rpms/selinux-policy/devel policy-F13.patch,1.35,1.36

Daniel J Walsh dwalsh at fedoraproject.org
Fri Jan 15 22:27:41 UTC 2010


Author: dwalsh

Update of /cvs/pkgs/rpms/selinux-policy/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv32367

Modified Files:
	policy-F13.patch 
Log Message:
* Fri Jan 15 2010 Dan Walsh <dwalsh at redhat.com> 3.7.7-3
- Fix git


policy-F13.patch:
 Makefile                                  |    2 
 policy/global_tunables                    |   24 
 policy/modules/admin/alsa.te              |    2 
 policy/modules/admin/anaconda.te          |    3 
 policy/modules/admin/brctl.te             |    2 
 policy/modules/admin/certwatch.te         |    2 
 policy/modules/admin/consoletype.te       |    2 
 policy/modules/admin/dmesg.fc             |    2 
 policy/modules/admin/dmesg.te             |   10 
 policy/modules/admin/firstboot.te         |    6 
 policy/modules/admin/kismet.te            |    5 
 policy/modules/admin/logrotate.te         |   28 
 policy/modules/admin/logwatch.te          |    8 
 policy/modules/admin/mrtg.te              |    1 
 policy/modules/admin/netutils.te          |    4 
 policy/modules/admin/portage.te           |    2 
 policy/modules/admin/prelink.fc           |    1 
 policy/modules/admin/prelink.if           |   23 
 policy/modules/admin/prelink.te           |   77 +
 policy/modules/admin/readahead.te         |    1 
 policy/modules/admin/rpm.fc               |   21 
 policy/modules/admin/rpm.if               |  344 ++++++
 policy/modules/admin/rpm.te               |   98 +
 policy/modules/admin/shorewall.fc         |    5 
 policy/modules/admin/shorewall.if         |   40 
 policy/modules/admin/shorewall.te         |    9 
 policy/modules/admin/smoltclient.fc       |    4 
 policy/modules/admin/smoltclient.if       |    1 
 policy/modules/admin/smoltclient.te       |   64 +
 policy/modules/admin/sudo.if              |   13 
 policy/modules/admin/tmpreaper.te         |   12 
 policy/modules/admin/usermanage.if        |   11 
 policy/modules/admin/usermanage.te        |   35 
 policy/modules/admin/vbetool.te           |   14 
 policy/modules/admin/vpn.te               |    4 
 policy/modules/apps/chrome.fc             |    2 
 policy/modules/apps/chrome.if             |   86 +
 policy/modules/apps/chrome.te             |   82 +
 policy/modules/apps/cpufreqselector.te    |    2 
 policy/modules/apps/execmem.fc            |   42 
 policy/modules/apps/execmem.if            |  103 +
 policy/modules/apps/execmem.te            |   11 
 policy/modules/apps/firewallgui.fc        |    3 
 policy/modules/apps/firewallgui.if        |   23 
 policy/modules/apps/firewallgui.te        |   62 +
 policy/modules/apps/gitosis.if            |   45 
 policy/modules/apps/gnome.fc              |   13 
 policy/modules/apps/gnome.if              |  203 +++
 policy/modules/apps/gnome.te              |  113 +
 policy/modules/apps/java.fc               |   23 
 policy/modules/apps/java.if               |  113 +
 policy/modules/apps/java.te               |   18 
 policy/modules/apps/kdumpgui.fc           |    2 
 policy/modules/apps/kdumpgui.if           |    2 
 policy/modules/apps/kdumpgui.te           |   64 +
 policy/modules/apps/livecd.fc             |    2 
 policy/modules/apps/livecd.if             |   52 
 policy/modules/apps/livecd.te             |   27 
 policy/modules/apps/loadkeys.te           |    6 
 policy/modules/apps/mono.fc               |    2 
 policy/modules/apps/mono.if               |  101 +
 policy/modules/apps/mono.te               |    9 
 policy/modules/apps/mozilla.fc            |    2 
 policy/modules/apps/mozilla.if            |   27 
 policy/modules/apps/mozilla.te            |   22 
 policy/modules/apps/nsplugin.fc           |   11 
 policy/modules/apps/nsplugin.if           |  321 +++++
 policy/modules/apps/nsplugin.te           |  296 +++++
 policy/modules/apps/openoffice.fc         |    3 
 policy/modules/apps/openoffice.if         |   92 +
 policy/modules/apps/openoffice.te         |   11 
 policy/modules/apps/podsleuth.te          |    2 
 policy/modules/apps/ptchown.if            |   24 
 policy/modules/apps/pulseaudio.fc         |    3 
 policy/modules/apps/pulseaudio.if         |   60 +
 policy/modules/apps/pulseaudio.te         |   19 
 policy/modules/apps/qemu.fc               |    4 
 policy/modules/apps/qemu.if               |  189 +++
 policy/modules/apps/qemu.te               |   83 +
 policy/modules/apps/sambagui.fc           |    1 
 policy/modules/apps/sambagui.if           |    2 
 policy/modules/apps/sambagui.te           |   61 +
 policy/modules/apps/sandbox.fc            |    1 
 policy/modules/apps/sandbox.if            |  223 +++
 policy/modules/apps/sandbox.te            |  343 ++++++
 policy/modules/apps/screen.if             |    1 
 policy/modules/apps/sectoolm.fc           |    6 
 policy/modules/apps/sectoolm.if           |    3 
 policy/modules/apps/sectoolm.te           |  118 ++
 policy/modules/apps/seunshare.if          |    2 
 policy/modules/apps/seunshare.te          |    3 
 policy/modules/apps/slocate.te            |    1 
 policy/modules/apps/wine.fc               |   24 
 policy/modules/apps/wine.if               |  118 ++
 policy/modules/apps/wine.te               |   50 
 policy/modules/kernel/corecommands.fc     |   33 
 policy/modules/kernel/corecommands.if     |   21 
 policy/modules/kernel/corenetwork.te.in   |   46 
 policy/modules/kernel/devices.fc          |    6 
 policy/modules/kernel/devices.if          |   90 +
 policy/modules/kernel/devices.te          |   12 
 policy/modules/kernel/domain.if           |  174 ++-
 policy/modules/kernel/domain.te           |  103 +
 policy/modules/kernel/files.fc            |    9 
 policy/modules/kernel/files.if            |  483 ++++++++
 policy/modules/kernel/files.te            |   12 
