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
@@ -0,0 +1,25 @@
+From 4affa5e9797f5d51597c9b8e0f2503883c766699 Mon Sep 17 00:00:00 2001
+From: Wenzong Fan <wenzong.fan@windriver.com>
+Date: Thu, 13 Feb 2014 00:33:07 -0500
+Subject: [PATCH] fix real path for su.shadow command
+
+Upstream-Status: Inappropriate [only for Poky]
+
+Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
+---
+ policy/modules/admin/su.fc | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/policy/modules/admin/su.fc b/policy/modules/admin/su.fc
+index a563687..0f43827 100644
+--- a/policy/modules/admin/su.fc
++++ b/policy/modules/admin/su.fc
+@@ -4,3 +4,5 @@
+
+ /usr/(local/)?bin/ksu -- gen_context(system_u:object_r:su_exec_t,s0)
+ /usr/bin/kdesu -- gen_context(system_u:object_r:su_exec_t,s0)
++
++/bin/su.shadow -- gen_context(system_u:object_r:su_exec_t,s0)
+--
+1.7.9.5
+
diff --git a/recipes-security/refpolicy/refpolicy_2.20130424.inc b/recipes-security/refpolicy/refpolicy_2.20130424.inc
index 23339e3..9e5e426 100644
--- a/recipes-security/refpolicy/refpolicy_2.20130424.inc
+++ b/recipes-security/refpolicy/refpolicy_2.20130424.inc
@@ -30,6 +30,7 @@ SRC_URI += "file://poky-fc-subs_dist.patch \
file://poky-fc-udevd.patch \
file://poky-fc-rpm.patch \
file://poky-fc-ftpwho-dir.patch \
+ file://poky-fc-fix-real-path_su.patch \
"
# Specific policy for Poky
--
1.7.9.5
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [meta-selinux][PATCH 1/1] refpolicy: fix real path for su.shadow
2014-02-13 8:09 ` [meta-selinux][PATCH 1/1] " wenzong.fan
@ 2014-02-13 9:48 ` Pascal Ouyang
2014-02-14 3:26 ` Joe MacDonald
1 sibling, 0 replies; 4+ messages in thread
From: Pascal Ouyang @ 2014-02-13 9:48 UTC (permalink / raw)
To: wenzong.fan, yocto, mark.hatle
于 14-2-13 下午4:09, wenzong.fan@windriver.com 写道:
> From: Wenzong Fan <wenzong.fan@windriver.com>
>
> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
> ---
> .../poky-fc-fix-real-path_su.patch | 25 ++++++++++++++++++++
> .../refpolicy/refpolicy_2.20130424.inc | 1 +
> 2 files changed, 26 insertions(+)
> create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
>
> diff --git a/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
> new file mode 100644
> index 0000000..b0392ce
> --- /dev/null
> +++ b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
> @@ -0,0 +1,25 @@
> +From 4affa5e9797f5d51597c9b8e0f2503883c766699 Mon Sep 17 00:00:00 2001
> +From: Wenzong Fan <wenzong.fan@windriver.com>
> +Date: Thu, 13 Feb 2014 00:33:07 -0500
> +Subject: [PATCH] fix real path for su.shadow command
> +
> +Upstream-Status: Inappropriate [only for Poky]
> +
> +Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
> +---
> + policy/modules/admin/su.fc | 2 ++
> + 1 file changed, 2 insertions(+)
> +
> +diff --git a/policy/modules/admin/su.fc b/policy/modules/admin/su.fc
> +index a563687..0f43827 100644
> +--- a/policy/modules/admin/su.fc
> ++++ b/policy/modules/admin/su.fc
> +@@ -4,3 +4,5 @@
> +
> + /usr/(local/)?bin/ksu -- gen_context(system_u:object_r:su_exec_t,s0)
> + /usr/bin/kdesu -- gen_context(system_u:object_r:su_exec_t,s0)
> ++
> ++/bin/su.shadow -- gen_context(system_u:object_r:su_exec_t,s0)
> +--
> +1.7.9.5
> +
> diff --git a/recipes-security/refpolicy/refpolicy_2.20130424.inc b/recipes-security/refpolicy/refpolicy_2.20130424.inc
> index 23339e3..9e5e426 100644
> --- a/recipes-security/refpolicy/refpolicy_2.20130424.inc
> +++ b/recipes-security/refpolicy/refpolicy_2.20130424.inc
> @@ -30,6 +30,7 @@ SRC_URI += "file://poky-fc-subs_dist.patch \
> file://poky-fc-udevd.patch \
> file://poky-fc-rpm.patch \
> file://poky-fc-ftpwho-dir.patch \
> + file://poky-fc-fix-real-path_su.patch \
> "
>
> # Specific policy for Poky
>
Acked.
