[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Fedora 10 Update: selinux-policy-3.5.13-40.fc10



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-0744
2009-01-21 20:33:54
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 10
Version     : 3.5.13
Release     : 40.fc10
URL         : http://serefpolicy.sourceforge.net
Summary     : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision  2837.

--------------------------------------------------------------------------------
Update Information:

- Allow kismet read generic files in /usr  - Add execstack for Podslueth policy
- Allow qemu use generic ptys and ptmx   - Allow cups_pdf_t mananage nfs
files/dirs  - Add read_lnk_files to postfix_domain_template  - Fix hald_acl_t to
be able to getattr/setattr on fixed disk device nodes  - Allow prelude_audisp_t
to signal itself
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 19 2009 Miroslav Grepl <mgrepl redhat com> 3.5.13-40
- Allow kismet read generic files in /usr
- Add execstack for Podslueth policy  
- Allow qemu use generic ptys and ptmx
* Mon Jan 12 2009 Miroslav Grepl <mgrepl redhat com> 3.5.13-39
- Allow cups_pdf_t mananage nfs files/dirs
- Add read_lnk_files to postfix_domain_template
- Fix hald_acl_t to be able to getattr/setattr on fixed disk device nodes
- Allow prelude_audisp_t to signal itself
* Sun Jan  4 2009 Dan Walsh <dwalsh redhat com> 3.5.13-38
- Allow sendmail to list inotifyfs
* Sat Dec 27 2008 Dan Walsh <dwalsh redhat com> 3.5.13-37
- Allow sshd to use inotify
* Fri Dec 19 2008 Dan Walsh <dwalsh redhat com> 3.5.13-36
- Add hal_dccm policy
* Tue Dec  9 2008 Dan Walsh <dwalsh redhat com> 3.5.13-35
- Allow staff_t to execute at jobs
* Tue Dec  9 2008 Dan Walsh <dwalsh redhat com> 3.5.13-34
- Allow semanage to send signals to itself
* Fri Dec  5 2008 Dan Walsh <dwalsh redhat com> 3.5.13-33
- Allow nsplugin to manage sock files and fifo_files in nsplugin_home_t
* Thu Dec  4 2008 Dan Walsh <dwalsh redhat com> 3.5.13-32
- Turn off nsplugin transition, by default
- Allow httpd_sys_script_t to communicate with postgresql
* Tue Dec  2 2008 Dan Walsh <dwalsh redhat com> 3.5.13-30
- Allow nsplugin to list gconf_home_t directory
* Tue Dec  2 2008 Dan Walsh <dwalsh redhat com> 3.5.13-29
- Allow spamc to communicate with spamd via sock file
* Tue Dec  2 2008 Dan Walsh <dwalsh redhat com> 3.5.13-28
- Allow kismet to kill itself
* Thu Nov 27 2008 Dan Walsh <dwalsh redhat com> 3.5.13-27
- Allow iptables dac permissions
- Allow awstates to use inotify
* Tue Nov 25 2008 Dan Walsh <dwalsh redhat com> 3.5.13-26
- Allow dhcpc to read ypbind.pid
* Tue Nov 25 2008 Dan Walsh <dwalsh redhat com> 3.5.13-25
- Allow postfix_smtpd to getattr on directories and file systems
* Mon Nov 24 2008 Dan Walsh <dwalsh redhat com> 3.5.13-24
- Fix certwatch creating cache
* Mon Nov 24 2008 Dan Walsh <dwalsh redhat com> 3.5.13-23
- Add afs_client port definition
* Tue Nov 18 2008 Dan Walsh <dwalsh redhat com> 3.5.13-22
- Allow ftp to search fusefs
* Fri Nov 14 2008 Dan Walsh <dwalsh redhat com> 3.5.13-21
- Allow sambagui to use nsswitch
* Mon Nov 10 2008 Dan Walsh <dwalsh redhat com> 3.5.13-20
- Change default boolean settings for xguest
- Allow mount to r/w image files
- Fix labes for several libraries that need textrel_shlib_t
- portreserve needs to be able to sendrecv unlabeled_t
- Fix Kerberos labeling
- Fix cups printing on hp printers
- Allow relabeling on blk devices on the homedir
- Allow nslpugin to r/w inodefs
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]