 policy/modules/kernel/filesystem.if       |  232 ++++
 policy/modules/kernel/filesystem.te       |    8 
 policy/modules/kernel/kernel.if           |   58 +
 policy/modules/kernel/kernel.te           |   27 
 policy/modules/kernel/selinux.if          |   25 
 policy/modules/kernel/storage.fc          |    1 
 policy/modules/kernel/storage.if          |    1 
 policy/modules/kernel/terminal.if         |   27 
 policy/modules/roles/guest.te             |    8 
 policy/modules/roles/staff.te             |  124 --
 policy/modules/roles/sysadm.te            |  125 --
 policy/modules/roles/unconfineduser.fc    |    8 
 policy/modules/roles/unconfineduser.if    |  667 +++++++++++
 policy/modules/roles/unconfineduser.te    |  445 +++++++
 policy/modules/roles/unprivuser.te        |  127 --
 policy/modules/roles/xguest.te            |   72 +
 policy/modules/services/abrt.fc           |    8 
 policy/modules/services/abrt.if           |  139 ++
 policy/modules/services/abrt.te           |  125 ++
 policy/modules/services/afs.fc            |    2 
 policy/modules/services/afs.te            |    2 
 policy/modules/services/aiccu.fc          |    5 
 policy/modules/services/aiccu.if          |  119 ++
 policy/modules/services/aiccu.te          |   41 
 policy/modules/services/aisexec.fc        |   12 
 policy/modules/services/aisexec.if        |  106 +
 policy/modules/services/aisexec.te        |  112 +
 policy/modules/services/amavis.te         |    1 
 policy/modules/services/apache.fc         |   54 
 policy/modules/services/apache.if         |  490 ++++++--
 policy/modules/services/apache.te         |  469 +++++++-
 policy/modules/services/apm.te            |    4 
 policy/modules/services/arpwatch.te       |    2 
 policy/modules/services/asterisk.if       |   53 
 policy/modules/services/asterisk.te       |   39 
 policy/modules/services/automount.te      |    2 
 policy/modules/services/avahi.te          |   13 
 policy/modules/services/bind.if           |   61 +
 policy/modules/services/bluetooth.te      |    1 
 policy/modules/services/ccs.fc            |    8 
 policy/modules/services/ccs.te            |   33 
 policy/modules/services/certmaster.fc     |    1 
 policy/modules/services/certmonger.fc     |    6 
 policy/modules/services/certmonger.if     |  217 +++
 policy/modules/services/certmonger.te     |   74 +
 policy/modules/services/cgroup.fc         |    7 
 policy/modules/services/cgroup.if         |   35 
 policy/modules/services/cgroup.te         |   87 +
 policy/modules/services/chronyd.fc        |   11 
 policy/modules/services/chronyd.if        |  105 +
 policy/modules/services/chronyd.te        |   67 +
 policy/modules/services/clamav.te         |    5 
 policy/modules/services/clogd.fc          |    4 
 policy/modules/services/clogd.if          |   98 +
 policy/modules/services/clogd.te          |   62 +
 policy/modules/services/cobbler.fc        |    9 
 policy/modules/services/cobbler.if        |  186 +++
 policy/modules/services/cobbler.te        |  127 ++
 policy/modules/services/consolekit.fc     |    3 
 policy/modules/services/consolekit.if     |   39 
 policy/modules/services/consolekit.te     |   23 
 policy/modules/services/corosync.fc       |   13 
 policy/modules/services/corosync.if       |  108 +
 policy/modules/services/corosync.te       |  108 +
 policy/modules/services/cron.fc           |    6 
 policy/modules/services/cron.if           |   74 +
 policy/modules/services/cron.te           |   84 +
 policy/modules/services/cups.fc           |   14 
 policy/modules/services/cups.te           |   57 -
 policy/modules/services/cvs.te            |    1 
 policy/modules/services/cyrus.te          |    2 
 policy/modules/services/dbus.if           |   53 
 policy/modules/services/dbus.te           |   31 
 policy/modules/services/denyhosts.fc      |    7 
 policy/modules/services/denyhosts.if      |   90 +
 policy/modules/services/denyhosts.te      |   72 +
 policy/modules/services/devicekit.fc      |    3 
 policy/modules/services/devicekit.if      |   20 
 policy/modules/services/devicekit.te      |   77 +
 policy/modules/services/dhcp.if           |   19 
 policy/modules/services/dnsmasq.fc        |    1 
 policy/modules/services/dnsmasq.if        |   38 
 policy/modules/services/dnsmasq.te        |   19 
 policy/modules/services/dovecot.fc        |    1 
 policy/modules/services/dovecot.te        |   32 
 policy/modules/services/exim.te           |    4 
 policy/modules/services/fail2ban.if       |   58 +
 policy/modules/services/fetchmail.te      |    1 
 policy/modules/services/fprintd.te        |    2 
 policy/modules/services/ftp.if            |   38 
 policy/modules/services/ftp.te            |  176 ++-
 policy/modules/services/git.fc            |   15 
 policy/modules/services/git.if            |  536 +++++++++
 policy/modules/services/git.te            |  178 +++
 policy/modules/services/gpsd.te           |    2 
 policy/modules/services/hal.fc            |    1 
 policy/modules/services/hal.if            |   18 
 policy/modules/services/hal.te            |   51 
 policy/modules/services/howl.te           |    2 
 policy/modules/services/kerberos.if       |    6 
 policy/modules/services/kerberos.te       |    3 
 policy/modules/services/ksmtuned.fc       |    5 
 policy/modules/services/ksmtuned.if       |   76 +
 policy/modules/services/ksmtuned.te       |   44 
 policy/modules/services/ktalk.te          |    1 
 policy/modules/services/ldap.fc           |    2 
 policy/modules/services/ldap.if           |   38 
 policy/modules/services/lircd.te          |   18 
 policy/modules/services/mailman.fc        |    8 
 policy/modules/services/memcached.te      |    2 
 policy/modules/services/modemmanager.te   |    5 
 policy/modules/services/mta.fc            |    2 
