rpms/selinux-policy-targeted/FC-3 policy-20050104.patch,1.43,1.44
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Wed Jun 15 20:27:59 UTC 2005
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy-targeted/FC-3
In directory cvs.devel.redhat.com:/tmp/cvs-serv32616
Modified Files:
policy-20050104.patch
Log Message:
* Tue Jun 14 2005 Dan Walsh <dwalsh at redhat.com> 1.17.30-3.10
- Add additional shlib_t and texrel_shlib_t
policy-20050104.patch:
Makefile | 50 +++--
attrib.te | 29 +++
domains/program/crond.te | 7
domains/program/ldconfig.te | 24 ++
domains/program/login.te | 2
domains/program/logrotate.te | 24 +-
domains/program/mount.te | 2
domains/program/ssh.te | 7
domains/program/syslogd.te | 40 ++--
domains/program/unused/acct.te | 6
domains/program/unused/apache.te | 307 ++++++++++++++++++++++------------
domains/program/unused/arpwatch.te | 26 ++
domains/program/unused/cups.te | 58 +++++-
domains/program/unused/dhcpc.te | 5
domains/program/unused/dhcpd.te | 20 +-
domains/program/unused/dovecot.te | 3
domains/program/unused/ftpd.te | 2
domains/program/unused/hald.te | 3
domains/program/unused/howl.te | 2
domains/program/unused/innd.te | 7
domains/program/unused/ipsec.te | 9
domains/program/unused/iptables.te | 3
domains/program/unused/mailman.te | 29 ++-
domains/program/unused/mdadm.te | 3
domains/program/unused/mta.te | 25 ++
domains/program/unused/mysqld.te | 29 +--
domains/program/unused/named.te | 39 ++--
domains/program/unused/nscd.te | 62 +++---
domains/program/unused/ntpd.te | 27 ++
domains/program/unused/portmap.te | 21 ++
domains/program/unused/postfix.te | 2
domains/program/unused/postgresql.te | 62 +++++-
domains/program/unused/procmail.te | 1
domains/program/unused/rpcd.te | 2
domains/program/unused/rpm.te | 5
domains/program/unused/rsync.te | 2
domains/program/unused/samba.te | 4
domains/program/unused/sendmail.te | 2
domains/program/unused/slrnpull.te | 1
domains/program/unused/snmpd.te | 31 ++-
domains/program/unused/spamd.te | 2
domains/program/unused/squid.te | 30 ++-
domains/program/unused/udev.te | 5
domains/program/unused/updfstab.te | 1
domains/program/unused/winbind.te | 35 +++
domains/program/unused/xdm.te | 4
domains/program/unused/ypbind.te | 15 -
domains/program/unused/ypserv.te | 7
domains/user.te | 6
file_contexts/distros.fc | 174 +++++++++++++++++--
file_contexts/program/apache.fc | 24 ++
file_contexts/program/arpwatch.fc | 3
file_contexts/program/cups.fc | 5
file_contexts/program/dhcpd.fc | 25 ++
file_contexts/program/ipsec.fc | 11 -
file_contexts/program/mailman.fc | 15 -
file_contexts/program/mta.fc | 5
file_contexts/program/mysqld.fc | 4
file_contexts/program/named.fc | 18 +
file_contexts/program/nscd.fc | 3
file_contexts/program/ntpd.fc | 10 -
file_contexts/program/portmap.fc | 9
file_contexts/program/postgresql.fc | 23 --
file_contexts/program/sendmail.fc | 1
file_contexts/program/snmpd.fc | 4
file_contexts/program/squid.fc | 2
file_contexts/program/syslogd.fc | 3
file_contexts/program/winbind.fc | 10 +
file_contexts/types.fc | 212 +++++++++--------------
flask/access_vectors | 31 +++
flask/security_classes | 6
genfs_contexts | 2
macros/base_user_macros.te | 9
macros/core_macros.te | 98 +++++++---
macros/global_macros.te | 95 +++-------
macros/network_macros.te | 172 +++++++++++++++++++
macros/program/apache_macros.te | 144 ++++++++-------
macros/program/kerberos_macros.te | 11 +
macros/program/mount_macros.te | 2
macros/program/mozilla_macros.te | 2
macros/program/mta_macros.te | 5
macros/program/newrole_macros.te | 2
macros/program/spamassassin_macros.te | 5
macros/program/ssh_agent_macros.te | 2
macros/program/ssh_macros.te | 2
macros/program/su_macros.te | 2
macros/program/userhelper_macros.te | 3
macros/program/xauth_macros.te | 2
macros/program/xserver_macros.te | 4
macros/program/ypbind_macros.te | 24 --
man/man8/httpd_selinux.8 | 114 ++++++++++++
man/man8/named_selinux.8 | 29 +++
net_contexts | 99 +++++++---
targeted/assert.te | 6
targeted/domains/program/hotplug.te | 4
targeted/domains/program/initrc.te | 2
targeted/domains/program/sendmail.te | 17 +
targeted/domains/unconfined.te | 63 +++++-
targeted/types/apache.te | 5
tunables/distro.tun | 2
tunables/tunable.tun | 21 --
types/device.te | 9
types/file.te | 89 ++++++---
types/network.te | 56 ++++--
types/procfs.te | 4
105 files changed, 1977 insertions(+), 815 deletions(-)
Index: policy-20050104.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-3/policy-20050104.patch,v
retrieving revision 1.43
retrieving revision 1.44
diff -u -r1.43 -r1.44
--- policy-20050104.patch 15 Jun 2005 20:23:04 -0000 1.43
+++ policy-20050104.patch 15 Jun 2005 20:27:56 -0000 1.44
@@ -1259,7 +1259,7 @@
+allow system_mail_t { random_device_t urandom_device_t }:chr_file read;
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/mysqld.te policy-1.17.30/domains/program/unused/mysqld.te
--- nsapolicy/domains/program/unused/mysqld.te 2004-10-09 21:07:28.000000000 -0400
-+++ policy-1.17.30/domains/program/unused/mysqld.te 2005-06-15 10:45:59.000000000 -0400
++++ policy-1.17.30/domains/program/unused/mysqld.te 2005-06-15 16:28:28.000000000 -0400
@@ -10,7 +10,7 @@
#
# mysqld_exec_t is the type of the mysqld executable.
@@ -1325,7 +1325,7 @@
ifdef(`daemontools.te', `
domain_auto_trans( svc_run_t, mysqld_exec_t, mysqld_t)
allow svc_start_t mysqld_t:process signal;
-@@ -87,3 +80,12 @@
+@@ -87,3 +80,13 @@
# because Fedora has the sock_file in the database directory
file_type_auto_trans(mysqld_t, mysqld_db_t, mysqld_var_run_t, sock_file)
')
@@ -1338,6 +1338,7 @@
+}
+')
+
++allow mysqld_t self:netlink_route_socket r_netlink_socket_perms;
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/named.te policy-1.17.30/domains/program/unused/named.te
--- nsapolicy/domains/program/unused/named.te 2004-10-09 21:07:28.000000000 -0400
+++ policy-1.17.30/domains/program/unused/named.te 2005-06-10 06:52:30.000000000 -0400
More information about the fedora-cvs-commits
mailing list