rpms/selinux-policy/F-9 policy-20071130.patch, 1.157, 1.158 selinux-policy.spec, 1.673, 1.674

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-9
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9576

Modified Files:
	policy-20071130.patch selinux-policy.spec 
Log Message:
* Wed May 21 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-57
- Allow dhcpc sys_nice
- Allow handling of /var/run/video.rom
- Allow policykit_resolve to use dbus


policy-20071130.patch:

Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-9/policy-20071130.patch,v
retrieving revision 1.157
retrieving revision 1.158
diff -u -r1.157 -r1.158
--- policy-20071130.patch	29 May 2008 13:01:25 -0000	1.157
+++ policy-20071130.patch	29 May 2008 13:09:29 -0000	1.158
@@ -19641,8 +19641,8 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/polkit.te serefpolicy-3.3.1/policy/modules/services/polkit.te
 --- nsaserefpolicy/policy/modules/services/polkit.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.3.1/policy/modules/services/polkit.te	2008-05-28 09:06:14.000000000 -0400
-@@ -0,0 +1,196 @@
++++ serefpolicy-3.3.1/policy/modules/services/polkit.te	2008-05-29 09:05:13.738516000 -0400
+@@ -0,0 +1,201 @@
 +policy_module(polkit_auth,1.0.0)
 +
 +########################################
@@ -19839,6 +19839,11 @@
 +miscfiles_read_localization(polkit_resolve_t)
 +
 +logging_send_syslog_msg(polkit_resolve_t)
++
++optional_policy(`
++	dbus_system_bus_client_template(polkit_resolve, polkit_resolve_t)
++')
++
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/portslave.te serefpolicy-3.3.1/policy/modules/services/portslave.te
 --- nsaserefpolicy/policy/modules/services/portslave.te	2008-02-26 08:23:10.000000000 -0500
 +++ serefpolicy-3.3.1/policy/modules/services/portslave.te	2008-05-28 09:06:14.000000000 -0400
@@ -25974,7 +25979,7 @@
  /var/lib/pam_devperm/:0	--	gen_context(system_u:object_r:xdm_var_lib_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.if serefpolicy-3.3.1/policy/modules/services/xserver.if
 --- nsaserefpolicy/policy/modules/services/xserver.if	2008-02-26 08:23:10.000000000 -0500
-+++ serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-05-29 08:59:50.470472000 -0400
++++ serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-05-29 09:03:53.792808000 -0400
 @@ -12,9 +12,15 @@
  ##	</summary>
  ## </param>
@@ -27387,7 +27392,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.te serefpolicy-3.3.1/policy/modules/services/xserver.te
 --- nsaserefpolicy/policy/modules/services/xserver.te	2008-02-26 08:23:10.000000000 -0500
-+++ serefpolicy-3.3.1/policy/modules/services/xserver.te	2008-05-29 08:55:11.197506000 -0400
++++ serefpolicy-3.3.1/policy/modules/services/xserver.te	2008-05-29 09:08:39.452233000 -0400
 @@ -8,6 +8,14 @@
  
  ## <desc>
@@ -27820,7 +27825,7 @@
 +manage_files_pattern(xdm_xserver_t,xserver_var_lib_t,xserver_var_lib_t)
 +files_var_lib_filetrans(xdm_xserver_t,xserver_var_lib_t,dir)
 +
-+manage_dirs_pattern(xdm_xserver_t,xserver_var_run_tO,xserver_var_run_t)	
++manage_dirs_pattern(xdm_xserver_t,xserver_var_run_t,xserver_var_run_t)	
 +manage_files_pattern(xdm_xserver_t,xserver_var_run_t,xserver_var_run_t)
 +manage_sock_files_pattern(xdm_xserver_t,xdm_var_run_t,xdm_var_run_t)
 +files_pid_filetrans(xdm_xserver_t,xserver_var_run_t,{ dir file })


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-9/selinux-policy.spec,v
retrieving revision 1.673
retrieving revision 1.674
diff -u -r1.673 -r1.674
--- selinux-policy.spec	29 May 2008 13:01:25 -0000	1.673
+++ selinux-policy.spec	29 May 2008 13:09:29 -0000	1.674
@@ -388,6 +388,7 @@
 * Wed May 21 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-57
 - Allow dhcpc sys_nice
 - Allow handling of /var/run/video.rom
+- Allow policykit_resolve to use dbus
 
 * Wed May 21 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-56
 - Fix vncserver transition to work properly in unconfined environment.