rpms/selinux-policy-targeted/devel policy-20050916.patch,1.18,1.19
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Thu Oct 13 14:12:57 UTC 2005
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy-targeted/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv24728
Modified Files:
policy-20050916.patch
Log Message:
* Thu Oct 13 2005 Dan Walsh <dwalsh at redhat.com> 1.27.1-16
- Apply Russells fixes
policy-20050916.patch:
Makefile | 26 ++--
attrib.te | 35 ++++++
domains/misc/kernel.te | 2
domains/program/crond.te | 2
domains/program/fsadm.te | 7 -
domains/program/hostname.te | 2
domains/program/ifconfig.te | 5
domains/program/initrc.te | 17 +++
domains/program/ldconfig.te | 3
domains/program/load_policy.te | 7 -
domains/program/login.te | 21 ++-
domains/program/modutil.te | 14 +-
domains/program/mount.te | 6 -
domains/program/netutils.te | 3
domains/program/newrole.te | 4
domains/program/passwd.te | 1
domains/program/restorecon.te | 3
domains/program/setfiles.te | 4
domains/program/ssh.te | 6 -
domains/program/su.te | 9 +
domains/program/syslogd.te | 6 -
domains/program/unused/NetworkManager.te | 3
domains/program/unused/alsa.te | 2
domains/program/unused/amanda.te | 74 +++-----------
domains/program/unused/anaconda.te | 5
domains/program/unused/apache.te | 17 +--
domains/program/unused/apmd.te | 13 ++
domains/program/unused/auditd.te | 2
domains/program/unused/automount.te | 4
domains/program/unused/bluetooth.te | 72 +++++++++++++
domains/program/unused/cups.te | 18 ++-
domains/program/unused/cvs.te | 3
domains/program/unused/cyrus.te | 2
domains/program/unused/dbusd.te | 4
domains/program/unused/dcc.te | 5
domains/program/unused/dhcpc.te | 5
domains/program/unused/dhcpd.te | 3
domains/program/unused/dovecot.te | 4
domains/program/unused/ftpd.te | 6 -
domains/program/unused/hald.te | 5
domains/program/unused/hotplug.te | 5
domains/program/unused/hwclock.te | 2
domains/program/unused/ipsec.te | 2
domains/program/unused/kudzu.te | 5
domains/program/unused/mta.te | 8 +
domains/program/unused/mysqld.te | 6 -
domains/program/unused/named.te | 29 ++++-
domains/program/unused/nscd.te | 1
domains/program/unused/ntpd.te | 10 -
domains/program/unused/openct.te | 16 +++
domains/program/unused/pamconsole.te | 2
domains/program/unused/pegasus.te | 37 +++++++
domains/program/unused/ping.te | 3
domains/program/unused/postfix.te | 30 +++--
domains/program/unused/pppd.te | 8 -
domains/program/unused/procmail.te | 11 +-
domains/program/unused/readahead.te | 21 +++
domains/program/unused/rlogind.te | 4
domains/program/unused/roundup.te | 29 +++++
domains/program/unused/rpcd.te | 13 ++
domains/program/unused/rsync.te | 3
domains/program/unused/samba.te | 12 +-
domains/program/unused/snmpd.te | 6 -
domains/program/unused/squid.te | 3
domains/program/unused/udev.te | 10 +
domains/program/unused/utempter.te | 2
domains/program/unused/webalizer.te | 3
domains/program/unused/winbind.te | 1
domains/program/unused/xdm.te | 3
domains/program/unused/yppasswdd.te | 40 +++++++
domains/program/unused/ypserv.te | 1
domains/program/useradd.te | 5
file_contexts/distros.fc | 2
file_contexts/program/bluetooth.fc | 3
file_contexts/program/dhcpc.fc | 2
file_contexts/program/dhcpd.fc | 1
file_contexts/program/ftpd.fc | 5
file_contexts/program/games.fc | 11 +-
file_contexts/program/ipsec.fc | 1
file_contexts/program/openct.fc | 2
file_contexts/program/pegasus.fc | 11 ++
file_contexts/program/pppd.fc | 2
file_contexts/program/readahead.fc | 1
file_contexts/program/roundup.fc | 2
file_contexts/program/rpm.fc | 4
file_contexts/program/rshd.fc | 1
file_contexts/program/rsync.fc | 2
file_contexts/program/xdm.fc | 2
file_contexts/program/yppasswdd.fc | 2
file_contexts/program/ypserv.fc | 1
file_contexts/types.fc | 2
genfs_contexts | 2
macros/base_user_macros.te | 6 +
macros/core_macros.te | 3
macros/global_macros.te | 18 ++-
macros/network_macros.te | 17 +++
macros/program/apache_macros.te | 13 ++
macros/program/cdrecord_macros.te | 2
macros/program/i18n_input_macros.te | 21 +++
