rpms/selinux-policy/devel policy-20060915.patch, 1.13, 1.14 selinux-policy.spec, 1.293, 1.294

fedora-cvs-commits at redhat.com fedora-cvs-commits at redhat.com
Tue Sep 26 20:41:38 UTC 2006


Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv32108

Modified Files:
	policy-20060915.patch selinux-policy.spec 
Log Message:
* Mon Sep 25 2006 Dan Walsh <dwalsh at redhat.com> 2.3.16-2
- Allow java execheap for itanium


policy-20060915.patch:
 Rules.modular                                |   10 
 config/appconfig-strict-mcs/seusers          |    3 
 config/appconfig-strict-mls/initrc_context   |    2 
 config/appconfig-strict-mls/seusers          |    3 
 config/appconfig-strict/seusers              |    1 
 config/appconfig-targeted-mcs/seusers        |    3 
 config/appconfig-targeted-mls/initrc_context |    2 
 config/appconfig-targeted-mls/seusers        |    3 
 config/appconfig-targeted/seusers            |    1 
 policy/mcs                                   |    6 
 policy/mls                                   |   36 +-
 policy/modules/admin/bootloader.fc           |    1 
 policy/modules/admin/bootloader.te           |    7 
 policy/modules/admin/consoletype.te          |    7 
 policy/modules/admin/prelink.if              |    2 
 policy/modules/admin/readahead.te            |    1 
 policy/modules/admin/rpm.fc                  |    2 
 policy/modules/apps/java.fc                  |    2 
 policy/modules/apps/java.te                  |    2 
 policy/modules/apps/slocate.te               |    1 
 policy/modules/kernel/corenetwork.te.in      |   13 
 policy/modules/kernel/devices.fc             |    8 
 policy/modules/kernel/devices.if             |   20 +
 policy/modules/kernel/domain.if              |    4 
 policy/modules/kernel/files.fc               |   27 -
 policy/modules/kernel/files.if               |   20 +
 policy/modules/kernel/filesystem.if          |   22 +
 policy/modules/kernel/kernel.te              |   25 -
 policy/modules/kernel/mcs.te                 |   18 -
 policy/modules/kernel/selinux.te             |    2 
 policy/modules/kernel/storage.fc             |   48 +--
 policy/modules/kernel/storage.if             |    1 
 policy/modules/kernel/terminal.fc            |    2 
 policy/modules/services/apache.fc            |    9 
 policy/modules/services/automount.te         |    4 
 policy/modules/services/ccs.fc               |    8 
 policy/modules/services/ccs.if               |   65 ++++
 policy/modules/services/ccs.te               |   87 ++++++
 policy/modules/services/cron.te              |   19 +
 policy/modules/services/dbus.if              |    1 
 policy/modules/services/lpd.fc               |    9 
 policy/modules/services/nscd.if              |   20 +
 policy/modules/services/oddjob.fc            |    8 
 policy/modules/services/oddjob.if            |   99 ++++++
 policy/modules/services/oddjob.te            |   85 +++++
 policy/modules/services/pegasus.if           |   31 ++
 policy/modules/services/pegasus.te           |    5 
 policy/modules/services/ricci.fc             |   20 +
 policy/modules/services/ricci.if             |  184 ++++++++++++
 policy/modules/services/ricci.te             |  386 +++++++++++++++++++++++++++
 policy/modules/services/sendmail.te          |    1 
 policy/modules/services/setroubleshoot.te    |    2 
 policy/modules/services/smartmon.te          |    3 
 policy/modules/system/hostname.te            |    5 
 policy/modules/system/init.fc                |    3 
 policy/modules/system/init.te                |    5 
 policy/modules/system/iscsi.fc               |    7 
 policy/modules/system/iscsi.if               |   24 +
 policy/modules/system/iscsi.te               |   74 +++++
 policy/modules/system/logging.fc             |    8 
 policy/modules/system/logging.te             |    1 
 policy/modules/system/raid.te                |    2 
 policy/modules/system/selinuxutil.fc         |    6 
 policy/modules/system/setrans.fc             |    2 
 policy/modules/system/unconfined.if          |    1 
 policy/modules/system/userdomain.fc          |    2 
 policy/modules/system/userdomain.if          |    1 
 policy/modules/system/userdomain.te          |    3 
 policy/users                                 |   14 
 69 files changed, 1387 insertions(+), 122 deletions(-)

Index: policy-20060915.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20060915.patch,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- policy-20060915.patch	26 Sep 2006 14:59:58 -0000	1.13
+++ policy-20060915.patch	26 Sep 2006 20:41:35 -0000	1.14
@@ -218,6 +218,18 @@
  
  #
  # /usr
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/java.te serefpolicy-2.3.16/policy/modules/apps/java.te
+--- nsaserefpolicy/policy/modules/apps/java.te	2006-08-29 09:00:26.000000000 -0400
++++ serefpolicy-2.3.16/policy/modules/apps/java.te	2006-09-26 11:29:49.000000000 -0400
+@@ -17,6 +17,8 @@
+ 
+ ifdef(`targeted_policy',`
+ 	allow java_t self:process { execstack execmem };
++	# execheap is needed for itanium/BEA jrocket
++	allow java_t self:process execheap;
+ 	unconfined_domain_noaudit(java_t)
+ 	role system_r types java_t;
+ ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/slocate.te serefpolicy-2.3.16/policy/modules/apps/slocate.te
 --- nsaserefpolicy/policy/modules/apps/slocate.te	2006-07-14 17:04:31.000000000 -0400
 +++ serefpolicy-2.3.16/policy/modules/apps/slocate.te	2006-09-26 09:53:18.000000000 -0400


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.293
retrieving revision 1.294
diff -u -r1.293 -r1.294
--- selinux-policy.spec	26 Sep 2006 14:59:58 -0000	1.293
+++ selinux-policy.spec	26 Sep 2006 20:41:36 -0000	1.294
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 2.3.16
-Release: 1
+Release: 2
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -349,6 +349,9 @@
 %endif
 
 %changelog
+* Mon Sep 25 2006 Dan Walsh <dwalsh at redhat.com> 2.3.16-2
+- Allow java execheap for itanium
+
 * Mon Sep 25 2006 Dan Walsh <dwalsh at redhat.com> 2.3.16-1
 - Update with upstream
 




More information about the fedora-cvs-commits mailing list