 policy/modules/services/mta.if            |   25 
 policy/modules/services/mta.te            |   15 
 policy/modules/services/munin.fc          |    3 
 policy/modules/services/munin.te          |    6 
 policy/modules/services/mysql.if          |   38 
 policy/modules/services/mysql.te          |   22 
 policy/modules/services/nagios.fc         |   79 +
 policy/modules/services/nagios.if         |  126 ++
 policy/modules/services/nagios.te         |  195 ++-
 policy/modules/services/networkmanager.fc |   16 
 policy/modules/services/networkmanager.if |   65 +
 policy/modules/services/networkmanager.te |  120 +-
 policy/modules/services/nis.fc            |    5 
 policy/modules/services/nis.if            |   87 +
 policy/modules/services/nis.te            |   13 
 policy/modules/services/nscd.if           |   20 
 policy/modules/services/nscd.te           |   23 
 policy/modules/services/ntop.fc           |    1 
 policy/modules/services/ntop.te           |   34 
 policy/modules/services/ntp.te            |    2 
 policy/modules/services/nut.fc            |   16 
 policy/modules/services/nut.if            |   58 +
 policy/modules/services/nut.te            |  188 +++
 policy/modules/services/nx.fc             |   10 
 policy/modules/services/nx.if             |   67 +
 policy/modules/services/nx.te             |   13 
 policy/modules/services/oddjob.if         |    1 
 policy/modules/services/oddjob.te         |    5 
 policy/modules/services/openvpn.te        |    7 
 policy/modules/services/pcscd.if          |   38 
 policy/modules/services/pegasus.te        |   28 
 policy/modules/services/plymouth.fc       |    5 
 policy/modules/services/plymouth.if       |  322 +++++
 policy/modules/services/plymouth.te       |   98 +
 policy/modules/services/policykit.fc      |    5 
 policy/modules/services/policykit.if      |   71 +
 policy/modules/services/policykit.te      |   67 -
 policy/modules/services/portreserve.te    |    3 
 policy/modules/services/postfix.fc        |    2 
 policy/modules/services/postfix.if        |  150 ++
 policy/modules/services/postfix.te        |  144 ++
 policy/modules/services/postgresql.fc     |   16 
 policy/modules/services/postgresql.if     |   60 +
 policy/modules/services/postgresql.te     |    9 
 policy/modules/services/ppp.if            |    6 
 policy/modules/services/ppp.te            |   17 
 policy/modules/services/prelude.te        |    1 
 policy/modules/services/procmail.te       |   12 
 policy/modules/services/puppet.te         |    2 
 policy/modules/services/pyzor.fc          |    4 
 policy/modules/services/pyzor.if          |   47 
 policy/modules/services/pyzor.te          |   37 
 policy/modules/services/razor.fc          |    1 
 policy/modules/services/razor.if          |   42 
 policy/modules/services/razor.te          |   32 
 policy/modules/services/rdisc.if          |   19 
 policy/modules/services/rgmanager.fc      |    8 
 policy/modules/services/rgmanager.if      |   59 +
 policy/modules/services/rgmanager.te      |  186 +++
 policy/modules/services/rhcs.fc           |   22 
 policy/modules/services/rhcs.if           |  367 ++++++
 policy/modules/services/rhcs.te           |  410 +++++++
 policy/modules/services/ricci.te          |   31 
 policy/modules/services/rpc.fc            |    4 
 policy/modules/services/rpc.if            |   45 
 policy/modules/services/rpc.te            |   27 
 policy/modules/services/rsync.fc          |    1 
 policy/modules/services/rsync.if          |   38 
 policy/modules/services/rsync.te          |   28 
 policy/modules/services/rtkit.if          |   20 
 policy/modules/services/rtkit.te          |    4 
 policy/modules/services/samba.fc          |    4 
 policy/modules/services/samba.if          |  138 ++
 policy/modules/services/samba.te          |  109 +
 policy/modules/services/sasl.te           |   15 
 policy/modules/services/sendmail.if       |   19 
 policy/modules/services/sendmail.te       |   17 
 policy/modules/services/setroubleshoot.fc |    2 
 policy/modules/services/setroubleshoot.if |  124 ++
 policy/modules/services/setroubleshoot.te |   83 +
 policy/modules/services/snmp.if           |   18 
 policy/modules/services/snort.te          |    9 
 policy/modules/services/spamassassin.fc   |   15 
 policy/modules/services/spamassassin.if   |  107 +
 policy/modules/services/spamassassin.te   |  139 ++
 policy/modules/services/squid.te          |    9 
 policy/modules/services/ssh.fc            |    2 
 policy/modules/services/ssh.if            |  207 +++
 policy/modules/services/ssh.te            |   87 +
 policy/modules/services/sssd.if           |   38 
 policy/modules/services/sssd.te           |    9 
 policy/modules/services/sysstat.te        |    5 
 policy/modules/services/telnet.te         |    1 
 policy/modules/services/tftp.if           |   38 
 policy/modules/services/tgtd.if           |   17 
 policy/modules/services/tor.te            |   13 
 policy/modules/services/tuned.te          |    1 
 policy/modules/services/uucp.te           |    5 
 policy/modules/services/vhostmd.fc        |    6 
 policy/modules/services/vhostmd.if        |  228 ++++
 policy/modules/services/vhostmd.te        |   84 +
 policy/modules/services/virt.fc           |   17 
 policy/modules/services/virt.if           |  210 +++
 policy/modules/services/virt.te           |  297 ++++-
 policy/modules/services/w3c.te            |    7 
 policy/modules/services/xserver.fc        |   49 
 policy/modules/services/xserver.if        |  362 ++++++
 policy/modules/services/xserver.te        |  366 +++++-
 policy/modules/services/zebra.if          |   20 
 policy/modules/system/application.te      |    7 
 policy/modules/system/authlogin.fc        |    9 
 policy/modules/system/authlogin.if        |  210 +++
 policy/modules/system/authlogin.te        |   11 
