[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

rpms/selinux-policy-targeted/FC-3 policy-20050104.patch, 1.48, 1.49 selinux-policy-targeted.spec, 1.216, 1.217



Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy-targeted/FC-3
In directory cvs.devel.redhat.com:/tmp/cvs-serv14567

Modified Files:
	policy-20050104.patch selinux-policy-targeted.spec 
Log Message:
* Sat Jun 25 2005 Dan Walsh <dwalsh redhat com> 1.17.30-3.15
- Fix /opt definition


policy-20050104.patch:
 Makefile                              |   50 +++--
 attrib.te                             |   29 +++
 domains/admin.te                      |    2 
 domains/program/crond.te              |    7 
 domains/program/ldconfig.te           |   24 ++
 domains/program/login.te              |    2 
 domains/program/logrotate.te          |   24 +-
 domains/program/mount.te              |    2 
 domains/program/ssh.te                |    7 
 domains/program/syslogd.te            |   40 ++--
 domains/program/unused/acct.te        |    6 
 domains/program/unused/apache.te      |  307 ++++++++++++++++++++++------------
 domains/program/unused/arpwatch.te    |   26 ++
 domains/program/unused/cups.te        |   58 +++++-
 domains/program/unused/dhcpc.te       |    5 
 domains/program/unused/dhcpd.te       |   24 +-
 domains/program/unused/dovecot.te     |    3 
 domains/program/unused/ftpd.te        |    2 
 domains/program/unused/hald.te        |    3 
 domains/program/unused/howl.te        |    2 
 domains/program/unused/innd.te        |    7 
 domains/program/unused/ipsec.te       |    9 
 domains/program/unused/iptables.te    |    3 
 domains/program/unused/mailman.te     |   29 ++-
 domains/program/unused/mdadm.te       |    3 
 domains/program/unused/mta.te         |   25 ++
 domains/program/unused/mysqld.te      |   29 +--
 domains/program/unused/named.te       |   39 ++--
 domains/program/unused/nscd.te        |   63 +++---
 domains/program/unused/ntpd.te        |   27 ++
 domains/program/unused/portmap.te     |   21 ++
 domains/program/unused/postfix.te     |    2 
 domains/program/unused/postgresql.te  |   62 +++++-
 domains/program/unused/procmail.te    |    1 
 domains/program/unused/pxe.te         |    1 
 domains/program/unused/rpcd.te        |    2 
 domains/program/unused/rpm.te         |    5 
 domains/program/unused/rsync.te       |    2 
 domains/program/unused/samba.te       |    4 
 domains/program/unused/sendmail.te    |    2 
 domains/program/unused/slrnpull.te    |    1 
 domains/program/unused/snmpd.te       |   31 ++-
 domains/program/unused/spamd.te       |    2 
 domains/program/unused/squid.te       |   30 ++-
 domains/program/unused/udev.te        |    5 
 domains/program/unused/updfstab.te    |    1 
 domains/program/unused/winbind.te     |   35 +++
 domains/program/unused/xdm.te         |    4 
 domains/program/unused/ypbind.te      |   15 -
 domains/program/unused/ypserv.te      |    7 
 domains/user.te                       |    6 
 file_contexts/distros.fc              |  174 +++++++++++++++++--
 file_contexts/program/apache.fc       |   24 ++
 file_contexts/program/arpwatch.fc     |    3 
 file_contexts/program/cups.fc         |    5 
 file_contexts/program/dhcpd.fc        |   25 ++
 file_contexts/program/ipsec.fc        |   11 -
 file_contexts/program/mailman.fc      |   15 -
 file_contexts/program/mta.fc          |    5 
 file_contexts/program/mysqld.fc       |    4 
 file_contexts/program/named.fc        |   18 +
 file_contexts/program/nscd.fc         |    3 
 file_contexts/program/ntpd.fc         |   10 -
 file_contexts/program/portmap.fc      |    9 
 file_contexts/program/postgresql.fc   |   23 --
 file_contexts/program/sendmail.fc     |    1 
 file_contexts/program/snmpd.fc        |    4 
 file_contexts/program/squid.fc        |    2 
 file_contexts/program/syslogd.fc      |    3 
 file_contexts/program/winbind.fc      |   10 +
 file_contexts/types.fc                |  213 ++++++++++-------------
 flask/access_vectors                  |   31 +++
 flask/security_classes                |    6 
 genfs_contexts                        |    2 
 macros/base_user_macros.te            |    9 
 macros/core_macros.te                 |   98 +++++++---
 macros/global_macros.te               |   95 +++-------
 macros/network_macros.te              |  172 +++++++++++++++++++
 macros/program/apache_macros.te       |  144 ++++++++-------
 macros/program/kerberos_macros.te     |   11 +
 macros/program/mount_macros.te        |    2 
 macros/program/mozilla_macros.te      |    2 
 macros/program/mta_macros.te          |    5 
 macros/program/newrole_macros.te      |    2 
 macros/program/spamassassin_macros.te |    5 
 macros/program/ssh_agent_macros.te    |    2 
 macros/program/ssh_macros.te          |    2 
 macros/program/su_macros.te           |    2 
 macros/program/userhelper_macros.te   |    3 
 macros/program/xauth_macros.te        |    2 
 macros/program/xserver_macros.te      |    4 
 macros/program/ypbind_macros.te       |   24 --
 man/man8/httpd_selinux.8              |  114 ++++++++++++
 man/man8/named_selinux.8              |   29 +++
 net_contexts                          |  103 ++++++++---
 targeted/assert.te                    |    6 
 targeted/domains/program/hotplug.te   |    4 
 targeted/domains/program/initrc.te    |    2 
 targeted/domains/program/sendmail.te  |   17 +
 targeted/domains/unconfined.te        |   55 +++++-
 targeted/types/apache.te              |    5 
 tunables/distro.tun                   |    2 
 tunables/tunable.tun                  |   21 --
 types/device.te                       |    9 
 types/file.te                         |   91 ++++++----
 types/network.te                      |   58 ++++--
 types/procfs.te                       |    4 
 107 files changed, 1975 insertions(+), 826 deletions(-)

