rpms/selinux-policy/devel policy-20051208.patch,1.25,1.26
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Wed Dec 21 18:21:22 UTC 2005
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv14279
Modified Files:
policy-20051208.patch
Log Message:
* Wed Dec 21 2005 Dan Walsh <dwalsh at redhat.com> 2.1.6-14
- Lots of fixes to make mls policy work
policy-20051208.patch:
Makefile | 2
Rules.modular | 10
config/appconfig-strict-mcs/default_type | 6
config/appconfig-strict-mls/default_type | 7
config/appconfig-strict-mls/initrc_context | 2
config/appconfig-targeted-mcs/default_type | 2
config/appconfig-targeted-mls/default_type | 2
config/appconfig-targeted-mls/initrc_context | 2
man/man8/ftpd_selinux.8 | 56 ++++
man/man8/httpd_selinux.8 | 123 ++++++++
man/man8/kerberos_selinux.8 | 31 ++
man/man8/named_selinux.8 | 29 ++
man/man8/nfs_selinux.8 | 30 ++
man/man8/nis_selinux.8 | 1
man/man8/rsync_selinux.8 | 41 ++
man/man8/samba_selinux.8 | 60 ++++
man/man8/ypbind_selinux.8 | 19 +
policy/global_tunables | 3
policy/mcs | 321 ++++-------------------
policy/mls | 372 +++++----------------------
policy/modules/admin/kudzu.te | 2
policy/modules/admin/logrotate.te | 4
policy/modules/admin/rpm.fc | 1
policy/modules/admin/rpm.te | 7
policy/modules/admin/tmpreaper.te | 3
policy/modules/admin/usermanage.te | 9
policy/modules/apps/java.fc | 4
policy/modules/apps/java.if | 23 +
policy/modules/apps/java.te | 25 +
policy/modules/apps/webalizer.te | 1
policy/modules/kernel/corenetwork.te.in | 12
policy/modules/kernel/devices.fc | 9
policy/modules/kernel/domain.if | 1
policy/modules/kernel/files.fc | 27 +
policy/modules/kernel/kernel.if | 2
policy/modules/kernel/kernel.te | 30 +-
policy/modules/kernel/mls.te | 9
policy/modules/kernel/selinux.te | 2
policy/modules/kernel/storage.fc | 44 +--
policy/modules/services/automount.te | 9
policy/modules/services/bluetooth.te | 1
policy/modules/services/cups.te | 1
policy/modules/services/cvs.fc | 2
policy/modules/services/cvs.te | 6
policy/modules/services/dbus.te | 1
policy/modules/services/hal.te | 4
policy/modules/services/ldap.te | 4
policy/modules/services/mta.te | 3
policy/modules/services/remotelogin.te | 1
policy/modules/services/sasl.te | 8
policy/modules/services/sendmail.te | 7
policy/modules/services/ssh.te | 10
policy/modules/system/authlogin.if | 12
policy/modules/system/authlogin.te | 1
policy/modules/system/getty.te | 3
policy/modules/system/hostname.if | 15 +
policy/modules/system/hostname.te | 37 --
policy/modules/system/init.if | 14 +
policy/modules/system/init.te | 22 +
policy/modules/system/iptables.te | 2
policy/modules/system/libraries.fc | 18 +
policy/modules/system/locallogin.if | 1
policy/modules/system/locallogin.te | 2
policy/modules/system/logging.fc | 7
policy/modules/system/logging.if | 21 +
policy/modules/system/logging.te | 5
policy/modules/system/lvm.te | 2
policy/modules/system/selinuxutil.fc | 6
policy/modules/system/selinuxutil.te | 10
policy/modules/system/udev.fc | 1
policy/modules/system/udev.te | 4
policy/modules/system/unconfined.fc | 2
policy/modules/system/unconfined.te | 5
policy/modules/system/userdomain.fc | 2
policy/modules/system/userdomain.if | 18 +
policy/modules/system/userdomain.te | 16 +
policy/users | 8
77 files changed, 944 insertions(+), 681 deletions(-)
Index: policy-20051208.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20051208.patch,v
retrieving revision 1.25
retrieving revision 1.26
diff -u -r1.25 -r1.26
--- policy-20051208.patch 21 Dec 2005 18:07:27 -0000 1.25
+++ policy-20051208.patch 21 Dec 2005 18:21:19 -0000 1.26
@@ -1370,6 +1370,32 @@
cron_system_entry(tmpreaper_t,tmpreaper_exec_t)
ifdef(`TODO',`
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/usermanage.te serefpolicy-2.1.6/policy/modules/admin/usermanage.te
+--- nsaserefpolicy/policy/modules/admin/usermanage.te 2005-12-09 23:35:04.000000000 -0500
++++ serefpolicy-2.1.6/policy/modules/admin/usermanage.te 2005-12-21 13:13:41.000000000 -0500
+@@ -44,6 +44,10 @@
+ type passwd_exec_t;
+ domain_entry_file(passwd_t,passwd_exec_t)
+
++optional_policy(`nscd',`
++ nscd_use_socket(passwd_t)
++')
++
+ type sysadm_passwd_t;
+ domain_obj_id_change_exempt(sysadm_passwd_t)
+ domain_type(sysadm_passwd_t)
+@@ -136,6 +140,11 @@
+ nis_use_ypbind(chfn_t)
+ ')
+
++optional_policy(`nscd',`
++ nscd_use_socket(chfn_t)
++')
++
++
+ ########################################
+ #
+ # Crack local policy
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/java.fc serefpolicy-2.1.6/policy/modules/apps/java.fc
--- nsaserefpolicy/policy/modules/apps/java.fc 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-2.1.6/policy/modules/apps/java.fc 2005-12-16 23:22:51.000000000 -0500
More information about the fedora-cvs-commits
mailing list