 policy/modules/system/fstools.fc          |    2 
 policy/modules/system/fstools.te          |    5 
 policy/modules/system/getty.te            |    7 
 policy/modules/system/hotplug.te          |    4 
 policy/modules/system/init.fc             |    7 
 policy/modules/system/init.if             |  164 ++
 policy/modules/system/init.te             |  304 ++++-
 policy/modules/system/ipsec.fc            |    4 
 policy/modules/system/ipsec.if            |   65 -
 policy/modules/system/ipsec.te            |   29 
 policy/modules/system/iptables.fc         |    9 
 policy/modules/system/iptables.te         |   15 
 policy/modules/system/iscsi.fc            |    4 
 policy/modules/system/iscsi.te            |   14 
 policy/modules/system/libraries.fc        |  218 +++
 policy/modules/system/libraries.if        |    5 
 policy/modules/system/libraries.te        |   18 
 policy/modules/system/locallogin.te       |   30 
 policy/modules/system/logging.fc          |   12 
 policy/modules/system/logging.if          |   20 
 policy/modules/system/logging.te          |   38 
 policy/modules/system/lvm.te              |   10 
 policy/modules/system/miscfiles.fc        |    3 
 policy/modules/system/miscfiles.if        |   52 
 policy/modules/system/miscfiles.te        |    3 
 policy/modules/system/modutils.te         |   20 
 policy/modules/system/mount.fc            |    7 
 policy/modules/system/mount.if            |   59 +
 policy/modules/system/mount.te            |   91 +
 policy/modules/system/raid.te             |    2 
 policy/modules/system/selinuxutil.fc      |   17 
 policy/modules/system/selinuxutil.if      |  309 +++++
 policy/modules/system/selinuxutil.te      |  230 +---
 policy/modules/system/sysnetwork.fc       |   14 
 policy/modules/system/sysnetwork.if       |  116 +-
 policy/modules/system/sysnetwork.te       |   79 +
 policy/modules/system/udev.if             |    1 
 policy/modules/system/udev.te             |   12 
 policy/modules/system/unconfined.fc       |   15 
 policy/modules/system/unconfined.if       |  445 -------
 policy/modules/system/unconfined.te       |  224 ---
 policy/modules/system/userdomain.fc       |    9 
 policy/modules/system/userdomain.if       | 1696 +++++++++++++++++++++++-------
 policy/modules/system/userdomain.te       |   51 
 policy/modules/system/xen.if              |   19 
 policy/modules/system/xen.te              |   19 
 policy/support/obj_perm_sets.spt          |   25 
 policy/users                              |   17 
 379 files changed, 21066 insertions(+), 2765 deletions(-)

Index: policy-F13.patch
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/devel/policy-F13.patch,v
retrieving revision 1.35
retrieving revision 1.36
diff -u -p -r1.35 -r1.36
--- policy-F13.patch	14 Jan 2010 21:49:18 -0000	1.35
+++ policy-F13.patch	15 Jan 2010 22:27:38 -0000	1.36
@@ -5867,7 +5867,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/corenetwork.te.in serefpolicy-3.7.7/policy/modules/kernel/corenetwork.te.in
 --- nsaserefpolicy/policy/modules/kernel/corenetwork.te.in	2010-01-11 09:40:36.000000000 -0500
-+++ serefpolicy-3.7.7/policy/modules/kernel/corenetwork.te.in	2010-01-11 14:18:47.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/kernel/corenetwork.te.in	2010-01-15 09:09:38.000000000 -0500
 @@ -65,6 +65,7 @@
  type server_packet_t, packet_type, server_packet_type;
  
@@ -5891,8 +5891,8 @@ diff --exclude-from=exclude -N -u -r nsa
  network_port(dccm, tcp,5679,s0, udp,5679,s0)
 -network_port(dhcpc, udp,68,s0)
 -network_port(dhcpd, udp,67,s0, tcp,647,s0, udp,647,s0, tcp,847,s0, udp,847,s0, tcp,7911,s0)
-+network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0, udp,547,s0, tcp, 547,s0)
-+network_port(dhcpd, udp,67,s0, udp,548,s0, tcp, 548,s0, tcp,647,s0, udp,647,s0, tcp,847,s0, udp,847,s0, tcp,7911,s0)
++network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0)
++network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0, tcp,647,s0, udp,647,s0, tcp,847,s0, udp,847,s0, tcp,7911,s0)
  network_port(dict, tcp,2628,s0)
  network_port(distccd, tcp,3632,s0)
  network_port(dns, udp,53,s0, tcp,53,s0)
@@ -11572,7 +11572,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apache.te serefpolicy-3.7.7/policy/modules/services/apache.te
 --- nsaserefpolicy/policy/modules/services/apache.te	2009-08-14 16:14:31.000000000 -0400
-+++ serefpolicy-3.7.7/policy/modules/services/apache.te	2010-01-11 09:53:58.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/services/apache.te	2010-01-15 14:47:16.000000000 -0500
 @@ -19,6 +19,8 @@
  # Declarations
  #
@@ -11764,7 +11764,7 @@ diff --exclude-from=exclude -N -u -r nsa
  manage_dirs_pattern(httpd_t, httpd_cache_t, httpd_cache_t)
  manage_files_pattern(httpd_t, httpd_cache_t, httpd_cache_t)
  manage_lnk_files_pattern(httpd_t, httpd_cache_t, httpd_cache_t)
-+files_var_filetrans(httpd_t, httpd_cache_t, dir)
++files_var_filetrans(httpd_t, httpd_cache_t, { file dir })
  
  # Allow the httpd_t to read the web servers config files
  allow httpd_t httpd_config_t:dir list_dir_perms;
@@ -16488,26 +16488,26 @@ diff --exclude-from=exclude -N -u -r nsa
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/git.fc serefpolicy-3.7.7/policy/modules/services/git.fc
 --- nsaserefpolicy/policy/modules/services/git.fc	2009-07-14 14:19:57.000000000 -0400
-+++ serefpolicy-3.7.7/policy/modules/services/git.fc	2010-01-14 15:37:45.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/services/git.fc	2010-01-15 16:56:35.000000000 -0500
 @@ -1,3 +1,12 @@
 -/var/cache/cgit(/.*)?		gen_context(system_u:object_r:httpd_git_script_rw_t,s0)
 -/var/lib/git(/.*)?		gen_context(system_u:object_r:httpd_git_content_t,s0)
 -/var/www/cgi-bin/cgit	--	gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
-+HOME_DIR/public_git(/.*)?			gen_context(system_u:object_r:gitd_session_content_t, s0)
