commit: dc478cb2c42a8b5d120203a1aa1157873a131cb3
Author: Chris PeBenito <cpebenito <AT> tresys <DOT> com>
AuthorDate: Fri Mar 25 14:24:59 2016 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Fri May 13 05:07:33 2016 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=dc478cb2
Update su for libselinux-2.5 changes.
su is linked against libselinux via pam_unix.so. Use the selinuxutil
interface so future libselinux changes are pulled in.
policy/modules/admin/su.if | 3 +++
policy/modules/admin/su.te | 2 +-
2 files changed, 4 insertions(+), 1 deletion(-)
diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
index a069cb8..02aabd8 100644
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@@ -217,6 +217,9 @@ template(`su_role_template',`
miscfiles_read_localization($1_su_t)
+ # pam_unix is linked against libselinux
+ seutil_libselinux_linked($1_su_t)
+
userdom_use_user_terminals($1_su_t)
userdom_search_user_home_dirs($1_su_t)
diff --git a/policy/modules/admin/su.te b/policy/modules/admin/su.te
index 85bb77e..d936e3b 100644
--- a/policy/modules/admin/su.te
+++ b/policy/modules/admin/su.te
@@ -1,4 +1,4 @@
-policy_module(su, 1.12.0)
+policy_module(su, 1.12.1)
########################################
#
