6:55 p.m.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-7813
2009-07-22 20:36:59
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 11
Version : 3.6.12
Release : 69.fc11
URL : http://oss.tresys.com/repos/refpolicy/
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2945.
--------------------------------------------------------------------------------
Update Information:
- Allow sshd getsched capability
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 20 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-69
- Allow sshd getsched capability
* Fri Jul 17 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-68
- Fixes for hald_dccm
* Fri Jul 17 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-67
- Allow hal to dbus chat with polkit
* Wed Jul 15 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-66
- Allow dhcpc to read users files
* Wed Jul 8 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-65
- Fixes for xguest
* Tue Jul 7 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-64
- Fixes for kpropd
- Fix up kismet policy
* Fri Jul 3 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-63
- Allow ftpd to create shm
* Mon Jun 29 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-62
- Allow sshd to manage gitosis var/lib files
* Mon Jun 29 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-61
- Allow avahi net_admin capability
* Thu Jun 25 2009 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.12-60
- Fix up gpsd policy
* Wed Jun 24 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-59
- Fix up xguest policy
* Tue Jun 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-58
- Allow kpropd to create tmp files
* Sat Jun 20 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-57
- Allow mysqld_safe to manage db files
- Allow udev_t to read/write anon_inodefs
* Sat Jun 20 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-56
- Add gitosis policy
* Fri Jun 19 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-55
- Add boolean to allow svirt to use usb devices
* Mon Jun 15 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-53
- Allow ftp to create xferlog_t files in an xferlog_t directory
- Fix svirt separation on chr_file, and blk_file
* Mon Jun 15 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-52
- Allow kpropd to create krb5_lock_t files in krb5_conf_t directory
* Fri Jun 12 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-51
- Remove some privs from svirt to tighten the policy
* Fri Jun 12 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-50
- Allow udev to transition to bluetooth
* Thu Jun 4 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-49
- Add labeling for midori shared libraries
* Thu Jun 4 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-48
- Allow setroubleshoot to run mlocate
* Thu Jun 4 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-47
- Allow fprintd to read /proc
* Tue Jun 2 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-46
- Allow domains to check if the /selinux is mounted and search the directory
- Dontaudit rules are blocking audit events
* Tue Jun 2 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-45
- Add proper labeling for shorewall
* Mon Jun 1 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-44
- Add fish as a shell_exec_t
- Allow consolekit to search mountpoints
- Allow xdm_t to delete user_home_t
* Wed May 27 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-43
- Allow fprintd to list usbfs_t
- Add listing of mailman_data_t
- Allow hald to manage fusefs_t directories
- Allow groupadd to read usr_t symlinks
* Tue May 26 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-42
- New log file for vmware
- Allow xdm to setattr on user_tmp_t
* Thu May 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-41
- Allow sysadm_t to connect to virt stream
* Thu May 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.12-40
- Add context for /root/.spamassassin
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------