rpms/selinux-policy/F-13 booleans-targeted.conf, 1.59, 1.60 modules-minimum.conf, 1.68, 1.69 modules-mls.conf, 1.81, 1.82 modules-targeted.conf, 1.177, 1.178 policy-F13.patch, 1.136, 1.137 selinux-policy.spec, 1.1037, 1.1038

Miroslav Grepl mgrepl at fedoraproject.org
Tue Jul 13 13:43:29 UTC 2010


Author: mgrepl

Update of /cvs/pkgs/rpms/selinux-policy/F-13
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv10731

Modified Files:
	booleans-targeted.conf modules-minimum.conf modules-mls.conf 
	modules-targeted.conf policy-F13.patch selinux-policy.spec 
Log Message:
- Allow netutils to read and write USB monitor devices
- Fix label for /rhev
- Add user_setrlimit boolean
- Allow initrc to manage virt lib files
- Add support for ebtables
- Add label for /bin/mksh
- Dontaudit aiccu sys_tty_config capability
- Add httpd_setrlimit boolean




Index: booleans-targeted.conf
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/booleans-targeted.conf,v
retrieving revision 1.59
retrieving revision 1.60
diff -u -p -r1.59 -r1.60
--- booleans-targeted.conf	27 May 2010 20:01:20 -0000	1.59
+++ booleans-targeted.conf	13 Jul 2010 13:43:27 -0000	1.60
@@ -158,6 +158,10 @@ use_samba_home_dirs = false
 # 
 user_ping = false
 
+# Allow user processes to change their priority 
+#
+user_setrlimit = true
+
 # allow host key based authentication
 # 
 allow_ssh_keysign = false


Index: modules-minimum.conf
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/modules-minimum.conf,v
retrieving revision 1.68
retrieving revision 1.69
diff -u -p -r1.68 -r1.69
--- modules-minimum.conf	15 Jun 2010 16:48:45 -0000	1.68
+++ modules-minimum.conf	13 Jul 2010 13:43:28 -0000	1.69
@@ -1729,11 +1729,11 @@ vhostmd = module
 wine = module
 
 # Layer: apps
-# Module: telepathy_sofiasip
+# Module: telepathy
 #
-# telepathy-sofiasip -  Telepathy connection manager for SIP
+# telepathy - Policy for Telepathy framework
 # 
-telepathysofiasip = module
+telepathy= module
 
 # Layer: admin
 # Module: tzdata


Index: modules-mls.conf
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/modules-mls.conf,v
retrieving revision 1.81
retrieving revision 1.82
diff -u -p -r1.81 -r1.82
--- modules-mls.conf	15 Jun 2010 16:48:45 -0000	1.81
+++ modules-mls.conf	13 Jul 2010 13:43:28 -0000	1.82
@@ -1806,11 +1806,11 @@ portreserve = module
 rpcbind = module
 
 # Layer: apps
-# Module: telepathy_sofiasip
+# Module: telepathy
 #
-# telepathy-sofiasip -  Telepathy connection manager for SIP
+# telepathy - Policy for Telepathy framework
 # 
-telepathysofiasip = module
+telepathy = module
 
 # Layer: apps
 # Module: vmware


Index: modules-targeted.conf
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/modules-targeted.conf,v
retrieving revision 1.177
retrieving revision 1.178
diff -u -p -r1.177 -r1.178
--- modules-targeted.conf	15 Jun 2010 16:48:45 -0000	1.177
+++ modules-targeted.conf	13 Jul 2010 13:43:28 -0000	1.178
@@ -1729,11 +1729,11 @@ vhostmd = module
 wine = module
 
 # Layer: apps
-# Module: telepathy_sofiasip
+# Module: telepathy
 #
-# telepathy-sofiasip -  Telepathy connection manager for SIP
+# telepathy - Policy for Telepathy framework
 # 
-telepathysofiasip = module
+telepathy = module
 
