rpms/selinux-policy/devel policy-20070703.patch, 1.18, 1.19 selinux-policy.spec, 1.480, 1.481

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv1777

Modified Files:
	policy-20070703.patch selinux-policy.spec 
Log Message:
* Tue Jul 23 2007 Dan Walsh <dwalsh at redhat.com> 3.0.3-6
- Fix prelink to handle execmod


policy-20070703.patch:

Index: policy-20070703.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20070703.patch,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -r1.18 -r1.19
--- policy-20070703.patch	24 Jul 2007 19:43:20 -0000	1.18
+++ policy-20070703.patch	24 Jul 2007 20:47:24 -0000	1.19
@@ -4394,7 +4394,7 @@
 +/usr/local/Brother/inf(/.*)?	gen_context(system_u:object_r:cupsd_rw_etc_t,mls_systemhigh)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cups.te serefpolicy-3.0.3/policy/modules/services/cups.te
 --- nsaserefpolicy/policy/modules/services/cups.te	2007-07-03 07:06:27.000000000 -0400
-+++ serefpolicy-3.0.3/policy/modules/services/cups.te	2007-07-24 15:38:39.000000000 -0400
++++ serefpolicy-3.0.3/policy/modules/services/cups.te	2007-07-24 16:22:33.000000000 -0400
 @@ -81,12 +81,11 @@
  # /usr/lib/cups/backend/serial needs sys_admin(?!)
  allow cupsd_t self:capability { sys_admin dac_override dac_read_search kill setgid setuid fsetid net_bind_service fowner chown dac_override sys_resource sys_tty_config };
@@ -4441,7 +4441,7 @@
  files_read_usr_files(cupsd_t)
  # for /var/lib/defoma
 -files_search_var_lib(cupsd_t)
-+files_read_var_lib(cupsd_t)
++files_read_var_lib_files(cupsd_t)
  files_list_world_readable(cupsd_t)
  files_read_world_readable_files(cupsd_t)
  files_read_world_readable_symlinks(cupsd_t)
@@ -9748,7 +9748,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/selinuxutil.te serefpolicy-3.0.3/policy/modules/system/selinuxutil.te
 --- nsaserefpolicy/policy/modules/system/selinuxutil.te	2007-05-30 11:47:29.000000000 -0400
-+++ serefpolicy-3.0.3/policy/modules/system/selinuxutil.te	2007-07-17 15:46:25.000000000 -0400
++++ serefpolicy-3.0.3/policy/modules/system/selinuxutil.te	2007-07-24 16:27:49.000000000 -0400
 @@ -24,11 +24,9 @@
  files_type(selinux_config_t)
  
@@ -9791,7 +9791,7 @@
  role system_r types semanage_t;
  
 +type setsebool_exec_t;
-+application_domain(semanage_t, setsebool_exec_t)
++init_system_domain(semanage_t, setsebool_exec_t)
 +domain_interactive_fd(semanage_t)
 +
  type semanage_store_t;


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.480
retrieving revision 1.481
diff -u -r1.480 -r1.481
--- selinux-policy.spec	24 Jul 2007 14:39:01 -0000	1.480
+++ selinux-policy.spec	24 Jul 2007 20:47:24 -0000	1.481
@@ -293,7 +293,7 @@
 %relabel targeted
 exit 0
 
-%triggerpostun targeted -- selinux-policy-targeted <= 3.0.3-4
+%triggerpostun targeted -- selinux-policy-targeted <= 3.0.3-5
 setsebool -P use_nfs_home_dirs=1
 restorecon -R /root /etc/selinux/targeted 2> /dev/null
 semanage login -m -s "system_u" __default__ 2> /dev/null