rpms/selinux-policy/F-7 policy-20070501.patch,1.20,1.21

Daniel J Walsh (dwalsh) fedora-extras-commits at redhat.com
Thu Jun 14 14:41:18 UTC 2007


Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv11782

Modified Files:
	policy-20070501.patch 
Log Message:
* Wed Jun 6 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-15
- Allow udev to signal dhcpc


policy-20070501.patch:

Index: policy-20070501.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-7/policy-20070501.patch,v
retrieving revision 1.20
retrieving revision 1.21
diff -u -r1.20 -r1.21
--- policy-20070501.patch	14 Jun 2007 14:20:12 -0000	1.20
+++ policy-20070501.patch	14 Jun 2007 14:40:43 -0000	1.21
@@ -8626,7 +8626,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.if serefpolicy-2.6.4/policy/modules/system/unconfined.if
 --- nsaserefpolicy/policy/modules/system/unconfined.if	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/unconfined.if	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/unconfined.if	2007-06-14 10:40:13.000000000 -0400
 @@ -18,7 +18,7 @@
  	')
  
@@ -8670,7 +8670,7 @@
  		nscd_unconfined($1)
  	')
  
-@@ -556,3 +559,22 @@
+@@ -556,3 +559,39 @@
  
  	allow $1 unconfined_t:dbus acquire_svc;
  ')
@@ -8693,6 +8693,23 @@
 +	allow $1 unconfined_t:process ptrace;
 +')
 +
++########################################
++## <summary>
++##	Write unconfined users temporary files.
++## </summary>
++## <param name="domain">
++##	<summary>
++##	Domain allowed access.
++##	</summary>
++## </param>
++#
++interface(`unconfined_write_tmp_files',`
++	gen_require(`
++		type unconfined_tmp_t;
++	')
++
++	allow $1 unconfined_tmp_t:file { getattr write append };
++')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.te serefpolicy-2.6.4/policy/modules/system/unconfined.te
 --- nsaserefpolicy/policy/modules/system/unconfined.te	2007-05-07 14:51:02.000000000 -0400
 +++ serefpolicy-2.6.4/policy/modules/system/unconfined.te	2007-06-12 11:16:33.000000000 -0400




More information about the scm-commits mailing list