rpms/icecream/devel icecream.spec,1.8,1.9 icecream.te,1.3,1.4

Michal Schmidt (michich) fedora-extras-commits at redhat.com
Thu Mar 13 00:09:56 UTC 2008


Author: michich

Update of /cvs/pkgs/rpms/icecream/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv25113

Modified Files:
	icecream.spec icecream.te 
Log Message:
* Thu Mar 13 2008 Michal Schmidt <mschmidt at redhat.com> - 0.8.0-11.20080117svn
- Minor SELinux policy fix.



Index: icecream.spec
===================================================================
RCS file: /cvs/pkgs/rpms/icecream/devel/icecream.spec,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- icecream.spec	10 Feb 2008 22:27:13 -0000	1.8
+++ icecream.spec	13 Mar 2008 00:09:06 -0000	1.9
@@ -13,7 +13,7 @@
 
 Name:		icecream
 Version:	0.8.0
-Release:	10.20080117svn%{?dist}
+Release:	11.20080117svn%{?dist}
 Summary:	Distributed compiler
 
 Group:		Development/Tools
@@ -182,8 +182,8 @@
 		%{_datadir}/selinux/${selinuxvariant}/icecream.pp 2>/dev/null ||:
 done
 fixfiles -R %{name} restore ||:
-restorecon -R %{_localstatedir}/cache/icecream ||:
-restorecon %{_localstatedir}/log/iceccd ||:
+restorecon -R %{_localstatedir}/cache/icecream 2>/dev/null ||:
+restorecon %{_localstatedir}/log/iceccd 2>/dev/null ||:
 semanage port -a -t iceccd_port_t -p tcp 10245 2>/dev/null ||:
 semanage port -a -t icecc_scheduler_port_t -p tcp 8765 2>/dev/null ||:
 semanage port -a -t icecc_scheduler_port_t -p udp 8765 2>/dev/null ||:
@@ -250,6 +250,9 @@
 %{_libdir}/pkgconfig/icecc.pc
 
 %changelog
+* Thu Mar 13 2008 Michal Schmidt <mschmidt at redhat.com> - 0.8.0-11.20080117svn
+- Minor SELinux policy fix.
+
 * Sun Feb 10 2008 Michal Schmidt <mschmidt at redhat.com> - 0.8.0-10.20080117svn
 - Compile fix (added missing #includes).
 - Conditional building of SELinux policy and documentation.


Index: icecream.te
===================================================================
RCS file: /cvs/pkgs/rpms/icecream/devel/icecream.te,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- icecream.te	10 Feb 2008 22:27:13 -0000	1.3
+++ icecream.te	13 Mar 2008 00:09:06 -0000	1.4
@@ -65,7 +65,7 @@
 allow iceccd_t self:capability { setgid setuid };
 allow iceccd_t self:capability { sys_chroot };
 
-allow iceccd_t iceccd_untrusted_t:process { siginh rlimitinh noatsecure };
+allow iceccd_t iceccd_untrusted_t:process { siginh rlimitinh noatsecure signal };
 
 allow iceccd_helper_t iceccd_t:process { sigchld };
 allow iceccd_helper_t iceccd_log_t:file { append };
@@ -75,10 +75,11 @@
 # rly needed?
 allow iceccd_helper_t iceccd_t:udp_socket { read write };
 
+allow iceccd_untrusted_t self:fifo_file { read write getattr };
+allow iceccd_untrusted_t self:process { signal };
 allow iceccd_untrusted_t iceccd_t:process { sigchld };
 allow iceccd_untrusted_t iceccd_t:fifo_file { write };
 allow iceccd_untrusted_t iceccd_t:unix_stream_socket { read write getattr };
-allow iceccd_untrusted_t self:fifo_file { read write getattr };
 allow iceccd_untrusted_t iceccd_cache_t:dir { search getattr write add_name remove_name };
 allow iceccd_untrusted_t iceccd_cache_t:file { execute_no_trans write unlink create };
 




More information about the fedora-extras-commits mailing list