 # Layer: admin
 # Module: tzdata

policy-F13.patch:
 Makefile                                  |    2 
 policy/global_tunables                    |   24 
 policy/mls                                |    2 
 policy/modules/admin/accountsd.fc         |    4 
 policy/modules/admin/accountsd.if         |  164 ++
 policy/modules/admin/accountsd.te         |   64 +
 policy/modules/admin/acct.te              |    1 
 policy/modules/admin/alsa.te              |    2 
 policy/modules/admin/anaconda.te          |    4 
 policy/modules/admin/certwatch.te         |    2 
 policy/modules/admin/consoletype.if       |    3 
 policy/modules/admin/consoletype.te       |    3 
 policy/modules/admin/dmesg.te             |    6 
 policy/modules/admin/firstboot.te         |    7 
 policy/modules/admin/kismet.te            |    1 
 policy/modules/admin/logrotate.te         |   42 
 policy/modules/admin/logwatch.fc          |    7 
 policy/modules/admin/logwatch.te          |    8 
 policy/modules/admin/mcelog.te            |    2 
 policy/modules/admin/mrtg.te              |    1 
 policy/modules/admin/ncftool.fc           |    2 
 policy/modules/admin/ncftool.if           |   74 +
 policy/modules/admin/ncftool.te           |   79 +
 policy/modules/admin/netutils.fc          |    2 
 policy/modules/admin/netutils.if          |    1 
 policy/modules/admin/netutils.te          |   37 
 policy/modules/admin/prelink.fc           |    4 
 policy/modules/admin/prelink.if           |   28 
 policy/modules/admin/prelink.te           |   79 +
 policy/modules/admin/quota.te             |    1 
 policy/modules/admin/readahead.te         |    4 
 policy/modules/admin/rpm.fc               |   22 
 policy/modules/admin/rpm.if               |  387 ++++++
 policy/modules/admin/rpm.te               |  110 +
 policy/modules/admin/sectoolm.te          |    1 
 policy/modules/admin/shorewall.if         |   45 
 policy/modules/admin/shorewall.te         |    7 
 policy/modules/admin/shutdown.fc          |    5 
 policy/modules/admin/shutdown.if          |  136 ++
 policy/modules/admin/shutdown.te          |   63 +
 policy/modules/admin/su.if                |   11 
 policy/modules/admin/sudo.if              |   12 
 policy/modules/admin/tmpreaper.te         |   24 
 policy/modules/admin/usermanage.if        |   20 
 policy/modules/admin/usermanage.te        |   25 
 policy/modules/admin/vbetool.te           |    6 
 policy/modules/admin/vpn.if               |   20 
 policy/modules/admin/vpn.te               |    8 
 policy/modules/apps/awstats.te            |    1 
 policy/modules/apps/chrome.fc             |    3 
 policy/modules/apps/chrome.if             |   90 +
 policy/modules/apps/chrome.te             |   86 +
 policy/modules/apps/cpufreqselector.te    |    4 
 policy/modules/apps/execmem.fc            |   47 
 policy/modules/apps/execmem.if            |  110 +
 policy/modules/apps/execmem.te            |   11 
 policy/modules/apps/firewallgui.fc        |    3 
 policy/modules/apps/firewallgui.if        |   23 
 policy/modules/apps/firewallgui.te        |   66 +
 policy/modules/apps/gitosis.fc            |    2 
 policy/modules/apps/gitosis.if            |    2 
 policy/modules/apps/gitosis.te            |    7 
 policy/modules/apps/gnome.fc              |   24 
 policy/modules/apps/gnome.if              |  438 +++++++
 policy/modules/apps/gnome.te              |  118 ++
 policy/modules/apps/gpg.fc                |    1 
 policy/modules/apps/gpg.if                |  114 +-
 policy/modules/apps/gpg.te                |  157 ++
 policy/modules/apps/irc.fc                |    7 
 policy/modules/apps/irc.if                |   37 
 policy/modules/apps/irc.te                |  104 +
 policy/modules/apps/java.fc               |    7 
 policy/modules/apps/java.if               |    4 
 policy/modules/apps/java.te               |    9 
 policy/modules/apps/kdumpgui.fc           |    2 
 policy/modules/apps/kdumpgui.if           |    2 
 policy/modules/apps/kdumpgui.te           |   68 +
 policy/modules/apps/livecd.fc             |    2 
 policy/modules/apps/livecd.if             |  127 ++
 policy/modules/apps/livecd.te             |   34 
 policy/modules/apps/loadkeys.if           |    3 
 policy/modules/apps/loadkeys.te           |    6 
 policy/modules/apps/mono.if               |    5 
 policy/modules/apps/mozilla.fc            |    2 
 policy/modules/apps/mozilla.if            |   62 +
 policy/modules/apps/mozilla.te            |   22 
 policy/modules/apps/mplayer.if            |   36 
 policy/modules/apps/mplayer.te            |   29 
 policy/modules/apps/nsplugin.fc           |   10 
 policy/modules/apps/nsplugin.if           |  393 +++++++
 policy/modules/apps/nsplugin.te           |  299 +++++
 policy/modules/apps/openoffice.fc         |    4 
 policy/modules/apps/openoffice.if         |  129 ++
 policy/modules/apps/openoffice.te         |   17 
 policy/modules/apps/podsleuth.te          |    3 
 policy/modules/apps/pulseaudio.if         |   57 +
 policy/modules/apps/pulseaudio.te         |   11 
 policy/modules/apps/qemu.fc               |    4 
 policy/modules/apps/qemu.if               |   84 +
 policy/modules/apps/qemu.te               |   11 
 policy/modules/apps/sambagui.fc           |    1 
 policy/modules/apps/sambagui.if           |    2 
 policy/modules/apps/sambagui.te           |   66 +
 policy/modules/apps/sandbox.fc            |    1 
 policy/modules/apps/sandbox.if            |  314 +++++
 policy/modules/apps/sandbox.te            |  391 +++++++
 policy/modules/apps/seunshare.if          |   78 -
 policy/modules/apps/seunshare.te          |   35 
 policy/modules/apps/slocate.te            |    4 
 policy/modules/apps/telepathy.fc          |   14 
 policy/modules/apps/telepathy.if          |  204 +++
 policy/modules/apps/telepathy.te          |  302 +++++
 policy/modules/apps/userhelper.fc         |    1 
 policy/modules/apps/userhelper.if         |   56 +
 policy/modules/apps/userhelper.te         |   42 
 policy/modules/apps/vmware.if             |   19 
 policy/modules/apps/vmware.te             |   14 
 policy/modules/apps/wine.fc               |    1 
 policy/modules/apps/wine.if               |   11 
 policy/modules/apps/wine.te               |   22 
 policy/modules/apps/wm.if                 |   16 
 policy/modules/kernel/corecommands.fc     |   42 
 policy/modules/kernel/corecommands.if     |    2 
 policy/modules/kernel/corenetwork.te.in   |   37 
 policy/modules/kernel/devices.fc          |    9 
 policy/modules/kernel/devices.if          |  232 ++++
 policy/modules/kernel/devices.te          |   18 
 policy/modules/kernel/domain.if           |   63 +
 policy/modules/kernel/domain.te           |  113 ++
 policy/modules/kernel/files.fc            |   34 
 policy/modules/kernel/files.if            |  671 +++++++++++-
 policy/modules/kernel/files.te            |   15 
 policy/modules/kernel/filesystem.if       |  296 ++++-
 policy/modules/kernel/filesystem.te       |   11 
 policy/modules/kernel/kernel.if           |  107 +
 policy/modules/kernel/kernel.te           |   36 
 policy/modules/kernel/selinux.if          |   25 
 policy/modules/kernel/storage.fc          |    1 
 policy/modules/kernel/storage.if          |   22 
 policy/modules/kernel/terminal.if         |   29 
 policy/modules/roles/auditadm.te          |    3 
 policy/modules/roles/guest.te             |    8 
 policy/modules/roles/secadm.te            |    2 
 policy/modules/roles/staff.te             |  118 ++
 policy/modules/roles/sysadm.te            |  102 +
 policy/modules/roles/unconfineduser.fc    |   10 
 policy/modules/roles/unconfineduser.if    |  667 +++++++++++
 policy/modules/roles/unconfineduser.te    |  443 +++++++
 policy/modules/roles/unprivuser.te        |   23 
