[selinux-policy/f14/master] Allow iptables to read shorewall tmp files Change chfn and passwd to use auth_use_pam so they can s

[Daniel J Walsh]

commit a5f13c331453fd21cc3e10c105ea389c305b3fda
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Tue Sep 7 16:30:45 2010 -0400

     Allow iptables to read shorewall tmp files
    Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
    intd
    label vlc as an execmem_exec_t
    Lots of fixes for mozilla_plugin to run google vidio chat
    Allow telepath_msn to execute ldconfig and its own tmp files
    Fix labels on hugepages
    Allow mdadm to read files on /dev
    Remove permissive domains and change back to unconfined
    Allow freshclam to execute shell and bin_t
    Allow devicekit_power to transition to dhcpc
    Add boolean to allow icecast to connect to any port

 .gitignore          |    1 +
 selinux-policy.spec |   16 +++++++++++++++-
 sources             |    2 +-
 3 files changed, 17 insertions(+), 2 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 8632839..8fea9fc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -223,3 +223,4 @@ serefpolicy*
 /serefpolicy-3.9.0.tgz
 /serefpolicy-3.9.1.tgz
 /serefpolicy-3.9.2.tgz
+/serefpolicy-3.9.3.tgz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 7799e24..65e8e79 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 %define CHECKPOLICYVER 2.0.21-1
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 3.9.2
+Version: 3.9.3
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Base
@@ -469,6 +469,20 @@ exit 0
 %endif
 
 %changelog
+* Thu Aug 31 2010 Dan Walsh <dwalsh at redhat.com> 3.9.3-1
+ Allow iptables to read shorewall tmp files
+Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
+intd
+label vlc as an execmem_exec_t 
+Lots of fixes for mozilla_plugin to run google vidio chat
+Allow telepath_msn to execute ldconfig and its own tmp files
+Fix labels on hugepages
+Allow mdadm to read files on /dev
+Remove permissive domains and change back to unconfined
+Allow freshclam to execute shell and bin_t
+Allow devicekit_power to transition to dhcpc
+Add boolean to allow icecast to connect to any port
+
 * Thu Aug 31 2010 Dan Walsh <dwalsh at redhat.com> 3.9.2-1
 - Merge upstream fix of mmap_zero
 - Allow mount to write files in debugfs_t
diff --git a/sources b/sources
index 1d0d2b4..535c885 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f35b66c95c41e4c046727789b361a969  serefpolicy-3.9.2.tgz
+3e2c5dfff98731a4aee5548d3be54467  serefpolicy-3.9.3.tgz