diff --git a/selinux-policy/systemd-generators/Makefile b/selinux-policy/systemd-generators/Makefile index 041e2b8..9dbed8f 100644 --- a/selinux-policy/systemd-generators/Makefile +++ b/selinux-policy/systemd-generators/Makefile @@ -74,6 +74,7 @@ $(METADATA): Makefile @echo "Releases: -RHEL7" >> $(METADATA) @echo "Bug: 2230226" >> $(METADATA) # Fedora 39 @echo "Bug: RHEL-72549" >> $(METADATA) # RHEL-10 + @echo "Bug: RHEL-75879" >> $(METADATA) # RHEL-10 rhts-lint $(METADATA) diff --git a/selinux-policy/systemd-generators/main.fmf b/selinux-policy/systemd-generators/main.fmf index 4e67f10..93b9231 100644 --- a/selinux-policy/systemd-generators/main.fmf +++ b/selinux-policy/systemd-generators/main.fmf @@ -34,6 +34,7 @@ tag: link: - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=2230226 - verifies: https://issues.redhat.com/browse/RHEL-72549 + - verifies: https://issues.redhat.com/browse/RHEL-75879 adjust: - enabled: false when: distro == rhel-4, rhel-5, rhel-6, rhel-7 diff --git a/selinux-policy/systemd-generators/runtest.sh b/selinux-policy/systemd-generators/runtest.sh index f92caea..bc8be92 100755 --- a/selinux-policy/systemd-generators/runtest.sh +++ b/selinux-policy/systemd-generators/runtest.sh @@ -205,6 +205,11 @@ EOF rlSESearchRule "allow systemd_ssh_generator_t vsock_device_t : chr_file { getattr ioctl open read } [ ]" rlSESearchRule "allow systemd_ssh_generator_t systemd_unit_file_t : file { create getattr write open } [ ]" rlPhaseEnd + + rlPhaseStartTest "RHEL-75879" + rlRun "seinfo -a systemd_generator -x" + rlSESearchRule "allow systemd_fstab_generator_t syslogd_t : unix_dgram_socket { sendto } [ ]" + rlPhaseEnd fi ### generators from other packages: install them all?