rpms/selinux-policy/F-9 policy-20071130.patch, 1.197, 1.198 selinux-policy.spec, 1.700, 1.701
Daniel J Walsh (dwalsh)
fedora-extras-commits at redhat.com
Fri Aug 1 16:19:11 UTC 2008
Author: dwalsh
Update of /cvs/extras/rpms/selinux-policy/F-9
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29899
Modified Files:
policy-20071130.patch selinux-policy.spec
Log Message:
* Fri Aug 1 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-83
- Add 9051 to tor ports
- Add textrel_shlib_t for bad novel library
policy-20071130.patch:
Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-9/policy-20071130.patch,v
retrieving revision 1.197
retrieving revision 1.198
diff -u -r1.197 -r1.198
--- policy-20071130.patch 31 Jul 2008 11:21:33 -0000 1.197
+++ policy-20071130.patch 1 Aug 2008 16:18:41 -0000 1.198
@@ -7337,7 +7337,7 @@
########################################
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/corenetwork.te.in serefpolicy-3.3.1/policy/modules/kernel/corenetwork.te.in
--- nsaserefpolicy/policy/modules/kernel/corenetwork.te.in 2008-06-12 23:38:02.000000000 -0400
-+++ serefpolicy-3.3.1/policy/modules/kernel/corenetwork.te.in 2008-07-17 10:48:33.000000000 -0400
++++ serefpolicy-3.3.1/policy/modules/kernel/corenetwork.te.in 2008-08-01 11:18:03.000000000 -0400
@@ -1,5 +1,5 @@
-policy_module(corenetwork,1.2.15)
@@ -7420,7 +7420,13 @@
network_port(smtp, tcp,25,s0, tcp,465,s0, tcp,587,s0)
network_port(snmp, udp,161,s0, udp,162,s0, tcp,199,s0)
network_port(spamd, tcp,783,s0)
-@@ -170,7 +180,12 @@
+@@ -165,12 +175,17 @@
+ network_port(syslogd, udp,514,s0)
+ network_port(telnetd, tcp,23,s0)
+ network_port(tftp, udp,69,s0)
+-network_port(tor, tcp,9001,s0, tcp,9030,s0, tcp,9050,s0)
++network_port(tor, tcp,9001,s0, tcp,9030,s0, tcp,9050,s0, tcp,9051,s0)
+ network_port(traceroute, udp,64000,s0, udp,64001,s0, udp,64002,s0, udp,64003,s0, udp,64004,s0, udp,64005,s0, udp,64006,s0, udp,64007,s0, udp,64008,s0, udp,64009,s0, udp,64010,s0)
network_port(transproxy, tcp,8081,s0)
type utcpserver_port_t, port_type; dnl network_port(utcpserver) # no defined portcon
network_port(uucpd, tcp,540,s0)
@@ -23001,6 +23007,18 @@
+
+ init_script_domtrans_spec($1,rdisc_script_exec_t)
+')
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rdisc.te serefpolicy-3.3.1/policy/modules/services/rdisc.te
+--- nsaserefpolicy/policy/modules/services/rdisc.te 2008-06-12 23:38:01.000000000 -0400
++++ serefpolicy-3.3.1/policy/modules/services/rdisc.te 2008-08-01 12:04:16.000000000 -0400
+@@ -45,6 +45,8 @@
+ libs_use_ld_so(rdisc_t)
+ libs_use_shared_libs(rdisc_t)
+
++miscfiles_read_localization(rdisc_t)
++
+ logging_send_syslog_msg(rdisc_t)
+
+ sysnet_read_config(rdisc_t)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/remotelogin.if serefpolicy-3.3.1/policy/modules/services/remotelogin.if
--- nsaserefpolicy/policy/modules/services/remotelogin.if 2008-06-12 23:38:02.000000000 -0400
+++ serefpolicy-3.3.1/policy/modules/services/remotelogin.if 2008-07-15 14:02:52.000000000 -0400
@@ -31125,7 +31143,7 @@
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/libraries.fc serefpolicy-3.3.1/policy/modules/system/libraries.fc
--- nsaserefpolicy/policy/modules/system/libraries.fc 2008-06-12 23:38:01.000000000 -0400
-+++ serefpolicy-3.3.1/policy/modules/system/libraries.fc 2008-07-15 14:02:52.000000000 -0400
++++ serefpolicy-3.3.1/policy/modules/system/libraries.fc 2008-08-01 10:49:37.000000000 -0400
@@ -69,8 +69,10 @@
ifdef(`distro_gentoo',`
# despite the extensions, they are actually libs
@@ -31199,7 +31217,7 @@
/var/ftp/lib(64)?(/.*)? gen_context(system_u:object_r:lib_t,s0)
/var/ftp/lib(64)?/ld[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0)
-@@ -304,3 +315,11 @@
+@@ -304,3 +315,13 @@
/var/spool/postfix/lib(64)?(/.*)? gen_context(system_u:object_r:lib_t,s0)
/var/spool/postfix/usr(/.*)? gen_context(system_u:object_r:lib_t,s0)
/var/spool/postfix/lib(64)?/ld.*\.so.* -- gen_context(system_u:object_r:ld_so_t,s0)
@@ -31211,6 +31229,8 @@
+/usr/lib64/jvm/java(.*/)bin(/.*)?/.*\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
+
+/usr/lib/oracle/.*/lib/libnnz10\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
++
++/opt/novell/groupwise/client/lib/libgwapijni\.so\.1 -- gen_context(system_u:object_r:textrel_shlib_t,s0)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/libraries.te serefpolicy-3.3.1/policy/modules/system/libraries.te
--- nsaserefpolicy/policy/modules/system/libraries.te 2008-06-12 23:38:01.000000000 -0400
+++ serefpolicy-3.3.1/policy/modules/system/libraries.te 2008-07-15 14:02:52.000000000 -0400
Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-9/selinux-policy.spec,v
retrieving revision 1.700
retrieving revision 1.701
diff -u -r1.700 -r1.701
--- selinux-policy.spec 31 Jul 2008 11:21:34 -0000 1.700
+++ selinux-policy.spec 1 Aug 2008 16:18:41 -0000 1.701
@@ -17,7 +17,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.3.1
-Release: 82%{?dist}
+Release: 83%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -386,6 +386,10 @@
%endif
%changelog
+* Fri Aug 1 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-83
+- Add 9051 to tor ports
+- Add textrel_shlib_t for bad novel library
+
* Wed Jul 30 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-82
- Change mail_spool to be a files_mountpoint
More information about the fedora-extras-commits
mailing list