rpms/selinux-policy/devel policy-20061106.patch,1.18,1.19
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Wed Nov 15 22:33:10 UTC 2006
Author: dwalsh
Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv24089
Modified Files:
policy-20061106.patch
Log Message:
* Wed Nov 15 2006 Dan Walsh <dwalsh at redhat.com> 2.4.4-3
- Fixes for nvidia driver
policy-20061106.patch:
Rules.modular | 10
policy/flask/access_vectors | 2
policy/global_tunables | 36 ++
policy/modules/admin/acct.te | 1
policy/modules/admin/amanda.te | 1
policy/modules/admin/consoletype.te | 8
policy/modules/admin/dmesg.te | 1
policy/modules/admin/logwatch.te | 1
policy/modules/admin/netutils.te | 2
policy/modules/admin/prelink.te | 5
policy/modules/admin/rpm.fc | 3
policy/modules/admin/rpm.if | 24 +
policy/modules/admin/rpm.te | 37 --
policy/modules/apps/java.fc | 2
policy/modules/kernel/corecommands.if | 17 +
policy/modules/kernel/corenetwork.if.in | 12
policy/modules/kernel/corenetwork.te.in | 19 +
policy/modules/kernel/corenetwork.te.m4 | 4
policy/modules/kernel/devices.fc | 5
policy/modules/kernel/devices.te | 6
policy/modules/kernel/domain.te | 7
policy/modules/kernel/files.if | 66 ++++
policy/modules/kernel/filesystem.te | 6
policy/modules/kernel/terminal.fc | 1
policy/modules/kernel/terminal.te | 1
policy/modules/services/aide.fc | 3
policy/modules/services/aide.if | 56 +++
policy/modules/services/aide.te | 52 +++
policy/modules/services/apache.fc | 10
policy/modules/services/apache.te | 16 -
policy/modules/services/automount.te | 1
policy/modules/services/ccs.fc | 10
policy/modules/services/ccs.if | 83 +++++
policy/modules/services/ccs.te | 96 ++++++
policy/modules/services/cron.if | 26 -
policy/modules/services/cron.te | 5
policy/modules/services/cups.fc | 2
policy/modules/services/cups.te | 4
policy/modules/services/cvs.te | 1
policy/modules/services/dbus.fc | 1
policy/modules/services/dbus.if | 1
policy/modules/services/hal.fc | 4
policy/modules/services/hal.te | 8
policy/modules/services/kerberos.if | 1
policy/modules/services/kerberos.te | 11
policy/modules/services/lpd.if | 52 +--
policy/modules/services/mta.if | 1
policy/modules/services/mta.te | 1
policy/modules/services/nscd.if | 20 +
policy/modules/services/nscd.te | 3
policy/modules/services/oddjob.te | 3
policy/modules/services/pegasus.if | 31 ++
policy/modules/services/pegasus.te | 5
policy/modules/services/postfix.te | 5
policy/modules/services/procmail.te | 16 +
policy/modules/services/ricci.fc | 20 +
policy/modules/services/ricci.if | 222 ++++++++++++++
policy/modules/services/ricci.te | 490 ++++++++++++++++++++++++++++++++
policy/modules/services/rsync.te | 1
policy/modules/services/samba.if | 2
policy/modules/services/samba.te | 6
policy/modules/services/sasl.te | 2
policy/modules/services/snmp.te | 1
policy/modules/services/spamassassin.te | 4
policy/modules/services/squid.te | 7
policy/modules/services/ssh.te | 2
policy/modules/services/telnet.te | 1
policy/modules/services/tftp.te | 2
policy/modules/services/xserver.if | 40 ++
policy/modules/system/authlogin.if | 2
policy/modules/system/authlogin.te | 2
policy/modules/system/clock.te | 1
policy/modules/system/fstools.fc | 1
policy/modules/system/fstools.te | 2
policy/modules/system/getty.te | 3
policy/modules/system/hostname.te | 6
policy/modules/system/init.fc | 3
policy/modules/system/init.te | 14
policy/modules/system/iscsi.if | 2
policy/modules/system/libraries.fc | 13
policy/modules/system/libraries.te | 6
policy/modules/system/locallogin.if | 37 ++
policy/modules/system/logging.te | 1
policy/modules/system/lvm.fc | 1
policy/modules/system/lvm.te | 48 ++-
policy/modules/system/miscfiles.fc | 1
policy/modules/system/modutils.te | 5
policy/modules/system/mount.te | 19 -
policy/modules/system/raid.te | 7
policy/modules/system/selinuxutil.if | 4
policy/modules/system/selinuxutil.te | 34 +-
policy/modules/system/unconfined.fc | 4
policy/modules/system/unconfined.if | 19 +
policy/modules/system/unconfined.te | 11
policy/modules/system/userdomain.if | 237 +++++++++++++--
policy/modules/system/userdomain.te | 10
policy/modules/system/xen.fc | 1
policy/modules/system/xen.te | 29 +
98 files changed, 1937 insertions(+), 191 deletions(-)
Index: policy-20061106.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20061106.patch,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -r1.18 -r1.19
--- policy-20061106.patch 15 Nov 2006 22:28:06 -0000 1.18
+++ policy-20061106.patch 15 Nov 2006 22:33:08 -0000 1.19
@@ -3132,7 +3132,7 @@
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/selinuxutil.te serefpolicy-2.4.4/policy/modules/system/selinuxutil.te
--- nsaserefpolicy/policy/modules/system/selinuxutil.te 2006-11-14 13:51:46.000000000 -0500
-+++ serefpolicy-2.4.4/policy/modules/system/selinuxutil.te 2006-11-15 15:54:14.000000000 -0500
++++ serefpolicy-2.4.4/policy/modules/system/selinuxutil.te 2006-11-15 17:32:39.000000000 -0500
@@ -107,6 +107,11 @@
type semanage_exec_t;
domain_entry_file(semanage_t, semanage_exec_t)
@@ -3182,12 +3182,15 @@
allow semanage_t policy_config_t:file { read write };
-@@ -568,10 +570,16 @@
+@@ -568,10 +570,19 @@
corecmd_exec_bin(semanage_t)
corecmd_exec_sbin(semanage_t)
+corecmd_exec_shell(semanage_t)
-+consoletype_exec(semanage_t)
++
++optional_policy(`
++ consoletype_exec(semanage_t)
++')
+
+init_exec_script_files(semanage_t)
+init_dontaudit_use_script_ptys(semanage_t)
@@ -3199,7 +3202,7 @@
files_read_etc_files(semanage_t)
files_read_etc_runtime_files(semanage_t)
-@@ -586,7 +594,6 @@
+@@ -586,7 +597,6 @@
selinux_get_enforce_mode(semanage_t)
# for setsebool:
selinux_set_boolean(semanage_t)
@@ -3207,7 +3210,7 @@
term_use_all_terms(semanage_t)
# Running genhomedircon requires this for finding all users
-@@ -617,13 +624,10 @@
+@@ -617,13 +627,10 @@
userdom_search_sysadm_home_dirs(semanage_t)
@@ -3224,7 +3227,7 @@
')
########################################
-@@ -672,6 +676,7 @@
+@@ -672,6 +679,7 @@
init_use_fds(setfiles_t)
init_use_script_fds(setfiles_t)
init_use_script_ptys(setfiles_t)
More information about the fedora-cvs-commits
mailing list