diff --git a/qm.te b/qm.te index b268796b..cda602f0 100644 --- a/qm.te +++ b/qm.te @@ -29,3 +29,12 @@ files_pid_filetrans(init_t, ipc_var_run_t, dir, "ipc") unconfined_domain(ipc_t) qm_domain_template(qm) + +optional_policy(` + require{ + type bluechi_var_run_t; + type bluechi_t; + } + stream_connect_pattern(qm_t, bluechi_var_run_t, bluechi_var_run_t, bluechi_t) + unconfined_server_stream_connectto(qm_t) +') diff --git a/rpm/qm.spec b/rpm/qm.spec index dc5e2fa7..549a19bb 100644 --- a/rpm/qm.spec +++ b/rpm/qm.spec @@ -61,6 +61,7 @@ BuildRequires: git-core BuildRequires: pkgconfig(systemd) BuildRequires: selinux-policy >= %_selinux_policy_version BuildRequires: selinux-policy-devel >= %_selinux_policy_version +BuildRequires: bluechi-selinux Requires: iptables Requires: parted @@ -71,7 +72,6 @@ Requires(post): selinux-policy-targeted >= %_selinux_policy_version Requires(post): policycoreutils Requires(post): libselinux-utils Requires: podman >= %{podman_epoch}:4.5 -Requires: bluechi-agent Requires: jq %description