rpms/selinux-policy/devel policy-20080509.patch, 1.34, 1.35 selinux-policy.spec, 1.683, 1.684
Daniel J Walsh (dwalsh)
fedora-extras-commits at redhat.com
Thu Jul 10 15:29:40 UTC 2008
Author: dwalsh
Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv390
Modified Files:
policy-20080509.patch selinux-policy.spec
Log Message:
* Wed Jul 9 2008 Dan Walsh <dwalsh at redhat.com> 3.4.2-14
- Add inotify support to nscd
policy-20080509.patch:
Index: policy-20080509.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20080509.patch,v
retrieving revision 1.34
retrieving revision 1.35
diff -u -r1.34 -r1.35
--- policy-20080509.patch 9 Jul 2008 13:05:54 -0000 1.34
+++ policy-20080509.patch 10 Jul 2008 15:28:32 -0000 1.35
@@ -11797,7 +11797,7 @@
+
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/bluetooth.te serefpolicy-3.4.2/policy/modules/services/bluetooth.te
--- nsaserefpolicy/policy/modules/services/bluetooth.te 2008-06-12 23:25:05.000000000 -0400
-+++ serefpolicy-3.4.2/policy/modules/services/bluetooth.te 2008-07-02 08:47:04.000000000 -0400
++++ serefpolicy-3.4.2/policy/modules/services/bluetooth.te 2008-07-09 15:25:46.000000000 -0400
@@ -32,19 +32,22 @@
type bluetooth_var_run_t;
files_pid_file(bluetooth_var_run_t)
@@ -11840,12 +11840,14 @@
libs_use_ld_so(bluetooth_t)
libs_use_shared_libs(bluetooth_t)
-@@ -118,20 +124,18 @@
+@@ -117,21 +123,20 @@
+
miscfiles_read_localization(bluetooth_t)
miscfiles_read_fonts(bluetooth_t)
-
--sysnet_read_config(bluetooth_t)
-
+-sysnet_read_config(bluetooth_t)
++miscfiles_read_hwdata(bluetooth_t)
+
userdom_dontaudit_use_unpriv_user_fds(bluetooth_t)
-
sysadm_dontaudit_use_ptys(bluetooth_t)
Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.683
retrieving revision 1.684
diff -u -r1.683 -r1.684
--- selinux-policy.spec 9 Jul 2008 13:05:54 -0000 1.683
+++ selinux-policy.spec 10 Jul 2008 15:28:32 -0000 1.684
@@ -278,7 +278,7 @@
%post targeted
if [ $1 -eq 1 ]; then
%loadpolicy targeted
-bnsemanage user -a -S targeted -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
+semanage user -a -S targeted -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
semanage login -m -S targeted -s "unconfined_u" -r s0-s0:c0.c1023 __default__
semanage login -m -S targeted -s "unconfined_u" -r s0-s0:c0.c1023 root
semanage user -a -S targeted -P user -R guest_r guest_u
@@ -296,11 +296,11 @@
. /etc/selinux/config
[ "${SELINUXTYPE}" != "targeted" ] && exit 0
setsebool -P use_nfs_home_dirs=1
-semanage user -l | grep -s unconfined_u
+semanage user -l | grep -s unconfined_u > /dev/null
if [ $? -eq 0 ]; then
- semanage user -m -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u 2> /dev/null
+ semanage user -m -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
else
- semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u 2> /dev/null
+ semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
fi
seuser=`semanage login -l | grep __default__ | awk '{ print $2 }'`
[ "$seuser" != "unconfined_u" ] && semanage login -m -s "unconfined_u" -r s0-s0:c0.c1023 __default__
More information about the fedora-extras-commits
mailing list