rpms/selinux-policy/devel booleans-targeted.conf, 1.33, 1.34 policy-20071023.patch, 1.2, 1.3 policy-20070703.patch, 1.102, NONE

Daniel J Walsh (dwalsh) fedora-extras-commits at redhat.com
Wed Oct 24 19:32:03 UTC 2007


Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv24662

Modified Files:
	booleans-targeted.conf policy-20071023.patch 
Removed Files:
	policy-20070703.patch 
Log Message:
* Mon Oct 22 2007 Dan Walsh <dwalsh at redhat.com> 3.1.0-1
- Update to upstream



Index: booleans-targeted.conf
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/booleans-targeted.conf,v
retrieving revision 1.33
retrieving revision 1.34
diff -u -r1.33 -r1.34
--- booleans-targeted.conf	24 Oct 2007 03:29:53 -0000	1.33
+++ booleans-targeted.conf	24 Oct 2007 19:31:28 -0000	1.34
@@ -216,15 +216,15 @@
 
 # Allow all domains to talk to ttys
 # 
-allow_daemons_use_tty = false
+allow_daemons_use_tty = true
 
 # Allow login domains to polyinstatiate directories
 # 
 allow_polyinstantiation = false
 
-# Allow all domains to talk to ttys
+# Allow all domains to dump core
 # 
-allow_daemons_dump_core = false
+allow_daemons_dump_core = true
 
 # Allow mount command to mounton any directory
 # 

policy-20071023.patch:

View full diff with command:
/usr/bin/cvs -f diff  -kk -u -N -r 1.2 -r 1.3 policy-20071023.patch
Index: policy-20071023.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20071023.patch,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- policy-20071023.patch	24 Oct 2007 03:29:53 -0000	1.2
+++ policy-20071023.patch	24 Oct 2007 19:31:28 -0000	1.3
@@ -1,6 +1,18 @@
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/Changelog serefpolicy-3.1.0/Changelog
+--- nsaserefpolicy/Changelog	2007-10-24 15:00:24.000000000 -0400
++++ serefpolicy-3.1.0/Changelog	2007-10-24 15:06:50.000000000 -0400
+@@ -8,8 +8,6 @@
+   strict policy if the unconfined module is not present.  If it is, it will
+   behave like the targeted policy.  Added an unconfined role to have a mix
+   of confined and unconfined users.
+-- Added modules:
+-	exim (Dan Walsh)
+ 
+ * Fri Sep 28 2007 Chris PeBenito <selinux at tresys.com> - 20070928
+ - Add support for setting the unknown permissions handling.
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/default_contexts serefpolicy-3.1.0/config/appconfig-mcs/default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/default_contexts	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -1,15 +1,9 @@
 -system_r:crond_t:s0		user_r:user_crond_t:s0 staff_r:staff_crond_t:s0 sysadm_r:sysadm_crond_t:s0 system_r:system_crond_t:s0 unconfined_r:unconfined_crond_t:s0
 -system_r:local_login_t:s0	user_r:user_t:s0 staff_r:staff_t:s0 sysadm_r:sysadm_t:s0 unconfined_r:unconfined_t:s0
@@ -28,7 +40,7 @@
 +system_r:xdm_t:s0		system_r:unconfined_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/default_type serefpolicy-3.1.0/config/appconfig-mcs/default_type
 --- nsaserefpolicy/config/appconfig-mcs/default_type	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/default_type	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/default_type	2007-10-24 15:06:50.000000000 -0400
 @@ -1,4 +1,4 @@
 +system_r:unconfined_t
  sysadm_r:sysadm_t
@@ -37,13 +49,13 @@
  user_r:user_t
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/failsafe_context serefpolicy-3.1.0/config/appconfig-mcs/failsafe_context
 --- nsaserefpolicy/config/appconfig-mcs/failsafe_context	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/failsafe_context	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/failsafe_context	2007-10-24 15:06:50.000000000 -0400
 @@ -1 +1 @@
 -sysadm_r:sysadm_t:s0
 +system_r:unconfined_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/guest_u_default_contexts serefpolicy-3.1.0/config/appconfig-mcs/guest_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/guest_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mcs/guest_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/guest_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,4 @@
 +system_r:local_login_t:s0	guest_r:guest_t:s0
 +system_r:remote_login_t:s0	guest_r:guest_t:s0
@@ -51,7 +63,7 @@
 +system_r:crond_t:s0		guest_r:guest_crond_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/root_default_contexts serefpolicy-3.1.0/config/appconfig-mcs/root_default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/root_default_contexts	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/root_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/root_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -1,11 +1,10 @@
 -system_r:crond_t:s0		unconfined_r:unconfined_t:s0 sysadm_r:sysadm_crond_t:s0 staff_r:staff_crond_t:s0 user_r:user_crond_t:s0
 -system_r:local_login_t:s0	unconfined_r:unconfined_t:s0 sysadm_r:sysadm_t:s0 staff_r:staff_t:s0 user_r:user_t:s0
@@ -73,7 +85,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/seusers serefpolicy-3.1.0/config/appconfig-mcs/seusers
 --- nsaserefpolicy/config/appconfig-mcs/seusers	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/seusers	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/seusers	2007-10-24 15:06:50.000000000 -0400
 @@ -1,3 +1,2 @@
 -system_u:system_u:s0-mcs_systemhigh
  root:root:s0-mcs_systemhigh
@@ -81,7 +93,7 @@
 +__default__:system_u:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/staff_u_default_contexts serefpolicy-3.1.0/config/appconfig-mcs/staff_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/staff_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mcs/staff_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/staff_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,9 @@
 +system_r:local_login_t:s0	staff_r:staff_t:s0 sysadm_r:sysadm_t:s0
 +system_r:remote_login_t:s0	staff_r:staff_t:s0
@@ -94,13 +106,13 @@
 +sysadm_r:sysadm_sudo_t:s0	sysadm_r:sysadm_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/userhelper_context serefpolicy-3.1.0/config/appconfig-mcs/userhelper_context
 --- nsaserefpolicy/config/appconfig-mcs/userhelper_context	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mcs/userhelper_context	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/userhelper_context	2007-10-24 15:06:50.000000000 -0400
 @@ -1 +1 @@
 -system_u:sysadm_r:sysadm_t:s0
 +system_u:system_r:unconfined_t:s0	
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/user_u_default_contexts serefpolicy-3.1.0/config/appconfig-mcs/user_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/user_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mcs/user_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/user_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,7 @@
 +system_r:local_login_t:s0	system_r:unconfined_t:s0 user_r:user_t:s0
 +system_r:remote_login_t:s0	system_r:unconfined_t:s0 user_r:user_t:s0
@@ -111,7 +123,7 @@
 +user_r:user_sudo_t:s0		system_r:unconfined_t:s0 user_r:user_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mcs/xguest_u_default_contexts serefpolicy-3.1.0/config/appconfig-mcs/xguest_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mcs/xguest_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mcs/xguest_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mcs/xguest_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,5 @@
 +system_r:local_login_t	xguest_r:xguest_t:s0
 +system_r:remote_login_t	xguest_r:xguest_t:s0
@@ -120,7 +132,7 @@
 +system_r:xdm_t		xguest_r:xguest_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mls/default_contexts serefpolicy-3.1.0/config/appconfig-mls/default_contexts
