rpms/selinux-policy/devel policy-20090105.patch,1.32,1.33

[Daniel J Walsh]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv7266

Modified Files:
	policy-20090105.patch 
Log Message:
* Wed Feb 4 2009 Dan Walsh <dwalsh at redhat.com> 3.6.4-2
- More fixes for devicekit


policy-20090105.patch:

Index: policy-20090105.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20090105.patch,v
retrieving revision 1.32
retrieving revision 1.33
diff -u -r1.32 -r1.33
--- policy-20090105.patch	4 Feb 2009 16:14:05 -0000	1.32
+++ policy-20090105.patch	4 Feb 2009 16:24:43 -0000	1.33
@@ -23477,7 +23477,7 @@
 +
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.te serefpolicy-3.6.4/policy/modules/services/xserver.te
 --- nsaserefpolicy/policy/modules/services/xserver.te	2009-01-19 11:06:49.000000000 -0500
-+++ serefpolicy-3.6.4/policy/modules/services/xserver.te	2009-02-04 10:49:48.000000000 -0500
++++ serefpolicy-3.6.4/policy/modules/services/xserver.te	2009-02-04 11:20:11.000000000 -0500
 @@ -34,6 +34,13 @@
  
  ## <desc>
@@ -24112,7 +24112,7 @@
  # X Colormaps
  # can use the default colormap
  allow x_domain rootwindow_t:x_colormap { read use add_color };
-@@ -972,13 +1129,35 @@
+@@ -972,17 +1129,51 @@
  allow xserver_unconfined_type { x_domain xserver_t }:x_resource *;
  allow xserver_unconfined_type xevent_type:{ x_event x_synthetic_event } *;
  
@@ -24152,13 +24152,7 @@
 +
 +tunable_policy(`allow_xserver_execmem',`
 +	allow xserver_t self:process { execheap execmem execstack };
- ')
- 
- #
-@@ -986,3 +1165,21 @@
- #
- allow xdm_t user_home_type:file unlink;
- ') dnl end TODO
++')
 +
 +# Hack to handle the problem of using the nvidia blobs
 +tunable_policy(`allow_execmem',`
@@ -24175,8 +24169,13 @@
 +
 +tunable_policy(`use_samba_home_dirs',`
 +	fs_append_cifs_files(xdmhomewriter)
-+')
-+
+ ')
+ 
+-#
+-# Wants to delete .xsession-errors file
+-#
+-allow xdm_t user_home_type:file unlink;
+-') dnl end TODO
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/zosremote.fc serefpolicy-3.6.4/policy/modules/services/zosremote.fc
 --- nsaserefpolicy/policy/modules/services/zosremote.fc	1969-12-31 19:00:00.000000000 -0500
 +++ serefpolicy-3.6.4/policy/modules/services/zosremote.fc	2009-02-03 22:57:29.000000000 -0500