rpms/selinux-policy-targeted/devel policy-20050706.patch, 1.4, 1.5 policy-20050502.patch, 1.10, NONE policy-20050516.patch, 1.8, NONE policy-20050525.patch, 1.5, NONE

[fedora-cvs-commits redhat com]

Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy-targeted/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv16562

Modified Files:
	policy-20050706.patch 
Removed Files:
	policy-20050502.patch policy-20050516.patch 
	policy-20050525.patch 
Log Message:
* Thu Jul 7 2005 Dan Walsh <dwalsh redhat com> 1.25.1-5
- Allow cgi script to append to httpd_log_t
- More fixes for samba net command


policy-20050706.patch:
 domains/admin.te                     |    5 +++++
 domains/program/getty.te             |    7 +++++++
 domains/program/netutils.te          |    2 ++
 domains/program/passwd.te            |    5 +++++
 domains/program/unused/apache.te     |    1 +
 domains/program/unused/apmd.te       |    7 +++++--
 domains/program/unused/bluetooth.te  |    3 ++-
 domains/program/unused/ciped.te      |    3 +--
 domains/program/unused/cups.te       |    7 +++++--
 domains/program/unused/cyrus.te      |    5 +----
 domains/program/unused/dhcpc.te      |    1 +
 domains/program/unused/dovecot.te    |    1 +
 domains/program/unused/hald.te       |    3 ++-
 domains/program/unused/hotplug.te    |    4 +++-
 domains/program/unused/hwclock.te    |    3 ---
 domains/program/unused/nscd.te       |    1 +
 domains/program/unused/pppd.te       |    7 ++++---
 domains/program/unused/prelink.te    |    3 ---
 domains/program/unused/radvd.te      |    3 ++-
 domains/program/unused/rpcd.te       |    6 +++++-
 domains/program/unused/samba.te      |   32 ++++++++++++++++++++++++++++++--
 domains/program/unused/squid.te      |    3 +++
 domains/program/unused/winbind.te    |   12 +++++++++++-
 file_contexts/program/cups.fc        |    2 ++
 file_contexts/program/rpcd.fc        |    3 ++-
 file_contexts/program/samba.fc       |    1 +
 file_contexts/program/winbind.fc     |    1 +
 file_contexts/types.fc               |   14 +++++++-------
 macros/admin_macros.te               |    3 ---
 macros/base_user_macros.te           |    4 +---
 macros/global_macros.te              |    1 +
 macros/program/apache_macros.te      |    5 ++---
 macros/program/chkpwd_macros.te      |    7 +++++++
 macros/program/dbusd_macros.te       |    2 +-
 macros/program/evolution_macros.te   |    6 ------
 macros/program/games_domain.te       |    3 ---
 macros/program/java_macros.te        |    2 --
 macros/program/mail_client_macros.te |   10 ++++++++--
 macros/program/mozilla_macros.te     |    2 --
 macros/program/mplayer_macros.te     |    2 +-
 macros/program/xserver_macros.te     |    4 ----
 net_contexts                         |    2 ++
 targeted/domains/unconfined.te       |    5 +++++
 tunables/distro.tun                  |    2 +-
 tunables/tunable.tun                 |    4 ++--
 types/network.te                     |    1 -
 46 files changed, 141 insertions(+), 69 deletions(-)

Index: policy-20050706.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/devel/policy-20050706.patch,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- policy-20050706.patch	7 Jul 2005 12:38:35 -0000	1.4
+++ policy-20050706.patch	7 Jul 2005 12:44:39 -0000	1.5
@@ -329,7 +329,7 @@
  can_udp_send(portmap_t, nfsd_t)
 diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/samba.te policy-1.25.1/domains/program/unused/samba.te
 --- nsapolicy/domains/program/unused/samba.te	2005-07-06 17:15:07.000000000 -0400
-+++ policy-1.25.1/domains/program/unused/samba.te	2005-07-07 06:25:59.000000000 -0400
++++ policy-1.25.1/domains/program/unused/samba.te	2005-07-07 08:42:23.000000000 -0400
 @@ -47,6 +47,8 @@
  
  # Use the network.
@@ -352,7 +352,7 @@
  
  # Permissions to write log files.
  allow smbd_t samba_log_t:file { create ra_file_perms };
-@@ -182,3 +186,28 @@
+@@ -182,3 +186,27 @@
  allow smbmount_t userdomain:fd use;
  allow smbmount_t local_login_t:fd use;
  ')
@@ -371,7 +371,6 @@
 +can_network_client(samba_net_t)
 +allow samba_net_t smbd_port_t:tcp_socket name_connect;
 +can_ldap(samba_net_t)
-+allow samba_net_t newrole_t:fd use;
 +can_kerberos(samba_net_t)
 +allow samba_net_t urandom_device_t:chr_file r_file_perms;
 +allow samba_net_t proc_t:dir search;


--- policy-20050502.patch DELETED ---


--- policy-20050516.patch DELETED ---


--- policy-20050525.patch DELETED ---