[yocto] [meta-selinux][PATCH 0/1] refpolicy: Allow ping to get/set capabilities

[Pascal Ouyang]

于 14-1-28 下午3:54, wenzong.fan at windriver.com 写道:
> From: Wenzong Fan <wenzong.fan at windriver.com>
> 
> When ping is installed with capabilities instead of being marked setuid,
> then the ping_t domain needs to be allowed to getcap/setcap.
> 
> This patch was backported from upstream.
> 
> The following changes since commit 271955d346f305b196f069d9dc46db16c43678de:
> 
>    refpolicy: fix real path for swapoff (2014-01-28 15:20:19 +0800)
> 
> are available in the git repository at:
> 
>    git://git.pokylinux.org/poky-contrib wenzong/fix-ping
>    http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-ping
> 
> Wenzong Fan (1):
>    refpolicy: Allow ping to get/set capabilities
> 
>   .../Allow-ping-to-get-set-capabilities.patch       |   32 ++++++++++++++++++++
>   .../refpolicy/refpolicy_2.20130424.inc             |    4 +++
>   2 files changed, 36 insertions(+)
>   create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/Allow-ping-to-get-set-capabilities.patch
> 

Merged, thanks.

-- 
- Pascal