[selinux-policy] - Allow cobblerd to list cobler appache content
Daniel J Walsh
dwalsh at fedoraproject.org
Fri Oct 15 15:35:31 UTC 2010
commit c849c843057983aca4a12167587f2b552578d6ce
Author: Dan Walsh <dwalsh at redhat.com>
Date: Fri Oct 15 11:35:17 2010 -0400
- Allow cobblerd to list cobler appache content
policy-F14.patch | 9 ++++++++-
selinux-policy.spec | 7 ++++---
2 files changed, 12 insertions(+), 4 deletions(-)
---
diff --git a/policy-F14.patch b/policy-F14.patch
index a168177..f52b337 100644
--- a/policy-F14.patch
+++ b/policy-F14.patch
@@ -16810,7 +16810,7 @@ index 293e08d..e3787fb 100644
+ ')
')
diff --git a/policy/modules/services/cobbler.te b/policy/modules/services/cobbler.te
-index 0258b48..c4d678b 100644
+index 0258b48..8fde016 100644
--- a/policy/modules/services/cobbler.te
+++ b/policy/modules/services/cobbler.te
@@ -6,13 +6,35 @@ policy_module(cobbler, 1.1.0)
@@ -17031,6 +17031,13 @@ index 0258b48..c4d678b 100644
')
########################################
+@@ -124,5 +231,6 @@ optional_policy(`
+ #
+
+ apache_content_template(cobbler)
++list_dirs_pattern(cobblerd_t, httpd_cobbler_content_t, httpd_cobbler_content_t)
+ manage_dirs_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
+ manage_files_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
diff --git a/policy/modules/services/consolekit.if b/policy/modules/services/consolekit.if
index 42c6bd7..ac43a92 100644
--- a/policy/modules/services/consolekit.if
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 493bce8..c28bcc9 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -21,12 +21,11 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.9.7
-Release: 2%{?dist}
+Release: 3%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
patch: policy-F14.patch
-patch2: telepathy_removal.patch
Source1: modules-targeted.conf
Source2: booleans-targeted.conf
Source3: Makefile.devel
@@ -204,7 +203,6 @@ Based off of reference policy: Checked out revision 2.20091117
%prep
%setup -n serefpolicy-%{version} -q
%patch -p1
-%patch2 -p1
%install
mkdir selinux_config
@@ -472,6 +470,9 @@ exit 0
%endif
%changelog
+* Fri Oct 15 2010 Dan Walsh <dwalsh at redhat.com> 3.9.7-3
+- Allow cobblerd to list cobler appache content
+
* Fri Oct 15 2010 Dan Walsh <dwalsh at redhat.com> 3.9.7-2
- Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps
More information about the scm-commits
mailing list