 policy/modules/roles/xguest.te            |   83 +
 policy/modules/services/abrt.fc           |   18 
 policy/modules/services/abrt.if           |  226 +++-
 policy/modules/services/abrt.te           |  181 ++-
 policy/modules/services/afs.te            |    5 
 policy/modules/services/aiccu.fc          |    6 
 policy/modules/services/aiccu.if          |  118 ++
 policy/modules/services/aiccu.te          |   72 +
 policy/modules/services/aisexec.fc        |   10 
 policy/modules/services/aisexec.if        |  106 +
 policy/modules/services/aisexec.te        |  114 ++
 policy/modules/services/apache.fc         |   19 
 policy/modules/services/apache.if         |  239 +++-
 policy/modules/services/apache.te         |  245 ++++
 policy/modules/services/apcupsd.te        |    4 
 policy/modules/services/arpwatch.te       |    4 
 policy/modules/services/asterisk.if       |   19 
 policy/modules/services/asterisk.te       |   45 
 policy/modules/services/automount.te      |    1 
 policy/modules/services/avahi.if          |    1 
 policy/modules/services/avahi.te          |    4 
 policy/modules/services/bind.if           |    5 
 policy/modules/services/bitlbee.te        |    7 
 policy/modules/services/bluetooth.if      |   26 
 policy/modules/services/boinc.fc          |    6 
 policy/modules/services/boinc.if          |  151 ++
 policy/modules/services/boinc.te          |  100 +
 policy/modules/services/bugzilla.fc       |    4 
 policy/modules/services/bugzilla.if       |   39 
 policy/modules/services/bugzilla.te       |   57 +
 policy/modules/services/cachefilesd.fc    |   29 
 policy/modules/services/cachefilesd.if    |   41 
 policy/modules/services/cachefilesd.te    |  147 ++
 policy/modules/services/ccs.te            |   10 
 policy/modules/services/certmonger.fc     |    6 
 policy/modules/services/certmonger.if     |  218 +++
 policy/modules/services/certmonger.te     |   75 +
 policy/modules/services/cgroup.fc         |   12 
 policy/modules/services/cgroup.if         |  244 ++++
 policy/modules/services/cgroup.te         |  102 +
 policy/modules/services/chronyd.if        |   86 +
 policy/modules/services/chronyd.te        |   10 
 policy/modules/services/clamav.te         |   23 
 policy/modules/services/clogd.fc          |    4 
 policy/modules/services/clogd.if          |   82 +
 policy/modules/services/clogd.te          |   65 +
 policy/modules/services/cmirrord.fc       |    6 
 policy/modules/services/cmirrord.if       |  118 ++
 policy/modules/services/cmirrord.te       |   63 +
 policy/modules/services/cobbler.fc        |    2 
 policy/modules/services/cobbler.if        |    9 
 policy/modules/services/cobbler.te        |   28 
 policy/modules/services/consolekit.fc     |    4 
 policy/modules/services/consolekit.if     |   39 
 policy/modules/services/consolekit.te     |   42 
 policy/modules/services/corosync.fc       |   15 
 policy/modules/services/corosync.if       |  108 +
 policy/modules/services/corosync.te       |  134 ++
 policy/modules/services/cron.fc           |    6 
 policy/modules/services/cron.if           |  119 +-
 policy/modules/services/cron.te           |  100 +
 policy/modules/services/cups.fc           |   15 
 policy/modules/services/cups.if           |    5 
 policy/modules/services/cups.te           |   68 +
 policy/modules/services/cvs.te            |    2 
 policy/modules/services/cyrus.te          |    2 
 policy/modules/services/dbus.if           |  107 +
 policy/modules/services/dbus.te           |   21 
 policy/modules/services/denyhosts.fc      |    7 
 policy/modules/services/denyhosts.if      |   87 +
 policy/modules/services/denyhosts.te      |   81 +
 policy/modules/services/devicekit.fc      |    8 
 policy/modules/services/devicekit.if      |   22 
 policy/modules/services/devicekit.te      |  101 +
 policy/modules/services/dhcp.te           |    4 
 policy/modules/services/djbdns.if         |   38 
 policy/modules/services/djbdns.te         |    8 
 policy/modules/services/dnsmasq.fc        |    2 
 policy/modules/services/dnsmasq.if        |    4 
 policy/modules/services/dnsmasq.te        |   22 
 policy/modules/services/dovecot.fc        |    6 
 policy/modules/services/dovecot.if        |    5 
 policy/modules/services/dovecot.te        |   54 
 policy/modules/services/exim.fc           |    3 
 policy/modules/services/exim.if           |   61 +
 policy/modules/services/exim.te           |    3 
 policy/modules/services/fail2ban.if       |   20 
 policy/modules/services/fail2ban.te       |    4 
 policy/modules/services/fprintd.te        |    2 
 policy/modules/services/ftp.fc            |    2 
 policy/modules/services/ftp.if            |   38 
 policy/modules/services/ftp.te            |  179 +++
 policy/modules/services/git.fc            |   11 
 policy/modules/services/git.if            |  526 +++++++++
 policy/modules/services/git.te            |  190 +++
 policy/modules/services/gnomeclock.if     |   21 
 policy/modules/services/gpsd.te           |    5 
 policy/modules/services/hal.if            |   22 
 policy/modules/services/hal.te            |   38 
 policy/modules/services/icecast.te        |    6 
 policy/modules/services/inn.te            |    1 
 policy/modules/services/kerberos.if       |    6 
 policy/modules/services/kerberos.te       |    8 
 policy/modules/services/ksmtuned.fc       |    2 
 policy/modules/services/ksmtuned.if       |    4 
 policy/modules/services/ksmtuned.te       |   13 
 policy/modules/services/ldap.fc           |    5 
 policy/modules/services/ldap.if           |   81 +
 policy/modules/services/ldap.te           |   13 
 policy/modules/services/lircd.te          |   24 
 policy/modules/services/memcached.if      |    1 
 policy/modules/services/milter.if         |   20 
 policy/modules/services/milter.te         |    8 
 policy/modules/services/modemmanager.te   |    9 
 policy/modules/services/mpd.fc            |   11 
 policy/modules/services/mpd.if            |  295 +++++
 policy/modules/services/mpd.te            |  112 ++
 policy/modules/services/mta.fc            |    2 
 policy/modules/services/mta.if            |   68 +
 policy/modules/services/mta.te            |   28 
 policy/modules/services/munin.fc          |   58 +
 policy/modules/services/munin.if          |   66 +
 policy/modules/services/munin.te          |  175 +++
 policy/modules/services/mysql.te          |    3 
 policy/modules/services/nagios.fc         |   83 +
 policy/modules/services/nagios.if         |  160 ++
 policy/modules/services/nagios.te         |  294 ++++-
 policy/modules/services/networkmanager.fc |   20 
 policy/modules/services/networkmanager.if |  125 ++
 policy/modules/services/networkmanager.te |  134 ++
 policy/modules/services/nis.fc            |   10 
 policy/modules/services/nis.if            |   81 +
 policy/modules/services/nis.te            |   23 
 policy/modules/services/nscd.if           |   20 
 policy/modules/services/nscd.te           |   29 
 policy/modules/services/nslcd.te          |    2 
 policy/modules/services/ntop.if           |  156 ++
 policy/modules/services/ntop.te           |   32 
 policy/modules/services/ntp.te            |    3 
 policy/modules/services/nut.te            |    4 
 policy/modules/services/nx.fc             |   12 
 policy/modules/services/nx.if             |   67 +
 policy/modules/services/nx.te             |   13 
 policy/modules/services/oddjob.fc         |    1 
 policy/modules/services/oddjob.if         |    1 
 policy/modules/services/oddjob.te         |    5 
 policy/modules/services/oident.te         |    1 
 policy/modules/services/openvpn.te        |   10 
 policy/modules/services/pegasus.te        |   28 
 policy/modules/services/piranha.fc        |   21 
 policy/modules/services/piranha.if        |  175 +++
