rpms/cyphesis/devel cyphesis.spec,1.15,1.16 cyphesis.te,1.4,1.5

[Michael Thomas (wart)]

Author: wart

Update of /cvs/extras/rpms/cyphesis/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv31187

Modified Files:
	cyphesis.spec cyphesis.te 
Log Message:
Fix selinux contexts so that cyphesis can create its own log files.




Index: cyphesis.spec
===================================================================
RCS file: /cvs/extras/rpms/cyphesis/devel/cyphesis.spec,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- cyphesis.spec	19 Dec 2007 05:18:07 -0000	1.15
+++ cyphesis.spec	21 Dec 2007 16:22:39 -0000	1.16
@@ -7,7 +7,7 @@
 
 Name:           cyphesis
 Version:        0.5.15
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        WorldForge game server
 Group:          System Environment/Libraries
 # Would be GPLv2+, except server/protocol_instructions.h is GPLv2 only.
@@ -232,6 +232,10 @@
 
 
 %changelog
+* Tue Dec 18 2007 Wart <wart at kobold.org> 0.5.15-3
+- Fix selinux permissions so that cyphesis can create its own
+  log file.
+
 * Tue Dec 18 2007 Wart <wart at kobold.org> 0.5.15-2
 - Move log files so they get they get the correct context
 


Index: cyphesis.te
===================================================================
RCS file: /cvs/extras/rpms/cyphesis/devel/cyphesis.te,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- cyphesis.te	19 Dec 2007 05:18:07 -0000	1.4
+++ cyphesis.te	21 Dec 2007 16:22:39 -0000	1.5
@@ -12,6 +12,7 @@
     type initrc_su_t;
     type krb5_conf_t;
     attribute port_type;
+    class process setfscreate;
 ')
 
 type cyphesis_port_t, port_type;
@@ -58,7 +59,7 @@
 # log files
 allow cyphesis_t var_log_t:file create;
 logging_send_syslog_msg(cyphesis_t)
-logging_write_generic_logs(cyphesis_t)
+logging_manage_generic_logs(cyphesis_t)
 
 ## Networking basics (adjust to your needs!)
 sysnet_dns_name_resolve(cyphesis_t)
@@ -94,6 +95,7 @@
 
 kernel_read_kernel_sysctls(cyphesis_t)
 term_dontaudit_use_generic_ptys(cyphesis_t)
+allow cyphesis_t self:process setfscreate;
 
 # cyphesis wants to talk to avahi via dbus
 avahi_dbus_chat(avahi_t)