diff --git a/policy-f20-contrib.patch b/policy-f20-contrib.patch index 17d0954..8283f84 100644 --- a/policy-f20-contrib.patch +++ b/policy-f20-contrib.patch @@ -102114,3 +102114,21 @@ index 9ba9f81..983b6c8 100644 -miscfiles_read_localization(zos_remote_t) - logging_send_syslog_msg(zos_remote_t) +commit a3007fcf054427b3e4f2c06c77ad783551aae67f +Author: Dan Walsh +Date: Mon Dec 2 09:11:05 2013 -0500 + + Allow cloud_init to transition to rpm_script_t + +diff --git a/cloudform.te b/cloudform.te +index 4e41e84..786d623 100644 +--- a/cloudform.te ++++ b/cloudform.te +@@ -161,6 +161,7 @@ optional_policy(` + + optional_policy(` + rpm_domtrans(cloud_init_t) ++ rpm_transition_script(cloud_init_t) + unconfined_domain(cloud_init_t) + ') + diff --git a/selinux-policy.spec b/selinux-policy.spec index 3baf4df..7fd8469 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -574,6 +574,7 @@ SELinux Reference policy mls base module. %changelog * Tue Nov 26 2013 Miroslav Grepl 3.12.1-105 +- Added fix for clout_init to transition to rpm_script_t (dwalsh@redhat.com) - Dontaudit openshift domains trying to use rawip_sockets, this is caused by a bad check in the kernel. - Allow git_system_t to read git_user_content if the git_system_enable_homedirs boolean is turned on - Add lsmd_plugin_t for lsm plugins