rpms/selinux-policy/F-12 policy-20100106.patch,1.16,1.17
Miroslav Grepl
mgrepl at fedoraproject.org
Wed Jan 27 17:22:10 UTC 2010
Author: mgrepl
Update of /cvs/pkgs/rpms/selinux-policy/F-12
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv1723
Modified Files:
policy-20100106.patch
Log Message:
- Add label for /sbin/mke4fs
policy-20100106.patch:
modules/admin/smoltclient.te | 2
modules/admin/usermanage.te | 4 +
modules/apps/gnome.fc | 8 ++
modules/apps/gnome.if | 24 ++++----
modules/apps/gnome.te | 6 +-
modules/apps/gpg.fc | 2
modules/apps/gpg.te | 5 -
modules/apps/mozilla.fc | 1
modules/apps/nsplugin.fc | 1
modules/apps/podsleuth.te | 1
modules/apps/sandbox.if | 50 ++++++++++++++---
modules/apps/sandbox.te | 39 +++++++------
modules/apps/vmware.if | 18 ++++++
modules/apps/wine.if | 4 +
modules/apps/wine.te | 14 ++++
modules/kernel/corenetwork.te.in | 4 -
modules/kernel/devices.fc | 3 +
modules/kernel/devices.if | 36 ++++++++++++
modules/kernel/devices.te | 12 ++++
modules/roles/unconfineduser.fc | 2
modules/roles/unconfineduser.te | 2
modules/roles/xguest.te | 2
modules/services/abrt.te | 4 +
modules/services/afs.te | 6 +-
modules/services/apache.fc | 1
modules/services/apache.if | 26 ++++++++
modules/services/apache.te | 7 ++
modules/services/apcupsd.te | 2
modules/services/arpwatch.te | 1
modules/services/avahi.fc | 2
modules/services/cups.te | 2
modules/services/dovecot.te | 5 +
modules/services/fail2ban.if | 18 ++++++
modules/services/ftp.if | 37 ++++++++++++
modules/services/ftp.te | 114 +++++++++++++++++++++++++++++++++++++++
modules/services/git.fc | 3 +
modules/services/git.if | 8 +-
modules/services/git.te | 5 +
modules/services/kerberos.if | 2
modules/services/ldap.fc | 2
modules/services/mailman.te | 1
modules/services/memcached.te | 14 +++-
modules/services/mysql.te | 2
modules/services/nagios.fc | 40 +++++++++++++
modules/services/nagios.te | 7 ++
modules/services/nx.if | 18 ++++++
modules/services/openvpn.te | 4 +
modules/services/plymouth.te | 28 +++++----
modules/services/postfix.te | 5 +
modules/services/prelude.te | 2
modules/services/samba.te | 5 +
modules/services/sendmail.te | 2
modules/services/snmp.te | 4 -
modules/services/snort.te | 1
modules/services/spamassassin.if | 18 ++++++
modules/services/ssh.te | 80 +--------------------------
modules/services/sssd.fc | 2
modules/services/sssd.if | 85 +++++++++++++++++------------
modules/services/sssd.te | 14 +++-
modules/services/tftp.te | 1
modules/services/tgtd.te | 1
modules/services/virt.te | 4 +
modules/services/xserver.fc | 4 +
modules/services/xserver.te | 4 +
modules/system/fstools.fc | 1
modules/system/hotplug.te | 4 +
modules/system/init.te | 5 +
modules/system/ipsec.te | 2
modules/system/iscsi.fc | 2
modules/system/iscsi.te | 4 +
modules/system/libraries.fc | 15 ++++-
modules/system/locallogin.te | 5 +
modules/system/miscfiles.if | 37 ++++++++++++
modules/system/mount.te | 5 +
modules/system/selinuxutil.te | 1
modules/system/sysnetwork.te | 1
modules/system/unconfined.if | 2
modules/system/userdomain.fc | 1
modules/system/userdomain.if | 18 ++++++
modules/system/xen.te | 7 ++
support/obj_perm_sets.spt | 2
users | 2
82 files changed, 747 insertions(+), 198 deletions(-)
Index: policy-20100106.patch
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-12/policy-20100106.patch,v
retrieving revision 1.16
retrieving revision 1.17
diff -u -p -r1.16 -r1.17
--- policy-20100106.patch 27 Jan 2010 17:02:49 -0000 1.16
+++ policy-20100106.patch 27 Jan 2010 17:22:10 -0000 1.17
@@ -2048,6 +2048,17 @@ diff -b -B --ignore-all-space --exclude-
')
optional_policy(`
+diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/fstools.fc serefpolicy-3.6.32/policy/modules/system/fstools.fc
+--- nsaserefpolicy/policy/modules/system/fstools.fc 2010-01-18 18:24:22.930540014 +0100
++++ serefpolicy-3.6.32/policy/modules/system/fstools.fc 2010-01-27 18:13:10.349614395 +0100
+@@ -18,6 +18,7 @@
+ /sbin/make_reiser4 -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+ /sbin/mkdosfs -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+ /sbin/mke2fs -- gen_context(system_u:object_r:fsadm_exec_t,s0)
++/sbin/mke4fs -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+ /sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+ /sbin/mkraid -- gen_context(system_u:object_r:fsadm_exec_t,s0)
+ /sbin/mkreiserfs -- gen_context(system_u:object_r:fsadm_exec_t,s0)
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/hotplug.te serefpolicy-3.6.32/policy/modules/system/hotplug.te
--- nsaserefpolicy/policy/modules/system/hotplug.te 2009-09-16 16:01:19.000000000 +0200
+++ serefpolicy-3.6.32/policy/modules/system/hotplug.te 2010-01-18 18:27:02.780542727 +0100
@@ -2276,12 +2287,12 @@ diff -b -B --ignore-all-space --exclude-
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/sysnetwork.te serefpolicy-3.6.32/policy/modules/system/sysnetwork.te
--- nsaserefpolicy/policy/modules/system/sysnetwork.te 2010-01-18 18:24:22.971530073 +0100
-+++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 17:25:30.275614148 +0100
++++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 18:16:01.598614667 +0100
@@ -87,6 +87,7 @@
kernel_read_system_state(dhcpc_t)
kernel_read_network_state(dhcpc_t)
-+kernel_read_net_sysctls(dhcpc_t)
++kernel_read_search_sysctls(dhcpc_t)
kernel_read_kernel_sysctls(dhcpc_t)
kernel_request_load_module(dhcpc_t)
kernel_use_fds(dhcpc_t)
More information about the scm-commits
mailing list