macros/program/mta_macros.te | 4
macros/program/newrole_macros.te | 2
macros/program/pyzor_macros.te | 2
macros/program/razor_macros.te | 2
macros/program/su_macros.te | 4
macros/program/uml_macros.te | 2
macros/user_macros.te | 2
man/man8/ftpd_selinux.8 | 19 +--
man/man8/httpd_selinux.8 | 9 +
man/man8/rsync_selinux.8 | 12 +-
man/man8/samba_selinux.8 | 9 +
mcs | 146 +++++++++++++++++++++++++++
mls | 163 ++++++++++++++++++++++++++++---
net_contexts | 6 +
targeted/appconfig/root_default_contexts | 4
targeted/assert.te | 2
targeted/domains/program/ssh.te | 3
targeted/domains/program/xdm.te | 4
targeted/domains/unconfined.te | 16 ++-
tunables/distro.tun | 2
tunables/tunable.tun | 4
types/devpts.te | 4
types/file.te | 15 ++
types/network.te | 12 +-
types/security.te | 5
124 files changed, 1098 insertions(+), 255 deletions(-)
Index: policy-20050916.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/devel/policy-20050916.patch,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -r1.18 -r1.19
--- policy-20050916.patch 13 Oct 2005 13:45:33 -0000 1.18
+++ policy-20050916.patch 13 Oct 2005 14:12:51 -0000 1.19
@@ -1,7 +1,7 @@
diff --exclude-from=exclude -N -u -r nsapolicy/attrib.te policy-1.27.1/attrib.te
--- nsapolicy/attrib.te 2005-09-16 11:17:08.000000000 -0400
-+++ policy-1.27.1/attrib.te 2005-10-13 09:30:54.000000000 -0400
-@@ -17,17 +17,48 @@
++++ policy-1.27.1/attrib.te 2005-10-13 10:06:10.000000000 -0400
+@@ -17,17 +17,49 @@
# Attributes for MLS:
#
@@ -34,10 +34,10 @@
+# Read network data with a lower effective classification than the effective
+# clearance of the process
attribute mlsnetread;
--attribute mlsnetreadtoclr;
+
+# Read network data with a lower effective classification than the effective
-+# clearance of the process when the classification of the process is higherattribute mlsnetreadtoclr;
++# clearance of the process when the classification of the process is higher
+ attribute mlsnetreadtoclr;
+
+# Write network data with a higher effective classification or with a
+# classification higher than the clearance of the subject
@@ -51,7 +51,7 @@
attribute mlsnetupgrade;
attribute mlsnetdowngrade;
attribute mlsnetrecvall;
-@@ -443,6 +474,9 @@
+@@ -443,6 +475,9 @@
# Attribute to designate unrestricted access
attribute unrestricted;
@@ -787,7 +787,7 @@
+
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/bluetooth.te policy-1.27.1/domains/program/unused/bluetooth.te
--- nsapolicy/domains/program/unused/bluetooth.te 2005-09-16 11:17:08.000000000 -0400
-+++ policy-1.27.1/domains/program/unused/bluetooth.te 2005-10-12 14:29:26.000000000 -0400
++++ policy-1.27.1/domains/program/unused/bluetooth.te 2005-10-13 10:09:51.000000000 -0400
@@ -11,16 +11,23 @@
daemon_domain(bluetooth)
@@ -821,7 +821,7 @@
# Read /etc/bluetooth
allow bluetooth_t bluetooth_conf_t:dir search;
-@@ -44,5 +52,63 @@
+@@ -44,5 +52,65 @@
allow bluetooth_t usbfs_t:dir r_dir_perms;
allow bluetooth_t usbfs_t:file rw_file_perms;
allow bluetooth_t bin_t:dir search;
@@ -879,13 +879,15 @@
+allow bluetooth_helper_t self:unix_dgram_socket create_socket_perms;
+allow bluetooth_helper_t self:unix_stream_socket connectto;
+tmp_domain(bluetooth_helper)
-+allow bluetooth_helper_t urandom_device_t:chr_file r_dir_perms;
++allow bluetooth_helper_t urandom_device_t:chr_file r_file_perms;
+
+dontaudit bluetooth_helper_t default_t:dir { read search };
+dontaudit bluetooth_helper_t { devtty_t ttyfile }:chr_file { read write };
+dontaudit bluetooth_helper_t home_dir_type:dir r_dir_perms;
++ifdef(`xserver.te', `
+allow bluetooth_helper_t xserver_log_t:dir search;
+allow bluetooth_helper_t xserver_log_t:file { getattr read };
++')
diff --exclude-from=exclude -N -u -r nsapolicy/domains/program/unused/cups.te policy-1.27.1/domains/program/unused/cups.te
--- nsapolicy/domains/program/unused/cups.te 2005-09-16 11:17:08.000000000 -0400
+++ policy-1.27.1/domains/program/unused/cups.te 2005-10-05 10:04:29.000000000 -0400
More information about the fedora-cvs-commits
mailing list