-+HOME_DIR/\.gitconfig		--		gen_context(system_u:object_r:gitd_session_content_t, s0)
++HOME_DIR/public_git(/.*)?			gen_context(system_u:object_r:git_session_content_t, s0)
++HOME_DIR/\.gitconfig		--		gen_context(system_u:object_r:git_session_content_t, s0)
 +
-+/srv/git(/.*)?					gen_context(system_u:object_r:gitd_system_content_t, s0)
++/srv/git(/.*)?					gen_context(system_u:object_r:git_system_content_t, s0)
 +
 +/usr/libexec/git-core/git-daemon	--	gen_context(system_u:object_r:gitd_exec_t, s0)
 +
 +/var/cache/cgit(/.*)?				gen_context(system_u:object_r:httpd_git_script_rw_t,s0)
 +/var/www/cgi-bin/cgit		--		gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
 +
-+/var/lib/git(/.*)?				gen_context(system_u:object_r:gitd_system_content_t, s0)
++/var/lib/git(/.*)?				gen_context(system_u:object_r:git_system_content_t, s0)
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/git.if serefpolicy-3.7.7/policy/modules/services/git.if
 --- nsaserefpolicy/policy/modules/services/git.if	2009-07-14 14:19:57.000000000 -0400
-+++ serefpolicy-3.7.7/policy/modules/services/git.if	2010-01-14 16:07:07.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/services/git.if	2010-01-15 16:56:37.000000000 -0500
 @@ -1 +1,535 @@
 -## <summary>GIT revision control system</summary>
 +## <summary>Git - Fast Version Control System.</summary>
@@ -16537,7 +16537,7 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_session_role',`
 +	gen_require(`
-+		type gitd_session_t, gitd_exec_t;
++		type git_session_t, gitd_exec_t;
 +	')
 +
 +	########################################
@@ -16545,17 +16545,17 @@ diff --exclude-from=exclude -N -u -r nsa
 +	# Git daemon session shared declarations.
 +	#
 +
-+	role $1 types gitd_session_t;
++	role $1 types git_session_t;
 +
 +	########################################
 +	#
 +	# Git daemon session shared policy.
 +	#
 +
-+	domtrans_pattern($2, gitd_exec_t, gitd_session_t)
++	domtrans_pattern($2, gitd_exec_t, git_session_t)
 +
-+	allow $2 gitd_session_t:process { ptrace signal_perms };
-+	ps_process_pattern($2, gitd_session_t)
++	allow $2 git_session_t:process { ptrace signal_perms };
++	ps_process_pattern($2, git_session_t)
 +')
 +
 +########################################
@@ -16572,8 +16572,8 @@ diff --exclude-from=exclude -N -u -r nsa
 +template(`git_content_template',`
 +
 +	gen_require(`
-+		attribute gitd_system_content;
-+		attribute gitd_content;
++		attribute git_system_content;
++		attribute git_content;
 +	')
 +
 +	########################################
@@ -16581,8 +16581,8 @@ diff --exclude-from=exclude -N -u -r nsa
 +	# Git daemon content shared declarations.
 +	#
 +
-+	type gitd_$1_content_t, gitd_system_content, gitd_content;
-+	files_type(gitd_$1_content_t)
++	type git_$1_content_t, git_system_content, git_content;
++	files_type(git_$1_content_t)
 +')
 +
 +########################################
@@ -16643,13 +16643,13 @@ diff --exclude-from=exclude -N -u -r nsa
 +
 +	ssh_rw_stream_sockets($1_t)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_exec_cifs_files($1_t)
 +		fs_manage_cifs_dirs($1_t)
 +		fs_manage_cifs_files($1_t)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_exec_nfs_files($1_t)
 +		fs_manage_nfs_dirs($1_t)
 +		fs_manage_nfs_files($1_t)
@@ -16686,13 +16686,13 @@ diff --exclude-from=exclude -N -u -r nsa
 +	manage_files_pattern($1, $2, $2)
 +	files_search_var($1)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_exec_cifs_files($1)
 +		fs_manage_cifs_dirs($1)
 +		fs_manage_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_exec_nfs_files($1)
 +		fs_manage_nfs_dirs($1)
 +		fs_manage_nfs_files($1)
@@ -16713,12 +16713,12 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_rwx_all_content',`
 +	gen_require(`
-+		attribute gitd_content;
++		attribute git_content;
 +	')
 +
-+	exec_files_pattern($1, gitd_content, gitd_content)
-+	manage_dirs_pattern($1, gitd_content, gitd_content)
-+	manage_files_pattern($1, gitd_content, gitd_content)
++	exec_files_pattern($1, git_content, git_content)
++	manage_dirs_pattern($1, git_content, git_content)
++	manage_files_pattern($1, git_content, git_content)
 +	userdom_search_user_home_dirs($1)
 +	files_search_var($1)
 +
@@ -16734,13 +16734,13 @@ diff --exclude-from=exclude -N -u -r nsa
 +		fs_manage_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_exec_cifs_files($1)
 +		fs_manage_cifs_dirs($1)
 +		fs_manage_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_exec_nfs_files($1)
 +		fs_manage_nfs_dirs($1)
 +		fs_manage_nfs_files($1)
@@ -16761,21 +16761,21 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_rwx_all_system_content',`
 +	gen_require(`
-+		attribute gitd_system_content;
++		attribute git_system_content;
 +	')
 +
-+	exec_files_pattern($1, gitd_system_content, gitd_system_content)
-+	manage_dirs_pattern($1, gitd_system_content, gitd_system_content)
-+	manage_files_pattern($1, gitd_system_content, gitd_system_content)
++	exec_files_pattern($1, git_system_content, git_system_content)
++	manage_dirs_pattern($1, git_system_content, git_system_content)
++	manage_files_pattern($1, git_system_content, git_system_content)
 +	files_search_var($1)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_exec_cifs_files($1)
 +		fs_manage_cifs_dirs($1)
 +		fs_manage_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_exec_nfs_files($1)
 +		fs_manage_nfs_dirs($1)
 +		fs_manage_nfs_files($1)
@@ -16796,21 +16796,21 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_rwx_generic_system_content',`
 +	gen_require(`
-+		type gitd_system_content_t;
++		type git_system_content_t;
 +	')
 +
-+	exec_files_pattern($1, gitd_system_content_t, gitd_system_content_t)
-+	manage_dirs_pattern($1, gitd_system_content_t, gitd_system_content_t)
-+	manage_files_pattern($1, gitd_system_content_t, gitd_system_content_t)