 policy/modules/services/piranha.te        |  198 +++
 policy/modules/services/plymouthd.fc      |    9 
 policy/modules/services/plymouthd.if      |  322 +++++
 policy/modules/services/plymouthd.te      |  109 +
 policy/modules/services/policykit.fc      |    5 
 policy/modules/services/policykit.if      |   71 +
 policy/modules/services/policykit.te      |   86 +
 policy/modules/services/portreserve.fc    |    3 
 policy/modules/services/portreserve.if    |   55 
 policy/modules/services/portreserve.te    |    5 
 policy/modules/services/postfix.fc        |    3 
 policy/modules/services/postfix.if        |  282 ++++-
 policy/modules/services/postfix.te        |  154 ++
 policy/modules/services/ppp.te            |    4 
 policy/modules/services/procmail.fc       |    2 
 policy/modules/services/procmail.te       |   26 
 policy/modules/services/psad.if           |   26 
 policy/modules/services/psad.te           |    1 
 policy/modules/services/puppet.te         |    2 
 policy/modules/services/pyzor.fc          |    4 
 policy/modules/services/pyzor.if          |   47 
 policy/modules/services/pyzor.te          |   37 
 policy/modules/services/qpidd.fc          |    9 
 policy/modules/services/qpidd.if          |  236 ++++
 policy/modules/services/qpidd.te          |   61 +
 policy/modules/services/radius.te         |    2 
 policy/modules/services/razor.fc          |    1 
 policy/modules/services/razor.if          |   42 
 policy/modules/services/razor.te          |   32 
 policy/modules/services/rgmanager.fc      |   10 
 policy/modules/services/rgmanager.if      |  141 ++
 policy/modules/services/rgmanager.te      |  223 ++++
 policy/modules/services/rhcs.fc           |   23 
 policy/modules/services/rhcs.if           |  439 +++++++
 policy/modules/services/rhcs.te           |  244 ++++
 policy/modules/services/ricci.fc          |    3 
 policy/modules/services/ricci.if          |   62 +
 policy/modules/services/ricci.te          |   42 
 policy/modules/services/rlogin.fc         |    3 
 policy/modules/services/rlogin.te         |    1 
 policy/modules/services/rpc.if            |   21 
 policy/modules/services/rpc.te            |   16 
 policy/modules/services/rpcbind.if        |    2 
 policy/modules/services/rpcbind.te        |    4 
 policy/modules/services/rsync.if          |   61 -
 policy/modules/services/rsync.te          |   26 
 policy/modules/services/rtkit.if          |   21 
 policy/modules/services/rtkit.te          |    4 
 policy/modules/services/samba.fc          |    4 
 policy/modules/services/samba.if          |  134 ++
 policy/modules/services/samba.te          |  123 +-
 policy/modules/services/sasl.te           |    3 
 policy/modules/services/sendmail.fc       |    2 
 policy/modules/services/sendmail.if       |   84 +
 policy/modules/services/sendmail.te       |   20 
 policy/modules/services/setroubleshoot.fc |    2 
 policy/modules/services/setroubleshoot.if |  124 ++
 policy/modules/services/setroubleshoot.te |   91 +
 policy/modules/services/smartmon.te       |    2 
 policy/modules/services/smokeping.te      |    2 
 policy/modules/services/snmp.te           |    3 
 policy/modules/services/snort.te          |    4 
 policy/modules/services/spamassassin.fc   |   15 
 policy/modules/services/spamassassin.if   |  107 +
 policy/modules/services/spamassassin.te   |  141 ++
 policy/modules/services/squid.te          |   21 
 policy/modules/services/ssh.fc            |    6 
 policy/modules/services/ssh.if            |  158 ++
 policy/modules/services/ssh.te            |   56 -
 policy/modules/services/sssd.te           |    3 
 policy/modules/services/sysstat.te        |    4 
 policy/modules/services/tftp.if           |   19 
 policy/modules/services/tgtd.te           |    6 
 policy/modules/services/tor.te            |    3 
 policy/modules/services/tuned.fc          |    1 
 policy/modules/services/tuned.te          |   10 
 policy/modules/services/ucspitcp.te       |    5 
 policy/modules/services/usbmuxd.fc        |    2 
 policy/modules/services/varnishd.if       |   19 
 policy/modules/services/vhostmd.te        |    2 
 policy/modules/services/virt.fc           |    6 
 policy/modules/services/virt.if           |   78 +
 policy/modules/services/virt.te           |   99 +
 policy/modules/services/w3c.te            |    9 
 policy/modules/services/xserver.fc        |   61 -
 policy/modules/services/xserver.if        |  456 +++++++-
 policy/modules/services/xserver.te        |  425 ++++++-
 policy/modules/system/application.te      |   16 
 policy/modules/system/authlogin.fc        |    1 
 policy/modules/system/authlogin.if        |   56 -
 policy/modules/system/daemontools.if      |   62 +
 policy/modules/system/daemontools.te      |   26 
 policy/modules/system/fstools.fc          |    2 
 policy/modules/system/fstools.te          |   12 
 policy/modules/system/getty.te            |    2 
 policy/modules/system/hostname.te         |    7 
 policy/modules/system/hotplug.te          |    2 
 policy/modules/system/init.fc             |    3 
 policy/modules/system/init.if             |  148 ++
 policy/modules/system/init.te             |  215 +++
 policy/modules/system/ipsec.fc            |    1 
 policy/modules/system/ipsec.if            |   72 +
 policy/modules/system/ipsec.te            |   52 
 policy/modules/system/iptables.fc         |   10 
 policy/modules/system/iptables.if         |    4 
 policy/modules/system/iptables.te         |   27 
 policy/modules/system/iscsi.if            |   18 
 policy/modules/system/iscsi.te            |    2 
 policy/modules/system/libraries.fc        |  157 ++
 policy/modules/system/libraries.te        |    8 
 policy/modules/system/locallogin.te       |   40 
 policy/modules/system/logging.fc          |   16 
 policy/modules/system/logging.if          |   62 +
 policy/modules/system/logging.te          |   33 
 policy/modules/system/lvm.fc              |    2 
 policy/modules/system/lvm.if              |    2 
 policy/modules/system/lvm.te              |   21 
 policy/modules/system/miscfiles.fc        |    6 
 policy/modules/system/miscfiles.if        |    3 
 policy/modules/system/modutils.if         |   20 
 policy/modules/system/modutils.te         |   14 
 policy/modules/system/mount.fc            |    8 
 policy/modules/system/mount.if            |  163 ++
 policy/modules/system/mount.te            |  155 ++
 policy/modules/system/raid.te             |    1 
 policy/modules/system/selinuxutil.fc      |   17 
 policy/modules/system/selinuxutil.if      |  330 +++++
 policy/modules/system/selinuxutil.te      |  246 +---
 policy/modules/system/setrans.te          |    1 
 policy/modules/system/sosreport.fc        |    2 
 policy/modules/system/sosreport.if        |  131 ++
 policy/modules/system/sosreport.te        |  155 ++
 policy/modules/system/sysnetwork.fc       |    2 
 policy/modules/system/sysnetwork.if       |  171 ++-
 policy/modules/system/sysnetwork.te       |   31 
 policy/modules/system/udev.fc             |    1 
 policy/modules/system/udev.if             |   19 
 policy/modules/system/udev.te             |   13 
 policy/modules/system/unconfined.fc       |   14 
 policy/modules/system/unconfined.if       |  440 -------
 policy/modules/system/unconfined.te       |  224 ----
 policy/modules/system/userdomain.fc       |   12 
 policy/modules/system/userdomain.if       | 1671 ++++++++++++++++++++++++------
 policy/modules/system/userdomain.te       |   61 -
 policy/modules/system/xen.if              |    3 
 policy/modules/system/xen.te              |   15 
 policy/support/misc_patterns.spt          |    8 
 policy/support/obj_perm_sets.spt          |   38 
 policy/users                              |   17 
 449 files changed, 25693 insertions(+), 2245 deletions(-)

