rpms/selinux-policy-strict/devel policy-20050606.patch,1.9,1.10
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Thu Jun 16 21:01:13 UTC 2005
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy-strict/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv4098
Modified Files:
policy-20050606.patch
Log Message:
* Thu Jun 16 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-9
- Update Ivan trusted/untrusted patch
- add texrel_shlib_t to targeted
policy-20050606.patch:
Makefile | 14 -
attrib.te | 2
domains/misc/kernel.te | 7
domains/misc/local.te | 5
domains/program/fsadm.te | 5
domains/program/init.te | 4
domains/program/initrc.te | 11 +
domains/program/klogd.te | 2
domains/program/login.te | 2
domains/program/modutil.te | 2
domains/program/mount.te | 4
domains/program/restorecon.te | 5
domains/program/ssh.te | 2
domains/program/syslogd.te | 2
domains/program/unused/NetworkManager.te | 1
domains/program/unused/acct.te | 2
domains/program/unused/alsa.te | 17 ++
domains/program/unused/apache.te | 2
domains/program/unused/bonobo.te | 9 +
domains/program/unused/consoletype.te | 2
domains/program/unused/cups.te | 30 +++
domains/program/unused/dhcpc.te | 5
domains/program/unused/ethereal.te | 48 ++++++
domains/program/unused/evolution.te | 13 +
domains/program/unused/gconf.te | 12 +
domains/program/unused/gift.te | 1
domains/program/unused/gnome.te | 7
domains/program/unused/gnome_vfs.te | 9 +
domains/program/unused/gpg.te | 3
domains/program/unused/i18n_input.te | 1
domains/program/unused/iceauth.te | 12 +
domains/program/unused/mozilla.te | 6
domains/program/unused/mysqld.te | 3
domains/program/unused/orbit.te | 7
domains/program/unused/pam.te | 5
domains/program/unused/pamconsole.te | 2
domains/program/unused/ping.te | 2
domains/program/unused/rpcd.te | 3
domains/program/unused/thunderbird.te | 9 +
domains/program/unused/udev.te | 2
domains/program/unused/utempter.te | 5
domains/program/unused/xdm.te | 22 ++
domains/program/unused/xserver.te | 3
domains/user.te | 14 +
file_contexts/distros.fc | 18 --
file_contexts/program/alsa.fc | 3
file_contexts/program/apache.fc | 2
file_contexts/program/bonobo.fc | 1
file_contexts/program/cups.fc | 3
file_contexts/program/ethereal.fc | 3
file_contexts/program/evolution.fc | 8 +
file_contexts/program/fontconfig.fc | 6
file_contexts/program/gconf.fc | 5
file_contexts/program/gnome.fc | 8 +
file_contexts/program/gnome_vfs.fc | 1
file_contexts/program/iceauth.fc | 3
file_contexts/program/irc.fc | 2
file_contexts/program/mozilla.fc | 4
file_contexts/program/orbit.fc | 3
file_contexts/program/thunderbird.fc | 2
file_contexts/program/xauth.fc | 1
file_contexts/program/xdm.fc | 1
file_contexts/program/xserver.fc | 2
file_contexts/types.fc | 2
macros/admin_macros.te | 12 +
macros/base_user_macros.te | 75 ++++++---
macros/content_macros.te | 185 +++++++++++++++++++++++
macros/global_macros.te | 121 +--------------
macros/home_macros.te | 130 ++++++++++++++++
macros/program/bonobo_macros.te | 119 +++++++++++++++
macros/program/dbusd_macros.te | 3
macros/program/ethereal_macros.te | 83 ++++++++++
macros/program/evolution_macros.te | 241 +++++++++++++++++++++++++++++++
macros/program/fontconfig_macros.te | 38 ++++
macros/program/games_domain.te | 38 +---
macros/program/gconf_macros.te | 56 +++++++
macros/program/gift_macros.te | 60 ++-----
macros/program/gnome_macros.te | 115 ++++++++++++++
macros/program/gnome_vfs_macros.te | 49 ++++++
macros/program/gpg_agent_macros.te | 1
macros/program/gpg_macros.te | 45 -----
macros/program/ice_macros.te | 38 ++++
macros/program/iceauth_macros.te | 40 +++++
