[selinux-policy/f14/master] - Allow cobblerd to list cobler appache content
Daniel J Walsh
dwalsh at fedoraproject.org
Fri Oct 15 15:35:31 UTC 2010
commit 637f9e1fa320b656a4c374c2dd6dc66ff480775b
Author: Dan Walsh <dwalsh at redhat.com>
Date: Fri Oct 15 11:35:23 2010 -0400
- Allow cobblerd to list cobler appache content
policy-F14.patch | 9 ++++++++-
selinux-policy.spec | 5 ++++-
2 files changed, 12 insertions(+), 2 deletions(-)
---
diff --git a/policy-F14.patch b/policy-F14.patch
index a168177..f52b337 100644
--- a/policy-F14.patch
+++ b/policy-F14.patch
@@ -16810,7 +16810,7 @@ index 293e08d..e3787fb 100644
+ ')
')
diff --git a/policy/modules/services/cobbler.te b/policy/modules/services/cobbler.te
-index 0258b48..c4d678b 100644
+index 0258b48..8fde016 100644
--- a/policy/modules/services/cobbler.te
+++ b/policy/modules/services/cobbler.te
@@ -6,13 +6,35 @@ policy_module(cobbler, 1.1.0)
@@ -17031,6 +17031,13 @@ index 0258b48..c4d678b 100644
')
########################################
+@@ -124,5 +231,6 @@ optional_policy(`
+ #
+
+ apache_content_template(cobbler)
++list_dirs_pattern(cobblerd_t, httpd_cobbler_content_t, httpd_cobbler_content_t)
+ manage_dirs_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
+ manage_files_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
diff --git a/policy/modules/services/consolekit.if b/policy/modules/services/consolekit.if
index 42c6bd7..ac43a92 100644
--- a/policy/modules/services/consolekit.if
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 493bce8..42eedb8 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -21,7 +21,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.9.7
-Release: 2%{?dist}
+Release: 3%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -472,6 +472,9 @@ exit 0
%endif
%changelog
+* Fri Oct 15 2010 Dan Walsh <dwalsh at redhat.com> 3.9.7-3
+- Allow cobblerd to list cobler appache content
+
* Fri Oct 15 2010 Dan Walsh <dwalsh at redhat.com> 3.9.7-2
- Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps
More information about the scm-commits
mailing list