Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 678010 - portage_fetch_t to be able to read /dev/urandom by default
Summary: portage_fetch_t to be able to read /dev/urandom by default
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: SELinux (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: SE Linux Bugs
Depends on:
Reported: 2019-02-14 16:59 UTC by Vilgot Fredenberg
Modified: 2019-02-14 16:59 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

example module (file_678010.txt,246 bytes, text/plain)
2019-02-14 16:59 UTC, Vilgot Fredenberg

Note You need to log in before you can comment on or make changes to this bug.
Description Vilgot Fredenberg 2019-02-14 16:59:56 UTC
Created attachment 565376 [details]
example module

The default implementation of portage synchronization with rsync utilizes gpg-verification, however the current SELinux policy (sec-policy/selinux-base-policy) currently disallows said verification.

To fix this I propose that we either create a boolean (enabled by default) that allows for portage_fetch_t to read /dev/urandom or that we skip the boolean and just merge it in.

I created a module for this that I personally use, see attached file.