rpms/selinux-policy/devel policy-20070703.patch,1.74,1.75

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8446

Modified Files:
	policy-20070703.patch 
Log Message:
* Tue Sep 24 2007 Dan Walsh <dwalsh at redhat.com> 3.0.8-13
- Allow login programs to set ioctl on /proc


policy-20070703.patch:

Index: policy-20070703.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20070703.patch,v
retrieving revision 1.74
retrieving revision 1.75
diff -u -r1.74 -r1.75
--- policy-20070703.patch	25 Sep 2007 14:20:38 -0000	1.74
+++ policy-20070703.patch	25 Sep 2007 14:47:50 -0000	1.75
@@ -6440,7 +6440,7 @@
 +/var/tmp/host_0			-- 	gen_context(system_u:object_r:krb5_host_rcache_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/kerberos.if serefpolicy-3.0.8/policy/modules/services/kerberos.if
 --- nsaserefpolicy/policy/modules/services/kerberos.if	2007-07-03 07:06:27.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/services/kerberos.if	2007-09-22 07:42:39.000000000 -0400
++++ serefpolicy-3.0.8/policy/modules/services/kerberos.if	2007-09-25 10:30:36.000000000 -0400
 @@ -42,6 +42,10 @@
  	dontaudit $1 krb5_conf_t:file write;
  	dontaudit $1 krb5kdc_conf_t:dir list_dir_perms;
@@ -10456,7 +10456,7 @@
 +/var/cache/coolkey(/.*)?	gen_context(system_u:object_r:auth_cache_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/authlogin.if serefpolicy-3.0.8/policy/modules/system/authlogin.if
 --- nsaserefpolicy/policy/modules/system/authlogin.if	2007-08-22 07:14:13.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/system/authlogin.if	2007-09-25 10:18:40.000000000 -0400
++++ serefpolicy-3.0.8/policy/modules/system/authlogin.if	2007-09-25 10:32:38.000000000 -0400
 @@ -26,7 +26,8 @@
  	type $1_chkpwd_t, can_read_shadow_passwords;
  	application_domain($1_chkpwd_t,chkpwd_exec_t)
@@ -10562,15 +10562,16 @@
  	corecmd_search_bin($1)
  	domtrans_pattern($1,chkpwd_exec_t,system_chkpwd_t)
  
-@@ -329,6 +356,7 @@
+@@ -329,6 +356,8 @@
  
  	optional_policy(`
  		kerberos_use($1)
 +		kerberos_read_keytab($1)
++		kerberos_524_connect($1)
  	')
  
  	optional_policy(`
-@@ -347,6 +375,37 @@
+@@ -347,6 +376,37 @@
  
  ########################################
  ## <summary>
@@ -10608,7 +10609,7 @@
  ##	Get the attributes of the shadow passwords file.
  ## </summary>
  ## <param name="domain">
-@@ -695,6 +754,24 @@
+@@ -695,6 +755,24 @@
  
  ########################################
  ## <summary>
@@ -10633,7 +10634,7 @@
  ##	Execute pam programs in the PAM domain.
  ## </summary>
  ## <param name="domain">
-@@ -1318,14 +1395,9 @@
+@@ -1318,14 +1396,9 @@
  ## </param>
  #
  interface(`auth_use_nsswitch',`
@@ -10648,7 +10649,7 @@
  	files_list_var_lib($1)
  
  	miscfiles_read_certs($1)
-@@ -1347,6 +1419,8 @@
+@@ -1347,6 +1420,8 @@
  
  	optional_policy(`
  		samba_stream_connect_winbind($1)
@@ -10657,7 +10658,7 @@
  	')
  ')
  
-@@ -1381,3 +1455,163 @@
+@@ -1381,3 +1456,163 @@
  	typeattribute $1 can_write_shadow_passwords;
  	typeattribute $1 can_relabelto_shadow_passwords;
  ')