++	exec_files_pattern($1, git_system_content_t, git_system_content_t)
++	manage_dirs_pattern($1, git_system_content_t, git_system_content_t)
++	manage_files_pattern($1, git_system_content_t, git_system_content_t)
 +	files_search_var($1)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_exec_cifs_files($1)
 +		fs_manage_cifs_dirs($1)
 +		fs_manage_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_exec_nfs_files($1)
 +		fs_manage_nfs_dirs($1)
 +		fs_manage_nfs_files($1)
@@ -16831,11 +16831,11 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_read_all_content_files',`
 +	gen_require(`
-+		attribute gitd_content;
++		attribute git_content;
 +	')
 +
-+	list_dirs_pattern($1, gitd_content, gitd_content)
-+	read_files_pattern($1, gitd_content, gitd_content)
++	list_dirs_pattern($1, git_content, git_content)
++	read_files_pattern($1, git_content, git_content)
 +	userdom_search_user_home_dirs($1)
 +	files_search_var($1)
 +
@@ -16849,12 +16849,12 @@ diff --exclude-from=exclude -N -u -r nsa
 +		fs_read_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_list_cifs($1)
 +		fs_read_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_list_nfs($1)
 +		fs_read_nfs_files($1)
 +	')
@@ -16874,11 +16874,11 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_read_session_content_files',`
 +	gen_require(`
-+		type gitd_session_content_t;
++		type git_session_content_t;
 +	')
 +
-+	list_dirs_pattern($1, gitd_session_content_t, gitd_session_content_t)
-+	read_files_pattern($1, gitd_session_content_t, gitd_session_content_t)
++	list_dirs_pattern($1, git_session_content_t, git_session_content_t)
++	read_files_pattern($1, git_session_content_t, git_session_content_t)
 +	userdom_search_user_home_dirs($1)
 +
 +	tunable_policy(`use_nfs_home_dirs',`
@@ -16906,19 +16906,19 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_read_all_system_content_files',`
 +	gen_require(`
-+		attribute gitd_system_content;
++		attribute git_system_content;
 +	')
 +
-+	list_dirs_pattern($1, gitd_system_content, gitd_system_content)
-+	read_files_pattern($1, gitd_system_content, gitd_system_content)
++	list_dirs_pattern($1, git_system_content, git_system_content)
++	read_files_pattern($1, git_system_content, git_system_content)
 +	files_search_var($1)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_list_cifs($1)
 +		fs_read_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_list_nfs($1)
 +		fs_read_nfs_files($1)
 +	')
@@ -16938,19 +16938,19 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_read_generic_system_content_files',`
 +	gen_require(`
-+		type gitd_system_content_t;
++		type git_system_content_t;
 +	')
 +
-+	list_dirs_pattern($1, gitd_system_content_t, gitd_system_content_t)
-+	read_files_pattern($1, gitd_system_content_t, gitd_system_content_t)
++	list_dirs_pattern($1, git_system_content_t, git_system_content_t)
++	read_files_pattern($1, git_system_content_t, git_system_content_t)
 +	files_search_var($1)
 +
-+	tunable_policy(`gitd_system_use_cifs',`
++	tunable_policy(`git_system_use_cifs',`
 +		fs_list_cifs($1)
 +		fs_read_cifs_files($1)
 +	')
 +
-+	tunable_policy(`gitd_system_use_nfs',`
++	tunable_policy(`git_system_use_nfs',`
 +		fs_list_nfs($1)
 +		fs_read_nfs_files($1)
 +	')
@@ -16970,11 +16970,11 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_relabel_all_content',`
 +	gen_require(`
-+		attribute gitd_content;
++		attribute git_content;
 +	')
 +
-+	relabel_dirs_pattern($1, gitd_content, gitd_content)
-+	relabel_files_pattern($1, gitd_content, gitd_content)
++	relabel_dirs_pattern($1, git_content, git_content)
++	relabel_files_pattern($1, git_content, git_content)
 +	userdom_search_user_home_dirs($1)
 +	files_search_var($1)
 +')
@@ -16993,11 +16993,11 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_relabel_all_system_content',`
 +	gen_require(`
-+		attribute gitd_system_content;
++		attribute git_system_content;
 +	')
 +
-+	relabel_dirs_pattern($1, gitd_system_content, gitd_system_content)
-+	relabel_files_pattern($1, gitd_system_content, gitd_system_content)
++	relabel_dirs_pattern($1, git_system_content, git_system_content)
++	relabel_files_pattern($1, git_system_content, git_system_content)
 +	files_search_var($1)
 +')
 +
@@ -17015,11 +17015,11 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_relabel_generic_system_content',`
 +	gen_require(`
-+		type gitd_system_content_t;
++		type git_system_content_t;
 +	')
 +
-+	relabel_dirs_pattern($1, gitd_system_content_t, gitd_system_content_t)
-+	relabel_files_pattern($1, gitd_system_content_t, gitd_system_content_t)
++	relabel_dirs_pattern($1, git_system_content_t, git_system_content_t)
++	relabel_files_pattern($1, git_system_content_t, git_system_content_t)
 +	files_search_var($1)
 +')
 +
@@ -17037,51 +17037,51 @@ diff --exclude-from=exclude -N -u -r nsa
 +#
 +interface(`git_relabel_session_content',`
 +	gen_require(`
-+		type gitd_session_content_t;
++		type git_session_content_t;
 +	')
 +
-+	relabel_dirs_pattern($1, gitd_session_content_t, gitd_session_content_t)
-+	relabel_files_pattern($1, gitd_session_content_t, gitd_session_content_t)
++	relabel_dirs_pattern($1, git_session_content_t, git_session_content_t)
++	relabel_files_pattern($1, git_session_content_t, git_session_content_t)
 +	userdom_search_user_home_dirs($1)
 +')
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/git.te serefpolicy-3.7.7/policy/modules/services/git.te
 --- nsaserefpolicy/policy/modules/services/git.te	2009-07-14 14:19:57.000000000 -0400
-+++ serefpolicy-3.7.7/policy/modules/services/git.te	2010-01-14 16:12:14.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/services/git.te	2010-01-15 17:11:34.000000000 -0500
 @@ -1,9 +1,181 @@
  
 -policy_module(git, 1.0)
-+policy_module(gitd, 1.0.3)
++policy_module(git, 1.0.3)
 +
 +## <desc>
 +## <p>
 +## Allow Git daemon system to search home directories.
