Fedora 11 Update: selinux-policy-3.6.12-72.fc11

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-8262
2009-08-04 23:59:46
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 11
Version     : 3.6.12
Release     : 72.fc11
URL         : http://oss.tresys.com/repos/refpolicy/
Summary     : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision  2945.

--------------------------------------------------------------------------------
Update Information:

- Add postfix and dovecot fixes from dwalsh  - Fixes for hald_dccm   - Allow hal
to dbus chat with polkit
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jul 31 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-72
- Add postfix and dovecot fixes from dwalsh
* Fri Jul 31 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-71
- Allow lircd read/write input event devices
* Tue Jul 28 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-70
- Dontaudit logrotate sys_ptrace capability
- Allow mrtg to transition to ping_t
* Mon Jul 20 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-69
- Allow sshd getsched capability
* Fri Jul 17 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-68
- Fixes for hald_dccm
* Fri Jul 17 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-67
- Allow hal to dbus chat with polkit
* Wed Jul 15 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-66
- Allow dhcpc to read users files
* Wed Jul  8 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-65
- Fixes for xguest
* Tue Jul  7 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-64
- Fixes for kpropd
- Fix up kismet policy
* Fri Jul  3 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-63
- Allow ftpd to create shm
* Mon Jun 29 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-62
- Allow sshd to manage gitosis var/lib files
* Mon Jun 29 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-61
- Allow avahi net_admin capability
* Thu Jun 25 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-60
- Fix up gpsd policy
* Wed Jun 24 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-59
- Fix up xguest policy
* Tue Jun 23 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-58
- Allow kpropd to create tmp files
* Sat Jun 20 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-57
- Allow mysqld_safe to manage db files
- Allow udev_t to read/write anon_inodefs
* Sat Jun 20 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-56
- Add gitosis policy
* Fri Jun 19 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-55
- Add boolean to allow svirt to use usb devices
* Mon Jun 15 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-53
- Allow ftp to create xferlog_t files in an xferlog_t directory
- Fix svirt separation on chr_file, and blk_file
* Mon Jun 15 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-52
- Allow kpropd to create krb5_lock_t files in krb5_conf_t directory
* Fri Jun 12 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-51
- Remove some privs from svirt to tighten the policy
* Fri Jun 12 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-50
- Allow udev to transition to bluetooth
* Thu Jun  4 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-49
- Add labeling for midori shared libraries
* Thu Jun  4 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-48
- Allow setroubleshoot to run mlocate
* Thu Jun  4 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-47
- Allow fprintd to read /proc
* Tue Jun  2 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-46
- Allow domains to check if the /selinux is mounted and search the directory
- Dontaudit rules are blocking audit events
* Tue Jun  2 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-45
- Add proper labeling for shorewall
* Mon Jun  1 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-44
- Add fish as a shell_exec_t
- Allow consolekit to search mountpoints
- Allow xdm_t to delete user_home_t
* Wed May 27 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-43
- Allow fprintd to list usbfs_t
- Add listing of mailman_data_t
- Allow hald to manage fusefs_t directories
- Allow groupadd to read usr_t symlinks
* Tue May 26 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-42
- New log file for vmware
- Allow xdm to setattr on user_tmp_t
* Thu May 21 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-41
- Allow sysadm_t to connect to virt stream
* Thu May 21 2009 Dan Walsh <dwalsh at redhat.com> 3.6.12-40
- Add context for /root/.spamassassin
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------