View full diff with command:
/usr/bin/cvs -n -f diff -kk -u -p -N -r 1.136 -r 1.137 policy-F13.patchIndex: policy-F13.patch
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/policy-F13.patch,v
retrieving revision 1.136
retrieving revision 1.137
diff -u -p -r1.136 -r1.137
--- policy-F13.patch	9 Jul 2010 10:57:23 -0000	1.136
+++ policy-F13.patch	13 Jul 2010 13:43:28 -0000	1.137
@@ -826,7 +826,7 @@ diff --exclude-from=exclude -N -u -r nsa
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/netutils.te serefpolicy-3.7.19/policy/modules/admin/netutils.te
 --- nsaserefpolicy/policy/modules/admin/netutils.te	2010-04-13 20:44:37.000000000 +0200
-+++ serefpolicy-3.7.19/policy/modules/admin/netutils.te	2010-06-14 11:19:18.240056520 +0200
++++ serefpolicy-3.7.19/policy/modules/admin/netutils.te	2010-07-13 11:08:40.256752721 +0200
 @@ -44,6 +44,7 @@
  allow netutils_t self:packet_socket create_socket_perms;
  allow netutils_t self:udp_socket create_socket_perms;
@@ -844,15 +844,18 @@ diff --exclude-from=exclude -N -u -r nsa
  
