{"push_id":670984500,"size":1,"distinct_size":1,"ref":"refs/heads/rawhide-contrib-cil","head":"daad0252400284027e8a5c300addf6226f74e312","before":"49220f5a543754386a9133c4e2cec106dd9e7ec9","commits":[{"sha":"daad0252400284027e8a5c300addf6226f74e312","author":{"email":"6f42334b13eac6279230e1e7c656c45709d22dc0@redhat.com","name":"Miroslav Grepl"},"message":"openshift_initrc_run() is called in rpm.te but it is not correctly proceed in CIL. We don't ship openshift module in MLS but we get\n\n(roletype rpm_script_roles openshift_initrc_t)\n\noutside of optional_policy block in CIL. Also we get\n\n(optional rpm_optional_29\n    (typeattributeset cil_gen_require openshift_initrc_t)\n    (roletype rpm_script_roles openshift_initrc_t)\n    (typeattributeset cil_gen_require openshift_initrc_exec_t)\n    (allow rpm_script_t openshift_initrc_exec_t (file (read getattr execute open)))\n    (allow rpm_script_t openshift_initrc_t (process (transition)))\n    (typetransition rpm_script_t openshift_initrc_exec_t process openshift_initrc_t)\n    (allow openshift_initrc_t rpm_script_t (fd (use)))\n    (allow openshift_initrc_t rpm_script_t (fifo_file (ioctl read write getattr lock append)))\n    (allow openshift_initrc_t rpm_script_t (process (sigchld)))\n)","distinct":true,"url":"https://api.github.com/repos/mgrepl/selinux-policy/commits/daad0252400284027e8a5c300addf6226f74e312"}]}