PR#277: Users have to be generated is policy/users to make 3.4 userspace happy - rpms/selinux-policy

rpms / selinux-policy

#277 Users have to be generated is policy/users to make 3.4 userspace happy

Merged 2 years ago by zpytela. Opened 2 years ago by plautrba.

rpms/ plautrba/selinux-policy rawhide-userspace-3.4 into rawhide

Users have to be generated is policy/users to make 3.4 userspace happy

Petr Lautrbach • 2 years ago

936c0df

users-minimum

file modified

		`@@ -36,3 +36,4 @@`
		`# not in the sysadm_r.`
		`#`
		`gen_user(root, user, unconfined_r sysadm_r staff_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)`
		`+ gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)`

users-mls

file modified

		`@@ -36,3 +36,5 @@`
		`# not in the sysadm_r.`
		`#`
		`gen_user(root, user, sysadm_r staff_r secadm_r auditadm_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)`
		`+ gen_user(guest_u, user, guest_r, s0, s0)`
		`+ gen_user(xguest_u, user, xguest_r, s0, s0)`

users-targeted

file modified

		`@@ -36,3 +36,6 @@`
		`# not in the sysadm_r.`
		`#`
		`gen_user(root, user, unconfined_r sysadm_r staff_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)`
		`+ gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)`
		`+ gen_user(guest_u, user, guest_r, s0, s0)`
		`+ gen_user(xguest_u, user, xguest_r, s0, s0)`

plautrba commented 2 years ago

See https://github.com/fedora-selinux/selinux-policy/pull/1159

Use f37-build-side-52680 side-tag for reproducer - baseurl=https://kojipkgs.fedoraproject.org/repos/f37-build-side-52680/4592969/x86_64

zuul commented 2 years ago

Unable to freeze job graph: Unable to modify final job <Job rpm-sti-test branches: {MatchAny:{BranchMatcher:rawhide},{BranchMatcher:main}} source: fedora-project-config/zuul.d/_jobs-base.yaml@master#3> attribute timeout=21600 with variant <Job rpm-sti-test branches: None source: fedora-zuul-jobs-config/zuul.d/projects.yaml@master#108>