diff --git a/selinux-policy/swap-file-and-systemd-access/Makefile b/selinux-policy/swap-file-and-systemd-access/Makefile index 786c0d0..dc3fe58 100644 --- a/selinux-policy/swap-file-and-systemd-access/Makefile +++ b/selinux-policy/swap-file-and-systemd-access/Makefile @@ -66,6 +66,7 @@ $(METADATA): Makefile @echo "Bug: 1797543" >> $(METADATA) # Fedora 31 @echo "Bug: 1798872" >> $(METADATA) # RHEL 8 @echo "Bug: 1845594" >> $(METADATA) # Fedora 32 + @echo "Bug: 1850177" >> $(METADATA) # RHEL 8 rhts-lint $(METADATA) diff --git a/selinux-policy/swap-file-and-systemd-access/runtest.sh b/selinux-policy/swap-file-and-systemd-access/runtest.sh index 920eee1..fbebe5b 100755 --- a/selinux-policy/swap-file-and-systemd-access/runtest.sh +++ b/selinux-policy/swap-file-and-systemd-access/runtest.sh @@ -60,9 +60,13 @@ rlJournalStart rlSESearchRule "allow init_t swapfile_t : file { getattr } [ ]" rlPhaseEnd - rlPhaseStartTest "bz#1797543 + bz#1798872" + rlPhaseStartTest "bz#1797543 + bz#1798872 + bz#1850177" rlSEMatchPathCon "/usr/lib/systemd/systemd-sleep" "systemd_sleep_exec_t" + rlSEMatchPathCon "/sys/power" "sysfs_t" + rlSEMatchPathCon "/sys/power/state" "sysfs_t" rlSESearchRule "allow systemd_sleep_t swapfile_t : file { append getattr ioctl lock open read write } [ ]" + rlSESearchRule "allow systemd_sleep_t systemd_sleep_t : capability { sys_ptrace } [ ]" + rlSESearchRule "allow systemd_sleep_t sysfs_t : dir { write } [ ]" rlPhaseEnd rlPhaseStartTest "bz#1845594"