 +## </p>
 +## </desc>
-+gen_tunable(gitd_system_enable_homedirs, false)
++gen_tunable(git_system_enable_homedirs, false)
 +
 +## <desc>
 +## <p>
 +## Allow Git daemon system to access cifs file systems.
 +## </p>
 +## </desc>
-+gen_tunable(gitd_system_use_cifs, false)
++gen_tunable(git_system_use_cifs, false)
 +
 +## <desc>
 +## <p>
 +## Allow Git daemon system to access nfs file systems.
 +## </p>
 +## </desc>
-+gen_tunable(gitd_system_use_nfs, false)
++gen_tunable(git_system_use_nfs, false)
 +
 +########################################
 +#
 +# Git daemon global private declarations.
 +#
 +
-+attribute gitd_domains;
-+attribute gitd_system_content;
-+attribute gitd_content;
++attribute git_domains;
++attribute git_system_content;
++attribute git_content;
 +
 +type gitd_exec_t;
 +
@@ -17090,13 +17090,13 @@ diff --exclude-from=exclude -N -u -r nsa
 +# Git daemon system private declarations.
 +#
 +
-+type gitd_system_t, gitd_domains;
-+inetd_service_domain(gitd_system_t, gitd_exec_t)
-+role system_r types gitd_system_t;
-+
-+type gitd_system_content_t, gitd_system_content, gitd_content;
-+files_type(gitd_system_content_t)
-+typealias gitd_system_content_t alias git_data_t;
++type git_system_t, git_domains;
++inetd_service_domain(git_system_t, gitd_exec_t)
++role system_r types git_system_t;
++
++type git_system_content_t, git_system_content, git_content;
++files_type(git_system_content_t)
++typealias git_system_content_t alias git_data_t;
 +
 +########################################
 +#
@@ -17109,84 +17109,84 @@ diff --exclude-from=exclude -N -u -r nsa
 +## tcp sockets to all unreserved ports.
 +## </p>
 +## </desc>
-+gen_tunable(gitd_session_bind_all_unreserved_ports, false)
++gen_tunable(git_session_bind_all_unreserved_ports, false)
 +
-+type gitd_session_t, gitd_domains;
-+application_domain(gitd_session_t, gitd_exec_t)
-+ubac_constrained(gitd_session_t)
++type git_session_t, git_domains;
++application_domain(git_session_t, gitd_exec_t)
++ubac_constrained(git_session_t)
 +
-+type gitd_session_content_t, gitd_content;
-+userdom_user_home_content(gitd_session_content_t)
++type git_session_content_t, git_content;
++userdom_user_home_content(git_session_content_t)
 +
 +########################################
 +#
 +# Git daemon global private policy.
 +#
 +
-+allow gitd_domains self:fifo_file rw_fifo_file_perms;
-+allow gitd_domains self:netlink_route_socket create_netlink_socket_perms;
-+allow gitd_domains self:tcp_socket { create_socket_perms listen };
-+allow gitd_domains self:udp_socket create_socket_perms;
-+allow gitd_domains self:unix_dgram_socket create_socket_perms;
++allow git_domains self:fifo_file rw_fifo_file_perms;
++allow git_domains self:netlink_route_socket create_netlink_socket_perms;
++allow git_domains self:tcp_socket { create_socket_perms listen };
++allow git_domains self:udp_socket create_socket_perms;
++allow git_domains self:unix_dgram_socket create_socket_perms;
 +
-+corenet_all_recvfrom_netlabel(gitd_domains)
-+corenet_all_recvfrom_unlabeled(gitd_domains)
++corenet_all_recvfrom_netlabel(git_domains)
++corenet_all_recvfrom_unlabeled(git_domains)
 +
-+corenet_tcp_bind_generic_node(gitd_domains)
++corenet_tcp_bind_generic_node(git_domains)
 +
-+corenet_tcp_sendrecv_generic_if(gitd_domains)
-+corenet_tcp_sendrecv_generic_node(gitd_domains)
-+corenet_tcp_sendrecv_generic_port(gitd_domains)
++corenet_tcp_sendrecv_generic_if(git_domains)
++corenet_tcp_sendrecv_generic_node(git_domains)
++corenet_tcp_sendrecv_generic_port(git_domains)
 +
-+corenet_tcp_bind_git_port(gitd_domains)
-+corenet_sendrecv_git_server_packets(gitd_domains)
++corenet_tcp_bind_git_port(git_domains)
++corenet_sendrecv_git_server_packets(git_domains)
 +
-+corecmd_exec_bin(gitd_domains)
++corecmd_exec_bin(git_domains)
 +
-+files_read_etc_files(gitd_domains)
-+files_read_usr_files(gitd_domains)
++files_read_etc_files(git_domains)
++files_read_usr_files(git_domains)
 +
-+fs_search_auto_mountpoints(gitd_domains)
++fs_search_auto_mountpoints(git_domains)
 +
-+kernel_read_system_state(gitd_domains)
++kernel_read_system_state(git_domains)
 +
-+auth_use_nsswitch(gitd_domains)
++auth_use_nsswitch(git_domains)
 +
-+logging_send_syslog_msg(gitd_domains)
++logging_send_syslog_msg(git_domains)
 +
-+miscfiles_read_localization(gitd_domains)
++miscfiles_read_localization(git_domains)
 +
 +########################################
 +#
 +# Git daemon system repository private policy.