 --- nsaserefpolicy/config/appconfig-mls/default_contexts	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mls/default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mls/default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -1,15 +1,12 @@
 -system_r:crond_t:s0		user_r:user_crond_t:s0 staff_r:staff_crond_t:s0 sysadm_r:sysadm_crond_t:s0 system_r:system_crond_t:s0 unconfined_r:unconfined_crond_t:s0
 -system_r:local_login_t:s0	user_r:user_t:s0 staff_r:staff_t:s0 sysadm_r:sysadm_t:s0 unconfined_r:unconfined_t:s0
@@ -150,7 +162,7 @@
 +user_r:user_sudo_t:s0	sysadm_r:sysadm_t:s0 user_r:user_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mls/guest_u_default_contexts serefpolicy-3.1.0/config/appconfig-mls/guest_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mls/guest_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mls/guest_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mls/guest_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,4 @@
 +system_r:local_login_t:s0	guest_r:guest_t:s0
 +system_r:remote_login_t:s0	guest_r:guest_t:s0
@@ -158,7 +170,7 @@
 +system_r:crond_t:s0		guest_r:guest_crond_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mls/root_default_contexts serefpolicy-3.1.0/config/appconfig-mls/root_default_contexts
 --- nsaserefpolicy/config/appconfig-mls/root_default_contexts	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/config/appconfig-mls/root_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mls/root_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -1,11 +1,9 @@
 -system_r:crond_t:s0		unconfined_r:unconfined_t:s0 sysadm_r:sysadm_crond_t:s0 staff_r:staff_crond_t:s0 user_r:user_crond_t:s0
 -system_r:local_login_t:s0	unconfined_r:unconfined_t:s0 sysadm_r:sysadm_t:s0 staff_r:staff_t:s0 user_r:user_t:s0
@@ -179,7 +191,7 @@
 +#system_r:sshd_t:s0 sysadm_r:sysadm_t:s0 staff_r:staff_t:s0 user_r:user_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mls/staff_u_default_contexts serefpolicy-3.1.0/config/appconfig-mls/staff_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mls/staff_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mls/staff_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mls/staff_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,9 @@
 +system_r:local_login_t:s0	staff_r:staff_t:s0 sysadm_r:sysadm_t:s0
 +system_r:remote_login_t:s0	staff_r:staff_t:s0
@@ -192,7 +204,7 @@
 +sysadm_r:sysadm_sudo_t:s0	sysadm_r:sysadm_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-mls/user_u_default_contexts serefpolicy-3.1.0/config/appconfig-mls/user_u_default_contexts
 --- nsaserefpolicy/config/appconfig-mls/user_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-mls/user_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-mls/user_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,7 @@
 +system_r:local_login_t:s0	user_r:user_t:s0
 +system_r:remote_login_t:s0	user_r:user_t:s0
@@ -203,7 +215,7 @@
 +user_r:user_sudo_t:s0		user_r:user_t:s0
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-standard/guest_u_default_contexts serefpolicy-3.1.0/config/appconfig-standard/guest_u_default_contexts
 --- nsaserefpolicy/config/appconfig-standard/guest_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-standard/guest_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-standard/guest_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,4 @@
 +system_r:local_login_t	guest_r:guest_t
 +system_r:remote_login_t	guest_r:guest_t
@@ -211,7 +223,7 @@
 +system_r:crond_t	guest_r:guest_crond_t
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-standard/staff_u_default_contexts serefpolicy-3.1.0/config/appconfig-standard/staff_u_default_contexts
 --- nsaserefpolicy/config/appconfig-standard/staff_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-standard/staff_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-standard/staff_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,9 @@
 +system_r:local_login_t	staff_r:staff_t sysadm_r:sysadm_t
 +system_r:remote_login_t	staff_r:staff_t
@@ -224,7 +236,7 @@
 +sysadm_r:sysadm_sudo_t	sysadm_r:sysadm_t
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-standard/user_u_default_contexts serefpolicy-3.1.0/config/appconfig-standard/user_u_default_contexts
 --- nsaserefpolicy/config/appconfig-standard/user_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-standard/user_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-standard/user_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,7 @@
 +system_r:local_login_t	system_r:unconfined_t user_r:user_t
 +system_r:remote_login_t	system_r:unconfined_t user_r:user_t
@@ -235,7 +247,7 @@
 +user_r:user_sudo_t	system_r:unconfined_t user_r:user_t
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/config/appconfig-standard/xguest_u_default_contexts serefpolicy-3.1.0/config/appconfig-standard/xguest_u_default_contexts
 --- nsaserefpolicy/config/appconfig-standard/xguest_u_default_contexts	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/config/appconfig-standard/xguest_u_default_contexts	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/config/appconfig-standard/xguest_u_default_contexts	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,5 @@
 +system_r:local_login_t	xguest_r:xguest_t
 +system_r:remote_login_t	xguest_r:xguest_t
@@ -244,7 +256,7 @@
 +system_r:xdm_t		xguest_r:xguest_t
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/man/ru/man8/ftpd_selinux.8 serefpolicy-3.1.0/man/ru/man8/ftpd_selinux.8
 --- nsaserefpolicy/man/ru/man8/ftpd_selinux.8	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/man/ru/man8/ftpd_selinux.8	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/man/ru/man8/ftpd_selinux.8	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,57 @@
 +.TH  "ftpd_selinux"  "8"  "17 Янв 2005" "dwalsh at redhat.com" "ftpd Selinux Policy documentation"
 +.SH "НАЗВАНИЕ"
@@ -305,7 +317,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/man/ru/man8/httpd_selinux.8 serefpolicy-3.1.0/man/ru/man8/httpd_selinux.8
 --- nsaserefpolicy/man/ru/man8/httpd_selinux.8	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/man/ru/man8/httpd_selinux.8	2007-10-23 18:51:10.000000000 -0400
[...2718 lines suppressed...]
@@ -14258,7 +14069,7 @@
  
