rpms/selinux-policy-targeted/FC-4 policy-20050916.patch, 1.1, 1.2 selinux-policy-targeted.spec, 1.336, 1.337
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Fri Sep 23 21:12:30 UTC 2005
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy-targeted/FC-4
In directory cvs.devel.redhat.com:/tmp/cvs-serv24982
Modified Files:
policy-20050916.patch selinux-policy-targeted.spec
Log Message:
* Wed Sep 23 2005 Dan Walsh <dwalsh at redhat.com> 1.27.1-2.2
- Put back in role sysadm_r unconfined_t;
policy-20050916.patch:
Makefile | 20 ++++++-----
domains/program/fsadm.te | 7 ++--
domains/program/hostname.te | 2 -
domains/program/ifconfig.te | 3 +
domains/program/initrc.te | 17 +++++++++
domains/program/ldconfig.te | 3 +
domains/program/load_policy.te | 7 ++--
domains/program/login.te | 21 ++++++++----
domains/program/modutil.te | 14 ++++----
domains/program/mount.te | 5 +-
domains/program/netutils.te | 3 +
domains/program/restorecon.te | 2 -
domains/program/setfiles.te | 2 -
domains/program/ssh.te | 6 ++-
domains/program/su.te | 7 ++++
domains/program/syslogd.te | 2 -
domains/program/unused/NetworkManager.te | 3 +
domains/program/unused/alsa.te | 2 +
domains/program/unused/amanda.te | 53 +++----------------------------
domains/program/unused/anaconda.te | 5 --
domains/program/unused/apache.te | 7 ++--
domains/program/unused/apmd.te | 8 ++++
domains/program/unused/auditd.te | 2 +
domains/program/unused/automount.te | 4 ++
domains/program/unused/bluetooth.te | 17 +++++++++
domains/program/unused/cups.te | 11 +++++-
domains/program/unused/cyrus.te | 2 -
domains/program/unused/dbusd.te | 4 +-
domains/program/unused/dhcpc.te | 4 +-
domains/program/unused/dovecot.te | 4 +-
domains/program/unused/hwclock.te | 2 -
domains/program/unused/ipsec.te | 2 -
domains/program/unused/kudzu.te | 2 -
domains/program/unused/mta.te | 8 ++++
domains/program/unused/mysqld.te | 6 +--
domains/program/unused/named.te | 10 ++++-
domains/program/unused/ntpd.te | 7 ++--
domains/program/unused/openct.te | 16 +++++++++
domains/program/unused/pamconsole.te | 2 +
domains/program/unused/pegasus.te | 31 ++++++++++++++++++
domains/program/unused/ping.te | 3 +
domains/program/unused/postfix.te | 8 +++-
domains/program/unused/pppd.te | 5 +-
domains/program/unused/procmail.te | 11 +++++-
domains/program/unused/readahead.te | 21 ++++++++++++
domains/program/unused/rlogind.te | 4 +-
domains/program/unused/roundup.te | 29 ++++++++++++++++
domains/program/unused/rpcd.te | 12 ++++++-
domains/program/unused/samba.te | 11 +++++-
domains/program/unused/snmpd.te | 5 +-
domains/program/unused/squid.te | 3 +
domains/program/unused/udev.te | 6 +++
domains/program/unused/utempter.te | 2 +
domains/program/unused/winbind.te | 1
domains/program/unused/xdm.te | 3 +
domains/program/unused/ypserv.te | 1
domains/program/useradd.te | 5 ++
file_contexts/distros.fc | 1
file_contexts/program/backup.fc | 2 -
file_contexts/program/bluetooth.fc | 1
file_contexts/program/dhcpc.fc | 1
file_contexts/program/ipsec.fc | 1
file_contexts/program/openct.fc | 2 +
file_contexts/program/pegasus.fc | 11 ++++++
file_contexts/program/pppd.fc | 2 -
file_contexts/program/readahead.fc | 1
file_contexts/program/roundup.fc | 2 +