macros/program/irc_macros.te | 1
macros/program/lpr_macros.te | 24 ---
macros/program/mail_client_macros.te | 48 ++++++
macros/program/mozilla_macros.te | 131 +++++-----------
macros/program/mplayer_macros.te | 15 +
macros/program/orbit_macros.te | 44 +++++
macros/program/pyzor_macros.te | 1
macros/program/razor_macros.te | 1
macros/program/spamassassin_macros.te | 9 -
macros/program/ssh_agent_macros.te | 3
macros/program/thunderbird_macros.te | 57 +++++++
macros/program/tvtime_macros.te | 1
macros/program/userhelper_macros.te | 3
macros/program/x_client_macros.te | 12 -
macros/program/xauth_macros.te | 1
macros/program/xdm_macros.te | 11 +
macros/program/xserver_macros.te | 17 +-
macros/user_macros.te | 8 -
mls | 41 ++---
net_contexts | 29 ++-
targeted/domains/program/crond.te | 2
targeted/domains/unconfined.te | 10 -
tunables/distro.tun | 2
tunables/tunable.tun | 4
types/device.te | 7
types/devpts.te | 2
types/file.te | 8 +
types/network.te | 8 -
types/security.te | 2
112 files changed, 1818 insertions(+), 535 deletions(-)
Index: policy-20050606.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-strict/devel/policy-20050606.patch,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- policy-20050606.patch 16 Jun 2005 20:23:11 -0000 1.9
+++ policy-20050606.patch 16 Jun 2005 21:01:02 -0000 1.10
@@ -70,7 +70,7 @@
+allow fsadm_t ramfs_t:fifo_file rw_file_perms;
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/initrc.te policy-1.23.18/domains/program/initrc.te
--- nsapolicy/domains/program/initrc.te 2005-05-25 11:28:09.000000000 -0400
-+++ policy-1.23.18/domains/program/initrc.te 2005-06-10 14:11:21.000000000 -0400
++++ policy-1.23.18/domains/program/initrc.te 2005-06-16 16:54:14.000000000 -0400
@@ -12,7 +12,7 @@
# initrc_exec_t is the type of the init program.
#
@@ -95,6 +95,14 @@
# Create runtime files in /etc, e.g. /etc/mtab, /etc/HOSTNAME.
file_type_auto_trans(initrc_t, etc_t, etc_runtime_t, file)
+@@ -253,6 +259,7 @@
+ domain_auto_trans(unconfined_t, initrc_exec_t, initrc_t)
+ allow unconfined_t initrc_t:dbus { acquire_svc send_msg };
+ allow initrc_t unconfined_t:dbus { acquire_svc send_msg };
++typeattribute initrc_t privuser;
+ domain_trans(initrc_t, shell_exec_t, unconfined_t)
+ allow initrc_t unconfined_t:system syslog_mod;
+ ', `
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/init.te policy-1.23.18/domains/program/init.te
--- nsapolicy/domains/program/init.te 2005-05-25 11:28:09.000000000 -0400
+++ policy-1.23.18/domains/program/init.te 2005-06-08 09:04:15.000000000 -0400
@@ -546,6 +554,17 @@
')
+allow mysqld_t self:netlink_route_socket r_netlink_socket_perms;
+diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/NetworkManager.te policy-1.23.18/domains/program/unused/NetworkManager.te
+--- nsapolicy/domains/program/unused/NetworkManager.te 2005-05-02 14:06:54.000000000 -0400
++++ policy-1.23.18/domains/program/unused/NetworkManager.te 2005-06-16 16:55:41.000000000 -0400
+@@ -41,6 +41,7 @@
+ domain_auto_trans(NetworkManager_t, named_exec_t, named_t)
+ allow named_t NetworkManager_t:udp_socket { read write };
+ allow named_t NetworkManager_t:netlink_route_socket { read write };
++allow named_t NetworkManager_t:packet_socket { read write };
+ allow NetworkManager_t named_t:process signal;
+ ')
+
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/orbit.te policy-1.23.18/domains/program/unused/orbit.te
--- nsapolicy/domains/program/unused/orbit.te 1969-12-31 19:00:00.000000000 -0500
+++ policy-1.23.18/domains/program/unused/orbit.te 2005-06-08 09:04:15.000000000 -0400
More information about the fedora-cvs-commits
mailing list