Index: policy-20050104.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-3/policy-20050104.patch,v
retrieving revision 1.48
retrieving revision 1.49
diff -u -r1.48 -r1.49
--- policy-20050104.patch	25 Jun 2005 20:12:57 -0000	1.48
+++ policy-20050104.patch	25 Jun 2005 21:11:50 -0000	1.49
@@ -2840,7 +2840,7 @@
 +/var/cache/samba/winbindd_privileged(/.*)?	system_u:object_r:winbind_var_run_t
 diff --exclude-from=exclude -N -u -r nsapolicy/file_contexts/types.fc policy-1.17.30/file_contexts/types.fc
 --- nsapolicy/file_contexts/types.fc	2004-10-09 21:07:28.000000000 -0400
-+++ policy-1.17.30/file_contexts/types.fc	2005-06-14 12:47:11.000000000 -0400
++++ policy-1.17.30/file_contexts/types.fc	2005-06-25 17:08:05.000000000 -0400
 @@ -54,11 +54,11 @@
  HOME_DIR		-d	system_u:object_r:ROLE_home_dir_t
  HOME_DIR/.+			system_u:object_r:ROLE_home_t
@@ -2913,7 +2913,7 @@
  /u?dev/(radio|video|vbi|vtx).* -c	system_u:object_r:v4l_device_t
  /u?dev/winradio.	-c	system_u:object_r:v4l_device_t
  /u?dev/vttuner		-c	system_u:object_r:v4l_device_t
-@@ -243,30 +249,41 @@
+@@ -243,30 +249,42 @@
  /u?dev/dri/.+		-c	system_u:object_r:dri_device_t
  /u?dev/radeon		-c	system_u:object_r:dri_device_t
  /u?dev/agpgart		-c	system_u:object_r:agp_device_t
@@ -2937,13 +2937,14 @@
 -/opt/.*/lib/.*\.so	--	system_u:object_r:shlib_t
 -/opt/[^/]*/man(/.*)?		system_u:object_r:man_t
 -/opt/[^/]*/libexec(/.*)?	system_u:object_r:bin_t
-+/opt/.*/lib(64)?(/.*)?				system_u:object_r:lib_t
-+/opt/.*/.*\.so(\.[^/]*)*	--	system_u:object_r:shlib_t
-+/opt/.*/libexec(/.*)?	system_u:object_r:bin_t
-+/opt/.*/bin(/.*)?		system_u:object_r:bin_t
-+/opt/.*/sbin(/.*)?		system_u:object_r:sbin_t
-+/opt/.*/man(/.*)?		system_u:object_r:man_t
-+/opt/.*/var/lib(64)?(/.*)?		system_u:object_r:var_lib_t
++/opt(/.*)?/lib(64)?(/.*)?	system_u:object_r:lib_t
++/opt(/.*)?/.*\.so(\.[^/]*)*	--	system_u:object_r:shlib_t
++/opt(/.*)?/libexec(/.*)?	system_u:object_r:bin_t
++/opt(/.*)?/bin(/.*)?		system_u:object_r:bin_t
++/opt(/.*)?/sbin(/.*)?		system_u:object_r:sbin_t
++/opt(/.*)?/man(/.*)?		system_u:object_r:man_t
++/opt(/.*)?/var/lib(64)?(/.*)?		system_u:object_r:var_lib_t
++
  
