[selinux-policy/f14/master] - Fixup for the latest version of upowed - Dontaudit sandbox sending SIGNULL to desktop apps
Daniel J Walsh
dwalsh at fedoraproject.org
Fri Oct 15 14:22:58 UTC 2010
commit 12b7932c9494d4421edf662ed82c63eaa3d82ac5
Author: Dan Walsh <dwalsh at redhat.com>
Date: Fri Oct 15 10:22:38 2010 -0400
- Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps
policy-F14.patch | 13 ++++++-------
1 files changed, 6 insertions(+), 7 deletions(-)
---
diff --git a/policy-F14.patch b/policy-F14.patch
index 3ecd76e..a168177 100644
--- a/policy-F14.patch
+++ b/policy-F14.patch
@@ -18732,7 +18732,7 @@ index f706b99..ab2edfc 100644
+ files_list_pids($1)
')
diff --git a/policy/modules/services/devicekit.te b/policy/modules/services/devicekit.te
-index f231f17..3aaa784 100644
+index f231f17..8d467c4 100644
--- a/policy/modules/services/devicekit.te
+++ b/policy/modules/services/devicekit.te
@@ -75,10 +75,12 @@ manage_dirs_pattern(devicekit_disk_t, devicekit_var_lib_t, devicekit_var_lib_t)
@@ -18854,7 +18854,7 @@ index f231f17..3aaa784 100644
')
optional_policy(`
-+ mount_domtrans(devicekit_power_t)
++ mount_exec(devicekit_power_t)
+')
+
+optional_policy(`
@@ -41420,7 +41420,7 @@ index 8b5c196..3490497 100644
+ role $2 types showmount_t;
')
diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te
-index fca6947..7fbc4c9 100644
+index fca6947..c960661 100644
--- a/policy/modules/system/mount.te
+++ b/policy/modules/system/mount.te
@@ -17,8 +17,15 @@ type mount_exec_t;
@@ -41622,7 +41622,7 @@ index fca6947..7fbc4c9 100644
')
optional_policy(`
-@@ -173,6 +247,25 @@ optional_policy(`
+@@ -173,6 +247,24 @@ optional_policy(`
')
optional_policy(`
@@ -41637,7 +41637,6 @@ index fca6947..7fbc4c9 100644
+ ')
+')
+
-+
+optional_policy(`
+ hal_write_log(mount_t)
+ hal_use_fds(mount_t)
@@ -41648,7 +41647,7 @@ index fca6947..7fbc4c9 100644
ifdef(`hide_broken_symptoms',`
# for a bug in the X server
rhgb_dontaudit_rw_stream_sockets(mount_t)
-@@ -180,13 +273,40 @@ optional_policy(`
+@@ -180,13 +272,40 @@ optional_policy(`
')
')
@@ -41689,7 +41688,7 @@ index fca6947..7fbc4c9 100644
')
########################################
-@@ -195,6 +315,42 @@ optional_policy(`
+@@ -195,6 +314,42 @@ optional_policy(`
#
optional_policy(`
More information about the scm-commits
mailing list