[selinux-policy: 2740/3172] Shorewall patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:03:50 UTC 2010


commit b9be5cccf1df8f2de3048e527e731bc354f1adb7
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Jun 18 14:23:46 2010 -0400

    Shorewall patch from Dan Walsh.
    
    Shorewall execs hostname

 policy/modules/admin/shorewall.te |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/admin/shorewall.te b/policy/modules/admin/shorewall.te
index e4b3773..a22e546 100644
--- a/policy/modules/admin/shorewall.te
+++ b/policy/modules/admin/shorewall.te
@@ -1,4 +1,4 @@
-policy_module(shorewall, 1.1.0)
+policy_module(shorewall, 1.1.1)
 
 ########################################
 #
@@ -89,6 +89,10 @@ sysnet_domtrans_ifconfig(shorewall_t)
 userdom_dontaudit_list_user_home_dirs(shorewall_t)
 
 optional_policy(`
+	hostname_exec(shorewall_t)
+')
+
+optional_policy(`
 	iptables_domtrans(shorewall_t)
 ')
 


More information about the scm-commits mailing list