--
- Pascal
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [meta-selinux][PATCH 1/1] refpolicy: fix real path for su.shadow
2014-02-13 8:09 ` [meta-selinux][PATCH 1/1] " wenzong.fan
2014-02-13 9:48 ` Pascal Ouyang
@ 2014-02-14 3:26 ` Joe MacDonald
1 sibling, 0 replies; 4+ messages in thread
From: Joe MacDonald @ 2014-02-14 3:26 UTC (permalink / raw)
To: wenzong.fan; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 2420 bytes --]
Merged, thanks.
-J.
[[yocto] [meta-selinux][PATCH 1/1] refpolicy: fix real path for su.shadow] On 14.02.13 (Thu 03:09) wenzong.fan@windriver.com wrote:
> From: Wenzong Fan <wenzong.fan@windriver.com>
>
> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
> ---
> .../poky-fc-fix-real-path_su.patch | 25 ++++++++++++++++++++
> .../refpolicy/refpolicy_2.20130424.inc | 1 +
> 2 files changed, 26 insertions(+)
> create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
>
> diff --git a/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
> new file mode 100644
> index 0000000..b0392ce
> --- /dev/null
> +++ b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch
> @@ -0,0 +1,25 @@
> +From 4affa5e9797f5d51597c9b8e0f2503883c766699 Mon Sep 17 00:00:00 2001
> +From: Wenzong Fan <wenzong.fan@windriver.com>
> +Date: Thu, 13 Feb 2014 00:33:07 -0500
> +Subject: [PATCH] fix real path for su.shadow command
> +
> +Upstream-Status: Inappropriate [only for Poky]
> +
> +Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
> +---
> + policy/modules/admin/su.fc | 2 ++
> + 1 file changed, 2 insertions(+)
> +
> +diff --git a/policy/modules/admin/su.fc b/policy/modules/admin/su.fc
> +index a563687..0f43827 100644
> +--- a/policy/modules/admin/su.fc
> ++++ b/policy/modules/admin/su.fc
> +@@ -4,3 +4,5 @@
> +
> + /usr/(local/)?bin/ksu -- gen_context(system_u:object_r:su_exec_t,s0)
> + /usr/bin/kdesu -- gen_context(system_u:object_r:su_exec_t,s0)
> ++
> ++/bin/su.shadow -- gen_context(system_u:object_r:su_exec_t,s0)
> +--
> +1.7.9.5
> +
> diff --git a/recipes-security/refpolicy/refpolicy_2.20130424.inc b/recipes-security/refpolicy/refpolicy_2.20130424.inc
> index 23339e3..9e5e426 100644
> --- a/recipes-security/refpolicy/refpolicy_2.20130424.inc
> +++ b/recipes-security/refpolicy/refpolicy_2.20130424.inc
> @@ -30,6 +30,7 @@ SRC_URI += "file://poky-fc-subs_dist.patch \
> file://poky-fc-udevd.patch \
> file://poky-fc-rpm.patch \
> file://poky-fc-ftpwho-dir.patch \
> + file://poky-fc-fix-real-path_su.patch \
> "
>
> # Specific policy for Poky
--
-Joe MacDonald.
:wq
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2014-02-14 3:26 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-02-13 8:09 [meta-selinux][PATCH 0/1] refpolicy: fix real path for su.shadow wenzong.fan
2014-02-13 8:09 ` [meta-selinux][PATCH 1/1] " wenzong.fan
2014-02-13 9:48 ` Pascal Ouyang
2014-02-14 3:26 ` Joe MacDonald
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.