client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te | 2 ++
client/tools/osad/osad.spec | 5 ++++-
rel-eng/packages/osad | 2 +-
3 files changed, 7 insertions(+), 2 deletions(-)
New commits:
commit d2d599b643229dba78c1805cdd16992dac3e91a3
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Wed Aug 4 14:02:19 2010 +0200
Automatic commit of package [osad] release [5.9.38-1].
diff --git a/client/tools/osad/osad.spec b/client/tools/osad/osad.spec
index 9fa1595..a8b07ea 100644
--- a/client/tools/osad/osad.spec
+++ b/client/tools/osad/osad.spec
@@ -9,7 +9,7 @@ Group: System Environment/Daemons
License: GPLv2
URL:
https://fedorahosted.org/spacewalk
Source0:
https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz
-Version: 5.9.37
+Version: 5.9.38
Release: 1%{?dist}
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildArch: noarch
@@ -247,6 +247,9 @@ rpm -ql osa-dispatcher | xargs -n 1 /sbin/restorecon -rvi {}
# $Id$
%changelog
+* Wed Aug 04 2010 Jan Pazdziora 5.9.38-1
+- Allow osa-dispatcher to talk to PostgreSQL.
+
* Mon Jul 26 2010 Milan Zazrivec <mzazrivec(a)redhat.com> 5.9.37-1
- 618300 - default_db is no longer needed
diff --git a/rel-eng/packages/osad b/rel-eng/packages/osad
index e2c4912..308837b 100644
--- a/rel-eng/packages/osad
+++ b/rel-eng/packages/osad
@@ -1 +1 @@
-5.9.37-1 client/tools/osad/
+5.9.38-1 client/tools/osad/
commit 04f22abe2502aa4a8a6ac6466607f73cc1ba4534
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Wed Aug 4 14:00:58 2010 +0200
Allow osa-dispatcher to talk to PostgreSQL.
Addressing
avc: denied { name_connect } for pid=12935 comm="osa-dispatcher"
dest=5432 scontext=system_u:system_r:osa_dispatcher_t:s0
tcontext=system_u:object_r:postgresql_port_t:s0 tclass=tcp_socket
diff --git a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
index 3cb9c6b..a0cabd4 100644
--- a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
+++ b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
@@ -7,6 +7,7 @@ require {
type oracle_port_t;
type jabber_client_port_t;
type inaddr_any_node_t;
+ type postgresql_port_t;
}
type osa_dispatcher_t;
@@ -63,6 +64,7 @@ sysnet_dns_name_resolve(osa_dispatcher_t)
allow osa_dispatcher_t oracle_port_t:tcp_socket name_connect;
allow osa_dispatcher_t jabber_client_port_t:tcp_socket name_connect;
+allow osa_dispatcher_t postgresql_port_t:tcp_socket name_connect;
corenet_all_recvfrom_unlabeled(osa_dispatcher_t)
corenet_all_recvfrom_netlabel(osa_dispatcher_t)