于 14-2-13 下午4:09, wenzong....@windriver.com 写道: > From: Wenzong Fan <wenzong....@windriver.com> > > Signed-off-by: Wenzong Fan <wenzong....@windriver.com> > --- > .../poky-fc-fix-real-path_su.patch | 25 > ++++++++++++++++++++ > .../refpolicy/refpolicy_2.20130424.inc | 1 + > 2 files changed, 26 insertions(+) > create mode 100644 > recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch > > diff --git > a/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch > > b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch > new file mode 100644 > index 0000000..b0392ce > --- /dev/null > +++ > b/recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-fix-real-path_su.patch > @@ -0,0 +1,25 @@ > +From 4affa5e9797f5d51597c9b8e0f2503883c766699 Mon Sep 17 00:00:00 2001 > +From: Wenzong Fan <wenzong....@windriver.com> > +Date: Thu, 13 Feb 2014 00:33:07 -0500 > +Subject: [PATCH] fix real path for su.shadow command > + > +Upstream-Status: Inappropriate [only for Poky] > + > +Signed-off-by: Wenzong Fan <wenzong....@windriver.com> > +--- > + policy/modules/admin/su.fc | 2 ++ > + 1 file changed, 2 insertions(+) > + > +diff --git a/policy/modules/admin/su.fc b/policy/modules/admin/su.fc > +index a563687..0f43827 100644 > +--- a/policy/modules/admin/su.fc > ++++ b/policy/modules/admin/su.fc > +@@ -4,3 +4,5 @@ > + > + /usr/(local/)?bin/ksu -- > gen_context(system_u:object_r:su_exec_t,s0) > + /usr/bin/kdesu -- > gen_context(system_u:object_r:su_exec_t,s0) > ++ > ++/bin/su.shadow -- > gen_context(system_u:object_r:su_exec_t,s0) > +-- > +1.7.9.5 > + > diff --git a/recipes-security/refpolicy/refpolicy_2.20130424.inc > b/recipes-security/refpolicy/refpolicy_2.20130424.inc > index 23339e3..9e5e426 100644 > --- a/recipes-security/refpolicy/refpolicy_2.20130424.inc > +++ b/recipes-security/refpolicy/refpolicy_2.20130424.inc > @@ -30,6 +30,7 @@ SRC_URI += "file://poky-fc-subs_dist.patch \ > file://poky-fc-udevd.patch \ > file://poky-fc-rpm.patch \ > file://poky-fc-ftpwho-dir.patch \ > + file://poky-fc-fix-real-path_su.patch \ > " > > # Specific policy for Poky >
Acked. -- - Pascal _______________________________________________ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