  domain_use_interactive_fds(ifconfig_t)
  
-@@ -327,6 +339,14 @@
+@@ -327,6 +341,14 @@
  ')
  
  optional_policy(`
@@ -14275,7 +14086,7 @@
  	xen_append_log(ifconfig_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/udev.te serefpolicy-3.1.0/policy/modules/system/udev.te
 --- nsaserefpolicy/policy/modules/system/udev.te	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/udev.te	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/udev.te	2007-10-24 15:06:50.000000000 -0400
 @@ -132,6 +132,7 @@
  
  init_read_utmp(udev_t)
@@ -14311,7 +14122,7 @@
  	xen_manage_log(udev_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.fc serefpolicy-3.1.0/policy/modules/system/unconfined.fc
 --- nsaserefpolicy/policy/modules/system/unconfined.fc	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/unconfined.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/unconfined.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -10,3 +10,5 @@
  /usr/lib/openoffice\.org.*/program/.+\.bin -- gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
  
@@ -14320,7 +14131,7 @@
 +/usr/bin/sbcl			    --	gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.if serefpolicy-3.1.0/policy/modules/system/unconfined.if
 --- nsaserefpolicy/policy/modules/system/unconfined.if	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/unconfined.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/unconfined.if	2007-10-24 15:06:50.000000000 -0400
 @@ -12,14 +12,13 @@
  #
  interface(`unconfined_domain_noaudit',`
@@ -14598,7 +14409,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.te serefpolicy-3.1.0/policy/modules/system/unconfined.te
 --- nsaserefpolicy/policy/modules/system/unconfined.te	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/unconfined.te	2007-10-23 23:11:40.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/unconfined.te	2007-10-24 15:06:50.000000000 -0400
 @@ -5,17 +5,23 @@
  #
  # Declarations
@@ -14800,7 +14611,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.fc serefpolicy-3.1.0/policy/modules/system/userdomain.fc
 --- nsaserefpolicy/policy/modules/system/userdomain.fc	2007-02-19 11:32:53.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/system/userdomain.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/userdomain.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -1,4 +1,4 @@
  HOME_DIR	-d	gen_context(system_u:object_r:ROLE_home_dir_t,s0-mls_systemhigh)
 +HOME_DIR	-l	gen_context(system_u:object_r:ROLE_home_dir_t,s0-mls_systemhigh)
@@ -14809,7 +14620,7 @@
  /tmp/gconfd-USER -d	gen_context(system_u:object_r:ROLE_tmp_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.if serefpolicy-3.1.0/policy/modules/system/userdomain.if
 --- nsaserefpolicy/policy/modules/system/userdomain.if	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/userdomain.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/userdomain.if	2007-10-24 15:06:50.000000000 -0400
 @@ -29,8 +29,9 @@
  	')
  
@@ -16401,7 +16212,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.te serefpolicy-3.1.0/policy/modules/system/userdomain.te
 --- nsaserefpolicy/policy/modules/system/userdomain.te	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/userdomain.te	2007-10-23 19:10:51.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/userdomain.te	2007-10-24 15:06:50.000000000 -0400
 @@ -24,13 +24,6 @@
  
  ## <desc>
@@ -16531,12 +16342,12 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/virt.fc serefpolicy-3.1.0/policy/modules/system/virt.fc
 --- nsaserefpolicy/policy/modules/system/virt.fc	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/system/virt.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/virt.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +/var/lib/libvirt(/.*)?		gen_context(system_u:object_r:virt_var_lib_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/virt.if serefpolicy-3.1.0/policy/modules/system/virt.if
 --- nsaserefpolicy/policy/modules/system/virt.if	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/system/virt.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/virt.if	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,78 @@
 +## <summary>Virtualization </summary>
 +
@@ -16618,14 +16429,14 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/virt.te serefpolicy-3.1.0/policy/modules/system/virt.te
 --- nsaserefpolicy/policy/modules/system/virt.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/system/virt.te	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/virt.te	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,3 @@
 +# var/lib files
 +type virt_var_lib_t;
 +files_type(virt_var_lib_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/xen.if serefpolicy-3.1.0/policy/modules/system/xen.if
 --- nsaserefpolicy/policy/modules/system/xen.if	2007-06-21 09:32:04.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/xen.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/xen.if	2007-10-24 15:06:50.000000000 -0400
 @@ -191,3 +191,24 @@
  
