rpms/selinux-policy/F-12 policy-20100106.patch, 1.10, 1.11 selinux-policy.spec, 1.999, 1.1000
Miroslav Grepl
mgrepl at fedoraproject.org
Wed Jan 20 17:39:12 UTC 2010
Author: mgrepl
Update of /cvs/pkgs/rpms/selinux-policy/F-12
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv27816
Modified Files:
policy-20100106.patch selinux-policy.spec
Log Message:
- Fixes for afs
- Remove transtion from system_cronjob to gpg domain
policy-20100106.patch:
modules/apps/gpg.fc | 2
modules/apps/gpg.te | 5 -
modules/apps/mozilla.fc | 1
modules/apps/podsleuth.te | 1
modules/apps/sandbox.if | 46 +++++++++++++--
modules/apps/sandbox.te | 29 +++++----
modules/apps/wine.if | 4 +
modules/apps/wine.te | 14 ++++
modules/kernel/corenetwork.te.in | 4 -
modules/kernel/devices.fc | 2
modules/kernel/devices.if | 18 ++++++
modules/kernel/devices.te | 6 ++
modules/roles/unconfineduser.fc | 2
modules/roles/unconfineduser.te | 2
modules/roles/xguest.te | 2
modules/services/abrt.te | 1
modules/services/afs.te | 6 +-
modules/services/apache.if | 3 +
modules/services/apache.te | 2
modules/services/apcupsd.te | 2
modules/services/avahi.fc | 2
modules/services/cups.te | 1
modules/services/dovecot.te | 4 +
modules/services/fail2ban.if | 18 ++++++
modules/services/ftp.if | 37 ++++++++++++
modules/services/ftp.te | 114 +++++++++++++++++++++++++++++++++++++++
modules/services/git.te | 2
modules/services/kerberos.if | 1
modules/services/memcached.te | 14 +++-
modules/services/nagios.fc | 40 +++++++++++++
modules/services/nagios.te | 3 +
modules/services/openvpn.te | 1
modules/services/postfix.te | 5 +
modules/services/samba.te | 5 +
modules/services/sendmail.te | 2
modules/services/snmp.te | 4 -
modules/services/spamassassin.if | 18 ++++++
modules/services/ssh.te | 80 +--------------------------
modules/services/sssd.fc | 2
modules/services/sssd.if | 85 +++++++++++++++++------------
modules/services/sssd.te | 14 +++-
modules/services/tftp.te | 1
modules/services/virt.te | 4 +
modules/services/xserver.fc | 4 +
modules/services/xserver.te | 2
modules/system/hotplug.te | 4 +
modules/system/init.te | 5 +
modules/system/iscsi.fc | 2
modules/system/iscsi.te | 4 +
modules/system/libraries.fc | 7 ++
modules/system/miscfiles.if | 19 ++++++
modules/system/mount.te | 1
modules/system/selinuxutil.te | 1
modules/system/unconfined.if | 2
modules/system/userdomain.fc | 1
modules/system/userdomain.if | 18 ++++++
modules/system/xen.te | 6 ++
support/obj_perm_sets.spt | 2
users | 2
59 files changed, 530 insertions(+), 159 deletions(-)
Index: policy-20100106.patch
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-12/policy-20100106.patch,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -p -r1.10 -r1.11
--- policy-20100106.patch 19 Jan 2010 20:39:52 -0000 1.10
+++ policy-20100106.patch 20 Jan 2010 17:39:12 -0000 1.11
@@ -9,6 +9,21 @@ diff -b -B --ignore-all-space --exclude-
/usr/bin/gpg(2)? -- gen_context(system_u:object_r:gpg_exec_t,s0)
/usr/bin/gpg-agent -- gen_context(system_u:object_r:gpg_agent_exec_t,s0)
/usr/bin/kgpg -- gen_context(system_u:object_r:gpg_exec_t,s0)
+diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/gpg.te serefpolicy-3.6.32/policy/modules/apps/gpg.te
+--- nsaserefpolicy/policy/modules/apps/gpg.te 2010-01-18 18:24:22.605530382 +0100
++++ serefpolicy-3.6.32/policy/modules/apps/gpg.te 2010-01-20 16:53:29.744859902 +0100
+@@ -112,11 +112,6 @@
+
+ userdom_use_user_terminals(gpg_t)
+
+-optional_policy(`
+- cron_system_entry(gpg_t, gpg_exec_t)
+- cron_read_system_job_tmp_files(gpg_t)
+-')
+-
+ ########################################
+ #
+ # GPG helper local policy
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/mozilla.fc serefpolicy-3.6.32/policy/modules/apps/mozilla.fc
--- nsaserefpolicy/policy/modules/apps/mozilla.fc 2010-01-18 18:24:22.616539953 +0100
+++ serefpolicy-3.6.32/policy/modules/apps/mozilla.fc 2010-01-18 18:27:02.741544960 +0100
@@ -370,6 +385,34 @@ diff -b -B --ignore-all-space --exclude-
dev_read_urand(abrt_t)
dev_rw_sysfs(abrt_t)
dev_dontaudit_read_memory_dev(abrt_t)
+diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/afs.te serefpolicy-3.6.32/policy/modules/services/afs.te
+--- nsaserefpolicy/policy/modules/services/afs.te 2010-01-18 18:24:22.729540009 +0100
++++ serefpolicy-3.6.32/policy/modules/services/afs.te 2010-01-20 13:19:16.795611181 +0100
+@@ -1,5 +1,5 @@
+
+-policy_module(afs, 1.5.0)
++policy_module(afs, 1.5.1)
+
+ ########################################
+ #
+@@ -72,7 +72,7 @@
+ #
+
+ allow afs_t self:capability { sys_admin sys_nice sys_tty_config };
+-allow afs_t self:process setsched;
++allow afs_t self:process { fork setsched signal };
+ allow afs_t self:udp_socket create_socket_perms;
+ allow afs_t self:fifo_file rw_file_perms;
+ allow afs_t self:unix_stream_socket create_stream_socket_perms;
+@@ -105,6 +105,8 @@
+
+ miscfiles_read_localization(afs_t)
+
++sysnet_dns_name_resolve(afs_t)
++
+ ########################################
+ #
+ # AFS bossserver local policy
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apache.if serefpolicy-3.6.32/policy/modules/services/apache.if
--- nsaserefpolicy/policy/modules/services/apache.if 2010-01-18 18:24:22.736530563 +0100
+++ serefpolicy-3.6.32/policy/modules/services/apache.if 2010-01-18 18:27:02.756530665 +0100
Index: selinux-policy.spec
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-12/selinux-policy.spec,v
retrieving revision 1.999
retrieving revision 1.1000
diff -u -p -r1.999 -r1.1000
--- selinux-policy.spec 19 Jan 2010 20:39:52 -0000 1.999
+++ selinux-policy.spec 20 Jan 2010 17:39:12 -0000 1.1000
@@ -20,7 +20,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.6.32
-Release: 73%{?dist}
+Release: 74%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -456,6 +456,10 @@ exit 0
%endif
%changelog
+* Tue Wed 20 2010 Miroslav Grepl <mgrepl at redhat.com> 3.6.32-74
+- Fixes for afs
+- Remove transtion from system_cronjob to gpg domain
+
* Tue Jan 19 2010 Miroslav Grepl <mgrepl at redhat.com> 3.6.32-73
- Add labeling for /var/lib/avahi-autoipd directory
More information about the scm-commits
mailing list