  #
  # /etc
@@ -2963,7 +2964,7 @@
  /etc/HOSTNAME		--	system_u:object_r:etc_runtime_t
  /etc/ioctl\.save	--	system_u:object_r:etc_runtime_t
  /etc/mtab		--	system_u:object_r:etc_runtime_t
-@@ -274,7 +291,7 @@
+@@ -274,7 +292,7 @@
  /etc/issue		--	system_u:object_r:etc_runtime_t
  /etc/issue\.net		--	system_u:object_r:etc_runtime_t
  /etc/sysconfig/hwconf	--	system_u:object_r:etc_runtime_t
@@ -2972,7 +2973,7 @@
  /etc/sysconfig/firstboot --	system_u:object_r:etc_runtime_t
  /etc/asound\.state	--	system_u:object_r:etc_runtime_t
  /etc/ptal/ptal-printd-like -- 	system_u:object_r:etc_runtime_t
-@@ -289,31 +306,17 @@
+@@ -289,31 +307,17 @@
  /etc/resolv\.conf.*	--	system_u:object_r:net_conf_t
  
  /etc/selinux(/.*)?		system_u:object_r:selinux_config_t
@@ -3011,7 +3012,7 @@
  
  #
  # /sbin
-@@ -330,114 +333,66 @@
+@@ -330,114 +334,66 @@
  # /usr
  #
  /usr(/.*)?			system_u:object_r:usr_t
@@ -3157,7 +3158,7 @@
  # Fonts dir
  #
  /usr/X11R6/lib/X11/fonts(/.*)?		system_u:object_r:fonts_t
-@@ -445,6 +400,7 @@
+@@ -445,6 +401,7 @@
  /var/lib/msttcorefonts(/.*)?		system_u:object_r:fonts_t
  ')
  /usr/share/fonts(/.*)?			system_u:object_r:fonts_t
@@ -3165,7 +3166,7 @@
  /usr/local/share/fonts(/.*)?		system_u:object_r:fonts_t
  
  #
-@@ -458,6 +414,7 @@
+@@ -458,6 +415,7 @@
  #
  /var/spool(/.*)?		system_u:object_r:var_spool_t
  /var/spool/texmf(/.*)?		system_u:object_r:tetex_data_t
@@ -3173,7 +3174,7 @@
  
  # 
  # /var/log
-@@ -510,20 +467,31 @@
+@@ -510,20 +468,31 @@
  /usr/share/gnucash/finance-quote-helper -- system_u:object_r:bin_t
  
  #


Index: selinux-policy-targeted.spec
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-3/selinux-policy-targeted.spec,v
retrieving revision 1.216
retrieving revision 1.217
diff -u -r1.216 -r1.217
--- selinux-policy-targeted.spec	25 Jun 2005 20:12:57 -0000	1.216
+++ selinux-policy-targeted.spec	25 Jun 2005 21:11:50 -0000	1.217
@@ -8,7 +8,7 @@
 Summary: SELinux %{type} policy configuration
 Name: selinux-policy-%{type}
 Version: 1.17.30
-Release: 3.14
+Release: 3.15
 License: GPL
 Group: System Environment/Base
 Source: http://www.nsa.gov/selinux/archives/policy-%{version}.tgz
@@ -214,6 +214,9 @@
 exit 0
 
 %changelog
+* Sat Jun 25 2005 Dan Walsh <dwalsh redhat com> 1.17.30-3.15
+- Fix /opt definition
+
 * Fri Jun 17 2005 Dan Walsh <dwalsh redhat com> 1.17.30-3.14
 - Fix shlib defs
 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]