  	domtrans_pattern($1,xm_exec_t,xm_t)
@@ -16653,7 +16464,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/xen.te serefpolicy-3.1.0/policy/modules/system/xen.te
 --- nsaserefpolicy/policy/modules/system/xen.te	2007-10-12 08:56:08.000000000 -0400
-+++ serefpolicy-3.1.0/policy/modules/system/xen.te	2007-10-23 23:28:04.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/system/xen.te	2007-10-24 15:06:50.000000000 -0400
 @@ -6,6 +6,13 @@
  # Declarations
  #
@@ -16822,17 +16633,17 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/guest.fc serefpolicy-3.1.0/policy/modules/users/guest.fc
 --- nsaserefpolicy/policy/modules/users/guest.fc	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/guest.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/guest.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +# No guest file contexts.
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/guest.if serefpolicy-3.1.0/policy/modules/users/guest.if
 --- nsaserefpolicy/policy/modules/users/guest.if	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/guest.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/guest.if	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +## <summary>Policy for guest user</summary>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/guest.te serefpolicy-3.1.0/policy/modules/users/guest.te
 --- nsaserefpolicy/policy/modules/users/guest.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/guest.te	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/guest.te	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,18 @@
 +policy_module(guest,1.0.0)
 +userdom_unpriv_login_user(guest)
@@ -16854,17 +16665,17 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/logadm.fc serefpolicy-3.1.0/policy/modules/users/logadm.fc
 --- nsaserefpolicy/policy/modules/users/logadm.fc	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/logadm.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/logadm.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +# No logadm file contexts.
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/logadm.if serefpolicy-3.1.0/policy/modules/users/logadm.if
 --- nsaserefpolicy/policy/modules/users/logadm.if	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/logadm.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/logadm.if	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +## <summary>Policy for logadm user</summary>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/logadm.te serefpolicy-3.1.0/policy/modules/users/logadm.te
 --- nsaserefpolicy/policy/modules/users/logadm.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/logadm.te	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/logadm.te	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,12 @@
 +policy_module(logadm,1.0.0)
 +
@@ -16880,22 +16691,22 @@
 +logging_audit_admin(logadm, logadm_t, logadm_r)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/metadata.xml serefpolicy-3.1.0/policy/modules/users/metadata.xml
 --- nsaserefpolicy/policy/modules/users/metadata.xml	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/metadata.xml	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/metadata.xml	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +<summary>Policy modules for users</summary>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/webadm.fc serefpolicy-3.1.0/policy/modules/users/webadm.fc
 --- nsaserefpolicy/policy/modules/users/webadm.fc	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/webadm.fc	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/webadm.fc	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +# No webadm file contexts.
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/webadm.if serefpolicy-3.1.0/policy/modules/users/webadm.if
 --- nsaserefpolicy/policy/modules/users/webadm.if	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/webadm.if	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/webadm.if	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1 @@
 +## <summary>Policy for webadm user</summary>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/webadm.te serefpolicy-3.1.0/policy/modules/users/webadm.te
 --- nsaserefpolicy/policy/modules/users/webadm.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.1.0/policy/modules/users/webadm.te	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/modules/users/webadm.te	2007-10-24 15:06:50.000000000 -0400
 @@ -0,0 +1,42 @@
 +policy_module(webadm,1.0.0)
 +
@@ -16941,7 +16752,7 @@
 +allow webadm_t gadmin_t:dir getattr;
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/support/obj_perm_sets.spt serefpolicy-3.1.0/policy/support/obj_perm_sets.spt
 --- nsaserefpolicy/policy/support/obj_perm_sets.spt	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/policy/support/obj_perm_sets.spt	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/support/obj_perm_sets.spt	2007-10-24 15:06:50.000000000 -0400
 @@ -204,7 +204,7 @@
  define(`getattr_file_perms',`{ getattr }')
  define(`setattr_file_perms',`{ setattr }')
@@ -16967,7 +16778,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/users serefpolicy-3.1.0/policy/users
 --- nsaserefpolicy/policy/users	2007-10-12 08:56:09.000000000 -0400
-+++ serefpolicy-3.1.0/policy/users	2007-10-23 18:51:10.000000000 -0400
++++ serefpolicy-3.1.0/policy/users	2007-10-24 15:06:50.000000000 -0400
 @@ -16,7 +16,7 @@
  # and a user process should never be assigned the system user
  # identity.


--- policy-20070703.patch DELETED ---




More information about the fedora-extras-commits mailing list