rpms/icecream/F-12 icecream.spec,1.26,1.27 icecream.te,1.10,1.11

[Michal Schmidt]

Author: michich

Update of /cvs/pkgs/rpms/icecream/F-12
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv28385

Modified Files:
	icecream.spec icecream.te 
Log Message:
* Sun Jun 13 2010 Michal Schmidt <mschmidt at redhat.com> 0.9.5-5
- Mark UDP port 8765 as icecc_scheduler_port_t.



Index: icecream.spec
===================================================================
RCS file: /cvs/pkgs/rpms/icecream/F-12/icecream.spec,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- icecream.spec	12 Jun 2010 21:50:09 -0000	1.26
+++ icecream.spec	12 Jun 2010 22:13:40 -0000	1.27
@@ -11,7 +11,7 @@
 
 Name:		icecream
 Version:	0.9.5
-Release:	4%{?dist}
+Release:	5%{?dist}
 Summary:	Distributed compiler
 
 Group:		Development/Tools
@@ -192,7 +192,8 @@ for selinuxvariant in %{selinux_variants
 		%{_datadir}/selinux/${selinuxvariant}/icecream.pp 2>/dev/null ||:
 	semanage port -a -S ${selinuxvariant} -t iceccd_port_t -p tcp 10245 2>/dev/null ||:
 	semanage port -a -S ${selinuxvariant} -t icecc_scheduler_port_t -p tcp 8766 2>/dev/null ||:
-	semanage port -a -S ${selinuxvariant} -t icecc_scheduler_port_t -p tcp 8765 2>/dev/null ||:
+	# tcp 8765 is taken by LIRC. icecream.te knows it.
+	#semanage port -a -S ${selinuxvariant} -t icecc_scheduler_port_t -p tcp 8765 2>/dev/null ||:
 	semanage port -a -S ${selinuxvariant} -t icecc_scheduler_port_t -p udp 8765 2>/dev/null ||:
 	%relabel ${selinuxvariant}
 done
@@ -276,6 +277,9 @@ rm -rf %{buildroot}
 %{_libdir}/pkgconfig/icecc.pc
 
 %changelog
+* Sun Jun 13 2010 Michal Schmidt <mschmidt at redhat.com> 0.9.5-5
+- Mark UDP port 8765 as icecc_scheduler_port_t.
+
 * Sat Jun 12 2010 Michal Schmidt <mschmidt at redhat.com> 0.9.5-4
 - Require /usr/sbin/semanage for scriptlets. (BZ#581272)
 
@@ -284,6 +288,9 @@ rm -rf %{buildroot}
 - Avoid recursive rpm invocation (fixfiles -R).
 - Fixes: BZ#581272
 
+* Thu Mar 25 2010 Michal Schmidt <mschmidt at redhat.com> 0.9.5-2
+- SELinux policy fix (current selinux-policy assigns port 8765 to LIRC).
+
 * Thu Mar 25 2010 Michal Schmidt <mschmidt at redhat.com> 0.9.5-1
 - Upstream release 0.9.5.
   - new command 'icerun': serialize possibly resource-intensive tasks


Index: icecream.te
===================================================================
RCS file: /cvs/pkgs/rpms/icecream/F-12/icecream.te,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -p -r1.10 -r1.11
--- icecream.te	18 Aug 2009 21:46:08 -0000	1.10
+++ icecream.te	12 Jun 2010 22:13:40 -0000	1.11
@@ -1,5 +1,5 @@
 
-policy_module(icecream,0.1.4)
+policy_module(icecream,0.1.5)
 
 ########################################
 #
@@ -107,6 +107,7 @@ corenet_udp_sendrecv_all_ports(iceccd_t)
 corenet_tcp_bind_generic_node(iceccd_t)
 allow iceccd_t iceccd_port_t:tcp_socket { name_bind };
 allow iceccd_t icecc_scheduler_port_t:tcp_socket { name_connect };
+corenet_tcp_connect_lirc_port(iceccd_t)
 
 corecmd_exec_bin(iceccd_t)
 corecmd_read_bin_symlinks(iceccd_t)
@@ -207,7 +208,9 @@ corenet_udp_sendrecv_all_ports(icecc_sch
 corenet_tcp_bind_generic_node(icecc_scheduler_t)
 corenet_udp_bind_generic_node(icecc_scheduler_t)
 allow icecc_scheduler_t icecc_scheduler_port_t:tcp_socket { name_bind };
+corenet_tcp_bind_lirc_port(icecc_scheduler_t)
 allow icecc_scheduler_t icecc_scheduler_port_t:udp_socket { name_bind };
+corenet_udp_bind_lirc_port(icecc_scheduler_t)
 
 files_read_etc_files(icecc_scheduler_t)