  corenet_all_recvfrom_unlabeled(netutils_t)
  corenet_all_recvfrom_netlabel(netutils_t)
-@@ -66,6 +69,7 @@
+@@ -66,6 +69,10 @@
  corenet_sendrecv_all_client_packets(netutils_t)
  corenet_udp_bind_generic_node(netutils_t)
  
++dev_rw_generic_usb_dev(netutils_t)
 +dev_read_usbmon_dev(netutils_t)
++dev_write_usbmon_dev(netutils_t)
++
  dev_read_sysfs(netutils_t)
  
  fs_getattr_xattr_fs(netutils_t)
-@@ -85,6 +89,7 @@
+@@ -85,6 +92,7 @@
  
  miscfiles_read_localization(netutils_t)
  
@@ -860,7 +863,7 @@ diff --exclude-from=exclude -N -u -r nsa
  userdom_use_user_terminals(netutils_t)
  userdom_use_all_users_fds(netutils_t)
  
-@@ -142,15 +147,27 @@
+@@ -142,15 +150,30 @@
  	init_dontaudit_use_fds(ping_t)
  
  	optional_policy(`
@@ -874,6 +877,9 @@ diff --exclude-from=exclude -N -u -r nsa
 +tunable_policy(`user_ping',`
 +	term_use_all_ttys(ping_t)
 +	term_use_all_ptys(ping_t)
++',`
++	term_dontaudit_use_all_ttys(ping_t)
++	term_dontaudit_use_all_ptys(ping_t)
 +')
 +
  optional_policy(`
@@ -888,16 +894,33 @@ diff --exclude-from=exclude -N -u -r nsa
  	pcmcia_use_cardmgr_fds(ping_t)
  ')
  
-@@ -211,3 +228,10 @@
+@@ -195,6 +218,7 @@
+ domain_use_interactive_fds(traceroute_t)
+ 
+ files_read_etc_files(traceroute_t)
++files_read_usr_files(traceroute_t)
+ files_dontaudit_search_var(traceroute_t)
+ 
+ init_use_fds(traceroute_t)
+@@ -205,9 +229,16 @@
+ 
+ miscfiles_read_localization(traceroute_t)
+ 
+-userdom_use_user_terminals(traceroute_t)
+-
+ #rules needed for nmap
  dev_read_rand(traceroute_t)
  dev_read_urand(traceroute_t)
- files_read_usr_files(traceroute_t)
+-files_read_usr_files(traceroute_t)
 +
 +term_use_all_terms(traceroute_t)
 +
 +tunable_policy(`user_ping',`
 +	term_use_all_ttys(traceroute_t)
 +	term_use_all_ptys(traceroute_t)
++',`
++	term_dontaudit_use_all_ttys(traceroute_t)
++	term_dontaudit_use_all_ptys(traceroute_t)
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/prelink.fc serefpolicy-3.7.19/policy/modules/admin/prelink.fc
 --- nsaserefpolicy/policy/modules/admin/prelink.fc	2010-04-13 20:44:37.000000000 +0200
@@ -1125,8 +1148,8 @@ diff --exclude-from=exclude -N -u -r nsa
  fs_dontaudit_read_ramfs_files(readahead_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/rpm.fc serefpolicy-3.7.19/policy/modules/admin/rpm.fc
 --- nsaserefpolicy/policy/modules/admin/rpm.fc	2010-04-13 20:44:37.000000000 +0200
-+++ serefpolicy-3.7.19/policy/modules/admin/rpm.fc	2010-05-28 09:41:59.957610702 +0200
-@@ -1,18 +1,19 @@
++++ serefpolicy-3.7.19/policy/modules/admin/rpm.fc	2010-07-13 15:40:51.058503014 +0200
+@@ -1,18 +1,20 @@
  
  /bin/rpm 			--	gen_context(system_u:object_r:rpm_exec_t,s0)
 +/usr/bin/rpm 			--	gen_context(system_u:object_r:rpm_exec_t,s0)
@@ -1146,13 +1169,14 @@ diff --exclude-from=exclude -N -u -r nsa
 -
 -/usr/share/yumex/yumex		--	gen_context(system_u:object_r:rpm_exec_t,s0)
 +/usr/sbin/packagekitd		--	gen_context(system_u:object_r:rpm_exec_t,s0)
++/usr/libexec/packagekitd	--	gen_context(system_u:object_r:rpm_exec_t,s0)
 +/usr/libexec/yumDBUSBackend.py	--	gen_context(system_u:object_r:rpm_exec_t,s0)
 +/usr/share/yumex/yumex-yum-backend --	gen_context(system_u:object_r:rpm_exec_t,s0)
 +/usr/share/yumex/yum_childtask\.py --	gen_context(system_u:object_r:rpm_exec_t,s0)
  
  ifdef(`distro_redhat', `
  /usr/bin/fedora-rmdevelrpms	--	gen_context(system_u:object_r:rpm_exec_t,s0)
-@@ -21,15 +22,23 @@
+@@ -21,15 +23,23 @@
  /usr/sbin/pup			--	gen_context(system_u:object_r:rpm_exec_t,s0)
  /usr/sbin/rhn_check		--	gen_context(system_u:object_r:rpm_exec_t,s0)
  /usr/sbin/up2date		--	gen_context(system_u:object_r:rpm_exec_t,s0)
@@ -2629,6 +2653,17 @@ diff --exclude-from=exclude -N -u -r nsa
 +optional_policy(`
 +	networkmanager_attach_tun_iface(vpnc_t)
 +')
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/awstats.te serefpolicy-3.7.19/policy/modules/apps/awstats.te
+--- nsaserefpolicy/policy/modules/apps/awstats.te	2010-04-13 20:44:37.000000000 +0200
++++ serefpolicy-3.7.19/policy/modules/apps/awstats.te	2010-07-13 09:35:08.639752643 +0200
+@@ -45,6 +45,7 @@
+ 
+ dev_read_urand(awstats_t)
+ 
++files_dontaudit_search_all_mountpoints(awstats_t)
+ files_read_etc_files(awstats_t)
+ # e.g. /usr/share/awstats/lang/awstats-en.txt
+ files_read_usr_files(awstats_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/chrome.fc serefpolicy-3.7.19/policy/modules/apps/chrome.fc
 --- nsaserefpolicy/policy/modules/apps/chrome.fc	1970-01-01 01:00:00.000000000 +0100
 +++ serefpolicy-3.7.19/policy/modules/apps/chrome.fc	2010-05-28 09:41:59.969610893 +0200
@@ -5531,8 +5566,8 @@ diff --exclude-from=exclude -N -u -r nsa
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/nsplugin.te serefpolicy-3.7.19/policy/modules/apps/nsplugin.te
 --- nsaserefpolicy/policy/modules/apps/nsplugin.te	1970-01-01 01:00:00.000000000 +0100
-+++ serefpolicy-3.7.19/policy/modules/apps/nsplugin.te	2010-05-28 09:41:59.994610930 +0200
-@@ -0,0 +1,297 @@
++++ serefpolicy-3.7.19/policy/modules/apps/nsplugin.te	2010-07-13 08:42:05.605502749 +0200
+@@ -0,0 +1,299 @@
 +
 +policy_module(nsplugin, 1.0.0)
 +
@@ -5780,6 +5815,8 @@ diff --exclude-from=exclude -N -u -r nsa
 +userdom_read_user_home_content_symlinks(nsplugin_config_t)
 +userdom_read_user_home_content_files(nsplugin_config_t)
 +userdom_dontaudit_search_admin_dir(nsplugin_config_t)
++userdom_dontaudit_read_user_tmp_files(nsplugin_config_t)
++userdom_dontaudit_write_user_tmp_files(nsplugin_config_t) 
 +
 +tunable_policy(`use_nfs_home_dirs',`
 +	fs_getattr_nfs(nsplugin_t)
@@ -7283,134 +7320,538 @@ diff --exclude-from=exclude -N -u -r nsa
  
