ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-01-30 08:04:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

CentOS/RHEL 6 SELinux permissions.

Browse Source
This commit is contained in:
Adam Ierymenko 2022-02-16 12:56:17 -05:00
parent 26e684eb0e
commit ed74ed6ed2
No known key found for this signature in database
GPG Key ID: C8877CF2D7A5D7F3
3 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ext/installfiles/linux/zerotier-one.te Normal file
View File

@ -0,0 +1,14 @@
module zerotier-one 1.0;
require {
type unconfined_t;
type initrc_t;
class memprotect mmap_zero;
}
#============= initrc_t ==============
allow initrc_t self:memprotect mmap_zero;
#============= unconfined_t ==============
allow unconfined_t self:memprotect mmap_zero;

1
make-linux.mk
View File

@ -418,6 +418,7 @@ install: FORCE
rm -f $(DESTDIR)/usr/share/man/man1/zerotier-cli.1.gz rm -f $(DESTDIR)/usr/share/man/man1/zerotier-cli.1.gz
cat doc/zerotier-cli.1 | gzip -9 >$(DESTDIR)/usr/share/man/man1/zerotier-cli.1.gz cat doc/zerotier-cli.1 | gzip -9 >$(DESTDIR)/usr/share/man/man1/zerotier-cli.1.gz
cat doc/zerotier-idtool.1 | gzip -9 >$(DESTDIR)/usr/share/man/man1/zerotier-idtool.1.gz cat doc/zerotier-idtool.1 | gzip -9 >$(DESTDIR)/usr/share/man/man1/zerotier-idtool.1.gz
cp ext/installfiles/linux/zerotier-one.te /var/lib/zerotier-one/zerotier-one.te
# Uninstall preserves identity.public and identity.secret since the user might # Uninstall preserves identity.public and identity.secret since the user might
# want to save these. These are your ZeroTier address. # want to save these. These are your ZeroTier address.

12
zerotier-one.spec
View File

@ -121,6 +121,18 @@ case "$1" in
chkconfig --add zerotier-one chkconfig --add zerotier-one
;; ;;
esac esac
if [ -x /usr/bin/checkmodule -a -x /usr/bin/semodule_package -a -x /usr/bin/semodule ]; then
rm -f /var/lib/zerotier-one/zerotier-one.mod
/usr/bin/checkmodule -M -m -o /var/lib/zerotier-one/zerotier-one.mod /var/lib/zerotier-one/zerotier-one.te
if [ -f /var/lib/zerotier-one/zerotier-one.pp ]; then
rm -f /var/lib/zerotier-one/zerotier-one.pp
/usr/bin/semodule_package -o /var/lib/zerotier-one/zerotier-one.pp -m /var/lib/zerotier-one/zerotier-one.mod
/usr/bin/semodule -u /var/lib/zerotier-one/zerotier-one.pp
else
/usr/bin/semodule_package -o /var/lib/zerotier-one/zerotier-one.pp -m /var/lib/zerotier-one/zerotier-one.mod
/usr/bin/semodule -i /var/lib/zerotier-one/zerotier-one.pp
fi
fi
%endif %endif
%preun %preun