file_contexts/program/rpm.fc | 4 ++
file_contexts/program/xdm.fc | 2 -
file_contexts/program/ypserv.fc | 1
genfs_contexts | 2 -
macros/core_macros.te | 3 +
macros/global_macros.te | 8 +++-
macros/network_macros.te | 17 +++++++++
macros/program/apache_macros.te | 13 ++++++-
macros/program/cdrecord_macros.te | 2 -
macros/program/i18n_input_macros.te | 21 ++++++++++++
macros/program/mta_macros.te | 4 +-
macros/program/newrole_macros.te | 2 +
macros/program/pyzor_macros.te | 2 -
macros/program/razor_macros.te | 2 -
macros/program/su_macros.te | 2 -
macros/program/uml_macros.te | 2 -
macros/user_macros.te | 1
mcs | 16 ++++++++-
net_contexts | 6 +++
policy-1.27.1/domains/program/crond.te | 2 -
targeted/appconfig/root_default_contexts | 4 ++
targeted/domains/program/ssh.te | 3 +
targeted/domains/program/xdm.te | 4 ++
targeted/domains/unconfined.te | 15 ++++++++
tunables/distro.tun | 2 -
tunables/tunable.tun | 4 +-
types/file.te | 6 ++-
types/network.te | 2 +
types/security.te | 4 ++
96 files changed, 494 insertions(+), 149 deletions(-)
Index: policy-20050916.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-4/policy-20050916.patch,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- policy-20050916.patch 19 Sep 2005 14:41:57 -0000 1.1
+++ policy-20050916.patch 23 Sep 2005 21:12:26 -0000 1.2
@@ -1735,23 +1735,6 @@
+')
--- nsapolicy/targeted/domains/unconfined.te 2005-09-12 16:40:26.000000000 -0400
+++ policy-1.27.1/targeted/domains/unconfined.te 2005-09-19 10:30:53.000000000 -0400
-@@ -7,15 +7,15 @@
- type unconfined_t, domain, privuser, privhome, privrole, privowner, admin, auth_write, fs_domain, privmem;
- role system_r types unconfined_t;
- role user_r types unconfined_t;
--role sysadm_r types unconfined_t;
- unconfined_domain(unconfined_t)
- allow domain unconfined_t:fd use;
- allow domain unconfined_t:process sigchld;
-
- # Define some type aliases to help with compatibility with
- # macros and domains from the "strict" policy.
- typealias bin_t alias su_exec_t;
- typealias unconfined_t alias { logrotate_t sendmail_t sshd_t secadm_t sysadm_t rpm_t rpm_script_t xdm_t };
-+
- typeattribute tty_device_t admin_tty_type;
- typeattribute devpts_t admin_tty_type;
-
@@ -63,6 +63,7 @@
bool use_samba_home_dirs false;
Index: selinux-policy-targeted.spec
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-4/selinux-policy-targeted.spec,v
retrieving revision 1.336
retrieving revision 1.337
diff -u -r1.336 -r1.337
--- selinux-policy-targeted.spec 19 Sep 2005 14:45:56 -0000 1.336
+++ selinux-policy-targeted.spec 23 Sep 2005 21:12:26 -0000 1.337
@@ -9,7 +9,7 @@
Summary: SELinux %{type} policy configuration
Name: selinux-policy-%{type}
Version: 1.27.1
-Release: 2.1
+Release: 2.2
License: GPL
Group: System Environment/Base
Source: http://www.nsa.gov/selinux/archives/policy-%{version}.tgz
@@ -235,6 +235,12 @@
exit 0
%changelog
+* Wed Sep 23 2005 Dan Walsh <dwalsh at redhat.com> 1.27.1-2.2
+- Put back in role sysadm_r unconfined_t;
+
+* Mon Sep 19 2005 Dan Walsh <dwalsh at redhat.com> 1.27.1-2.1
+- Update to match rawhide
+
* Wed Sep 7 2005 Dan Walsh <dwalsh at redhat.com> 1.25.4-10.1
- Fix roundup policy
- Fixes for bluetooth
More information about the fedora-cvs-commits
mailing list