  # getpwnam
  auth_use_nsswitch(locate_t)
-diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/telepathysofiasip.fc serefpolicy-3.7.19/policy/modules/apps/telepathysofiasip.fc
---- nsaserefpolicy/policy/modules/apps/telepathysofiasip.fc	1970-01-01 01:00:00.000000000 +0100
-+++ serefpolicy-3.7.19/policy/modules/apps/telepathysofiasip.fc	2010-05-28 09:42:00.009611133 +0200
-@@ -0,0 +1,2 @@
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/telepathy.fc serefpolicy-3.7.19/policy/modules/apps/telepathy.fc
+--- nsaserefpolicy/policy/modules/apps/telepathy.fc	1970-01-01 01:00:00.000000000 +0100
++++ serefpolicy-3.7.19/policy/modules/apps/telepathy.fc	2010-07-13 15:32:42.432515993 +0200
+@@ -0,0 +1,14 @@
++HOME_DIR/\.mission-control(/.*)?				gen_context(system_u:object_r:telepathy_mission_control_home_t, s0)
++HOME_DIR/\.cache/\.mc_connections		--		gen_context(system_u:object_r:telepathy_mission_control_cache_home_t, s0)
++HOME_DIR/\.cache/telepathy/gabble(/.*)?				gen_context(system_u:object_r:telepathy_gabble_cache_home_t, s0)
++
++/usr/libexec/mission-control-5			--		gen_context(system_u:object_r:telepathy_mission_control_exec_t, s0)
++
++/usr/libexec/telepathy-butterfly		--		gen_context(system_u:object_r:telepathy_msn_exec_t, s0)
++/usr/libexec/telepathy-gabble			--		gen_context(system_u:object_r:telepathy_gabble_exec_t, s0)
++/usr/libexec/telepathy-haze			--		gen_context(system_u:object_r:telepathy_msn_exec_t, s0)
++/usr/libexec/telepathy-idle			--		gen_context(system_u:object_r:telepathy_idle_exec_t, s0)
++/usr/libexec/telepathy-salut			--		gen_context(system_u:object_r:telepathy_salut_exec_t, s0)
++/usr/libexec/telepathy-sofiasip			--		gen_context(system_u:object_r:telepathy_sofiasip_exec_t, s0)
++/usr/libexec/telepathy-stream-engine		--		gen_context(system_u:object_r:telepathy_stream_engine_exec_t, s0)
++/usr/libexec/telepathy-sunshine			--		gen_context(system_u:object_r:telepathy_sunshine_exec_t, s0)
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/apps/telepathy.if serefpolicy-3.7.19/policy/modules/apps/telepathy.if
+--- nsaserefpolicy/policy/modules/apps/telepathy.if	1970-01-01 01:00:00.000000000 +0100
++++ serefpolicy-3.7.19/policy/modules/apps/telepathy.if	2010-07-13 15:32:42.433752902 +0200
+@@ -0,0 +1,204 @@
++
++## <summary>Telepathy framework.</summary>
++
++#######################################
++## <summary>
++##  Creates basic types for telepathy
++##  domain
++## </summary>
++## <param name="prefix">
++##  <summary>
++##  Prefix for the domain.
++##  </summary>
[...1935 lines suppressed...]
+@@ -1641,6 +1904,24 @@
  
  ########################################
  ## <summary>
@@ -39964,7 +40526,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ##	Do not audit attempts to set the
  ##	attributes of user home files.
  ## </summary>
-@@ -1692,10 +1969,30 @@
+@@ -1692,10 +1973,30 @@
  		type user_home_dir_t, user_home_t;
  	')
  
@@ -39995,7 +40557,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ########################################
  ## <summary>
  ##	Do not audit attempts to read user home files.
-@@ -1708,11 +2005,14 @@
+@@ -1708,11 +2009,14 @@
  #
  interface(`userdom_dontaudit_read_user_home_content_files',`
  	gen_require(`
@@ -40013,7 +40575,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
  
  ########################################
-@@ -1802,8 +2102,7 @@
+@@ -1802,8 +2106,7 @@
  		type user_home_dir_t, user_home_t;
  	')
  
@@ -40023,7 +40585,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
  
  ########################################
-@@ -1815,25 +2114,18 @@
+@@ -1815,25 +2118,18 @@
  ##	Domain allowed access.
  ##	</summary>
  ## </param>
@@ -40053,7 +40615,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ########################################
  ## <summary>
  ##	Do not audit attempts to execute user home files.
-@@ -1866,6 +2158,7 @@
+@@ -1866,6 +2162,7 @@
  interface(`userdom_manage_user_home_content_files',`
  	gen_require(`
  		type user_home_dir_t, user_home_t;
@@ -40061,7 +40623,7 @@ diff --exclude-from=exclude -N -u -r nsa
  	')
  
  	manage_files_pattern($1, user_home_t, user_home_t)
-@@ -2102,6 +2395,25 @@
+@@ -2102,6 +2399,25 @@
  
  ########################################
  ## <summary>
@@ -40087,7 +40649,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ##	Do not audit attempts to list user
  ##	temporary directories.
  ## </summary>
-@@ -2218,6 +2530,25 @@
+@@ -2218,6 +2534,25 @@
  
  ########################################
  ## <summary>
@@ -40113,7 +40675,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ##	Do not audit attempts to manage users
  ##	temporary files.
  ## </summary>
-@@ -2427,13 +2758,14 @@
+@@ -2427,13 +2762,14 @@
  	')
  
  	read_files_pattern($1, user_tmpfs_t, user_tmpfs_t)
@@ -40129,7 +40691,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ## </summary>
  ## <param name="domain">
  ##	<summary>
-@@ -2454,6 +2786,24 @@
+@@ -2454,6 +2790,24 @@
  
