|
 |
38ab1da |
diff --git selinux-dbus-2.7/Makefile selinux-dbus-2.7/Makefile
|
|
|
38ab1da |
index 9a6cc90..53143af 100644
|
|
|
38ab1da |
--- selinux-dbus-2.7/Makefile
|
|
|
38ab1da |
+++ selinux-dbus-2.7/Makefile
|
|
|
38ab1da |
@@ -1,3 +1,5 @@
|
|
|
38ab1da |
+PREFIX ?= /usr
|
|
|
38ab1da |
+
|
|
|
38ab1da |
all:
|
|
|
38ab1da |
|
|
|
38ab1da |
clean:
|
|
|
38ab1da |
@@ -5,12 +7,12 @@ clean:
|
|
|
38ab1da |
install:
|
|
|
38ab1da |
-mkdir -p $(DESTDIR)/etc/dbus-1/system.d/
|
|
|
38ab1da |
install -m 644 org.selinux.conf $(DESTDIR)/etc/dbus-1/system.d/
|
|
|
38ab1da |
- -mkdir -p $(DESTDIR)/usr/share/dbus-1/system-services
|
|
|
38ab1da |
- install -m 644 org.selinux.service $(DESTDIR)/usr/share/dbus-1/system-services
|
|
|
38ab1da |
- -mkdir -p $(DESTDIR)/usr/share/polkit-1/actions/
|
|
|
38ab1da |
- install -m 644 org.selinux.policy $(DESTDIR)/usr/share/polkit-1/actions/
|
|
|
38ab1da |
- -mkdir -p $(DESTDIR)/usr/share/system-config-selinux
|
|
|
38ab1da |
- install -m 755 selinux_server.py $(DESTDIR)/usr/share/system-config-selinux
|
|
|
38ab1da |
+ -mkdir -p $(DESTDIR)$(PREFIX)/share/dbus-1/system-services
|
|
|
38ab1da |
+ install -m 644 org.selinux.service $(DESTDIR)$(PREFIX)/share/dbus-1/system-services
|
|
|
38ab1da |
+ -mkdir -p $(DESTDIR)$(PREFIX)/share/polkit-1/actions/
|
|
|
38ab1da |
+ install -m 644 org.selinux.policy $(DESTDIR)$(PREFIX)/share/polkit-1/actions/
|
|
|
38ab1da |
+ -mkdir -p $(DESTDIR)$(PREFIX)/share/system-config-selinux
|
|
|
38ab1da |
+ install -m 755 selinux_server.py $(DESTDIR)$(PREFIX)/share/system-config-selinux
|
|
|
38ab1da |
|
|
|
38ab1da |
relabel:
|
|
|
38ab1da |
|
|
|
0ea988e |
diff --git selinux-dbus-2.7/org.selinux.conf selinux-dbus-2.7/org.selinux.conf
|
|
|
0ea988e |
index a350978..1ae079d 100644
|
|
|
0ea988e |
--- selinux-dbus-2.7/org.selinux.conf
|
|
|
0ea988e |
+++ selinux-dbus-2.7/org.selinux.conf
|
|
|
0ea988e |
@@ -12,12 +12,8 @@
|
|
|
0ea988e |
|
|
|
0ea988e |
|
|
|
0ea988e |
authorization is performed by PolicyKit -->
|
|
|
0ea988e |
- <policy at_console="true">
|
|
|
0ea988e |
- <allow send_destination="org.selinux"/>
|
|
|
0ea988e |
- </policy>
|
|
|
0ea988e |
<policy context="default">
|
|
|
0ea988e |
-
|
|
|
0ea988e |
- send_interface="org.freedesktop.DBus.Introspectable"/>
|
|
|
0ea988e |
+ <allow send_destination="org.selinux"/>
|
|
|
0ea988e |
</policy>
|
|
|
0ea988e |
|
|
|
0ea988e |
</busconfig>
|
|
|
0ea988e |
diff --git selinux-dbus-2.7/org.selinux.policy selinux-dbus-2.7/org.selinux.policy
|
|
|
0ea988e |
index 0126610..9772127 100644
|
|
|
0ea988e |
--- selinux-dbus-2.7/org.selinux.policy
|
|
|
0ea988e |
+++ selinux-dbus-2.7/org.selinux.policy
|
|
|
0ea988e |
@@ -70,9 +70,9 @@
|
|
|
0ea988e |
<allow_active>auth_admin_keep</allow_active>
|
|
|
0ea988e |
</defaults>
|
|
|
0ea988e |
</action>
|
|
|
0ea988e |
- <action id="org.selinux.change_policy_type">
|
|
|
0ea988e |
- <description>SELinux write access</description>
|
|
|
0ea988e |
- <message>System policy prevents change_policy_type access to SELinux</message>
|
|
|
0ea988e |
+ <action id="org.selinux.change_default_mode">
|
|
|
0ea988e |
+ <description>Change SELinux default enforcing mode</description>
|
|
|
0ea988e |
+ <message>System policy prevents change_default_policy access to SELinux</message>
|
|
|
0ea988e |
<defaults>
|
|
|
0ea988e |
<allow_any>no</allow_any>
|
|
|
0ea988e |
<allow_inactive>no</allow_inactive>
|