 +#
 +
-+list_dirs_pattern(gitd_system_t, gitd_content, gitd_content)
-+read_files_pattern(gitd_system_t, gitd_content, gitd_content)
-+files_search_var(gitd_system_t)
++list_dirs_pattern(git_system_t, git_content, git_content)
++read_files_pattern(git_system_t, git_content, git_content)
++files_search_var(git_system_t)
 +
-+tunable_policy(`gitd_system_enable_homedirs', `
-+	userdom_search_user_home_dirs(gitd_system_t)
++tunable_policy(`git_system_enable_homedirs', `
++	userdom_search_user_home_dirs(git_system_t)
 +')
 +
-+tunable_policy(`gitd_system_enable_homedirs && use_nfs_home_dirs', `
-+	fs_list_nfs(gitd_system_t)
-+	fs_read_nfs_files(gitd_system_t)
++tunable_policy(`git_system_enable_homedirs && use_nfs_home_dirs', `
++	fs_list_nfs(git_system_t)
++	fs_read_nfs_files(git_system_t)
 +')
 +
-+tunable_policy(`gitd_system_enable_homedirs && use_samba_home_dirs', `
-+	fs_list_cifs(gitd_system_t)
-+	fs_read_cifs_files(gitd_system_t)
++tunable_policy(`git_system_enable_homedirs && use_samba_home_dirs', `
++	fs_list_cifs(git_system_t)
++	fs_read_cifs_files(git_system_t)
 +')
 +
-+tunable_policy(`gitd_system_use_cifs', `
-+	fs_list_cifs(gitd_system_t)
-+	fs_read_cifs_files(gitd_system_t)
++tunable_policy(`git_system_use_cifs', `
++	fs_list_cifs(git_system_t)
++	fs_read_cifs_files(git_system_t)
 +')
 +
-+tunable_policy(`gitd_system_use_nfs', `
-+	fs_list_nfs(gitd_system_t)
-+	fs_read_nfs_files(gitd_system_t)
++tunable_policy(`git_system_use_nfs', `
++	fs_list_nfs(git_system_t)
++	fs_read_nfs_files(git_system_t)
 +')
 +
 +########################################
@@ -17194,24 +17194,24 @@ diff --exclude-from=exclude -N -u -r nsa
 +# Git daemon session repository private policy.
 +#
 +
-+list_dirs_pattern(gitd_session_t, gitd_session_content_t, gitd_session_content_t)
-+read_files_pattern(gitd_session_t, gitd_session_content_t, gitd_session_content_t)
-+userdom_search_user_home_dirs(gitd_session_t)
++list_dirs_pattern(git_session_t, git_session_content_t, git_session_content_t)
++read_files_pattern(git_session_t, git_session_content_t, git_session_content_t)
++userdom_search_user_home_dirs(git_session_t)
 +
-+userdom_use_user_terminals(gitd_session_t)
++userdom_use_user_terminals(git_session_t)
 +
-+tunable_policy(`gitd_session_bind_all_unreserved_ports', `
-+	corenet_tcp_bind_all_unreserved_ports(gitd_session_t)
++tunable_policy(`git_session_bind_all_unreserved_ports', `
++	corenet_tcp_bind_all_unreserved_ports(git_session_t)
 +')
 +
 +tunable_policy(`use_nfs_home_dirs', `
-+	fs_list_nfs(gitd_session_t)
-+	fs_read_nfs_files(gitd_session_t)
++	fs_list_nfs(git_session_t)
++	fs_read_nfs_files(git_session_t)
 +')
 +
 +tunable_policy(`use_samba_home_dirs', `
-+	fs_list_cifs(gitd_session_t)
-+	fs_read_cifs_files(gitd_session_t)
++	fs_list_cifs(git_session_t)
++	fs_read_cifs_files(git_session_t)
 +')
 +
 +########################################
@@ -17231,8 +17231,8 @@ diff --exclude-from=exclude -N -u -r nsa
  #
  
 -apache_content_template(git)
-+git_role_template(git_shell)
-+gen_user(git_shell_u, user, git_shell_r, s0, s0)
++#git_role_template(git_shell)
++#gen_user(git_shell_u, user, git_shell_r, s0, s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/gpsd.te serefpolicy-3.7.7/policy/modules/services/gpsd.te
 --- nsaserefpolicy/policy/modules/services/gpsd.te	2010-01-07 14:53:53.000000000 -0500
 +++ serefpolicy-3.7.7/policy/modules/services/gpsd.te	2010-01-11 09:53:58.000000000 -0500
@@ -25697,7 +25697,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ## <param name="domain">
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/sssd.te serefpolicy-3.7.7/policy/modules/services/sssd.te
 --- nsaserefpolicy/policy/modules/services/sssd.te	2010-01-07 14:53:53.000000000 -0500
-+++ serefpolicy-3.7.7/policy/modules/services/sssd.te	2010-01-11 09:53:58.000000000 -0500
++++ serefpolicy-3.7.7/policy/modules/services/sssd.te	2010-01-15 17:18:18.000000000 -0500
 @@ -26,8 +26,8 @@
  #
  # sssd local policy
@@ -25723,7 +25723,7 @@ diff --exclude-from=exclude -N -u -r nsa
  
  miscfiles_read_localization(sssd_t)
  
-+userdom_manage_tmp_role(system_t, sssd_t)
++userdom_manage_tmp_role(system_r, sssd_t)
 +
  optional_policy(`
  	dbus_system_bus_client(sssd_t)



More information about the scm-commits mailing list