  ########################################
  ## <summary>
@@ -40154,7 +40716,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ##	Get the attributes of a user domain tty.
  ## </summary>
  ## <param name="domain">
-@@ -2747,6 +3097,25 @@
+@@ -2747,6 +3101,25 @@
  
  ########################################
  ## <summary>
@@ -40180,7 +40742,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ##	Execute bin_t in the unprivileged user domains. This
  ##	is an explicit transition, requiring the
  ##	caller to use setexeccon().
-@@ -2787,7 +3156,7 @@
+@@ -2787,7 +3160,7 @@
  
  	domain_entry_file_spec_domtrans($1, unpriv_userdomain)
  	allow unpriv_userdomain $1:fd use;
@@ -40189,7 +40751,7 @@ diff --exclude-from=exclude -N -u -r nsa
  	allow unpriv_userdomain $1:process sigchld;
  ')
  
-@@ -2803,11 +3172,13 @@
+@@ -2803,11 +3176,13 @@
  #
  interface(`userdom_search_user_home_content',`
  	gen_require(`
@@ -40205,7 +40767,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
  
  ########################################
-@@ -2944,7 +3315,7 @@
+@@ -2944,7 +3319,7 @@
  		type user_tmp_t;
  	')
  
@@ -40214,7 +40776,7 @@ diff --exclude-from=exclude -N -u -r nsa
  ')
  
  ########################################
-@@ -2981,6 +3352,7 @@
+@@ -2981,6 +3356,7 @@
  	')
  
  	read_files_pattern($1, userdomain, userdomain)
@@ -40222,7 +40784,7 @@ diff --exclude-from=exclude -N -u -r nsa
  	kernel_search_proc($1)
  ')
  
-@@ -3111,3 +3483,724 @@
+@@ -3111,3 +3487,724 @@
  
  	allow $1 userdomain:dbus send_msg;
  ')
@@ -40949,22 +41511,32 @@ diff --exclude-from=exclude -N -u -r nsa
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.te serefpolicy-3.7.19/policy/modules/system/userdomain.te
 --- nsaserefpolicy/policy/modules/system/userdomain.te	2010-04-13 20:44:37.000000000 +0200
-+++ serefpolicy-3.7.19/policy/modules/system/userdomain.te	2010-06-28 14:07:11.753148781 +0200
-@@ -29,13 +29,6 @@
++++ serefpolicy-3.7.19/policy/modules/system/userdomain.te	2010-07-13 08:35:19.145502757 +0200
+@@ -29,18 +29,18 @@
  
  ## <desc>
  ## <p>
 -## Allow users to read system messages.
--## </p>
--## </desc>
++## Allow user to r/w files on filesystems
++## that do not have extended attributes (FAT, CDROM, FLOPPY)
+ ## </p>
+ ## </desc>
 -gen_tunable(user_dmesg, false)
--
--## <desc>
--## <p>
- ## Allow user to r/w files on filesystems
- ## that do not have extended attributes (FAT, CDROM, FLOPPY)
++gen_tunable(user_rw_noexattrfile, false)
+ 
+ ## <desc>
+ ## <p>
+-## Allow user to r/w files on filesystems
+-## that do not have extended attributes (FAT, CDROM, FLOPPY)
++## Allow user processes to change their priority 
  ## </p>
-@@ -54,11 +47,20 @@
+ ## </desc>
+-gen_tunable(user_rw_noexattrfile, false)
++gen_tunable(user_setrlimit, false)
+ 
+ ## <desc>
+ ## <p>
+@@ -54,11 +54,20 @@
  # all user domains
  attribute userdomain;
  
@@ -40987,7 +41559,7 @@ diff --exclude-from=exclude -N -u -r nsa
  
  type user_home_dir_t alias { staff_home_dir_t sysadm_home_dir_t secadm_home_dir_t auditadm_home_dir_t unconfined_home_dir_t };
  fs_associate_tmpfs(user_home_dir_t)
-@@ -72,6 +74,7 @@
+@@ -72,6 +81,7 @@
  
  type user_home_t alias { staff_home_t sysadm_home_t secadm_home_t auditadm_home_t unconfined_home_t };
  typealias user_home_t alias { staff_untrusted_content_t sysadm_untrusted_content_t secadm_untrusted_content_t auditadm_untrusted_content_t unconfined_untrusted_content_t };
@@ -40995,7 +41567,7 @@ diff --exclude-from=exclude -N -u -r nsa
  userdom_user_home_content(user_home_t)
  fs_associate_tmpfs(user_home_t)
  files_associate_tmp(user_home_t)
-@@ -97,3 +100,40 @@
+@@ -97,3 +107,40 @@
  type user_tty_device_t alias { staff_tty_device_t sysadm_tty_device_t secadm_tty_device_t auditadm_tty_device_t unconfined_tty_device_t };
  dev_node(user_tty_device_t)
  ubac_constrained(user_tty_device_t)


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/pkgs/rpms/selinux-policy/F-13/selinux-policy.spec,v
retrieving revision 1.1037
retrieving revision 1.1038
diff -u -p -r1.1037 -r1.1038
--- selinux-policy.spec	9 Jul 2010 10:57:25 -0000	1.1037
+++ selinux-policy.spec	13 Jul 2010 13:43:29 -0000	1.1038
@@ -20,7 +20,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.7.19
-Release: 35%{?dist}
+Release: 36%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -469,6 +469,16 @@ exit 0
 %endif
 
 %changelog
+* Tue Jul 13 2010 Miroslav Grepl <mgrepl at redhat.com> 3.7.19-36
+- Allow netutils to read and write USB monitor devices
+- Fix label for /rhev
+- Add user_setrlimit boolean
+- Allow initrc to manage virt lib files
+- Add support for ebtables
+- Add label for /bin/mksh
+- Dontaudit aiccu sys_tty_config capability
+- Add httpd_setrlimit boolean
+
 * Fri Jul 9 2010 Miroslav Grepl <mgrepl at redhat.com> 3.7.19-35
 - Add label for /bin/yash
 - Fixes for rhcs and corosync policy



More information about the scm-commits mailing list