[libsepol] Additional fix for default transitioning labeling for semodule
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Dec 15 22:06:14 UTC 2011
commit f39b887832d291312afbefed556e420f2cc9b6bd
Author: Dan Walsh <dwalsh at redhat.com>
Date: Thu Dec 15 17:06:11 2011 -0500
Additional fix for default transitioning labeling for semodule
libsepol-rhat.patch | 22 ++++++++++++++++++----
libsepol.spec | 5 ++++-
2 files changed, 22 insertions(+), 5 deletions(-)
---
diff --git a/libsepol-rhat.patch b/libsepol-rhat.patch
index fc8ab46..cd9831e 100644
--- a/libsepol-rhat.patch
+++ b/libsepol-rhat.patch
@@ -152,10 +152,24 @@ index ee9675b..01d3231 100644
hashtab_map(cladatum->permissions.table, permission_copy_callback,
state);
diff --git a/libsepol/src/policydb.c b/libsepol/src/policydb.c
-index 136b450..3f0008b 100644
+index 136b450..a84de2f 100644
--- a/libsepol/src/policydb.c
+++ b/libsepol/src/policydb.c
-@@ -228,6 +228,13 @@ static struct policydb_compat_info policydb_compat[] = {
+@@ -151,6 +151,13 @@ static struct policydb_compat_info policydb_compat[] = {
+ .target_platform = SEPOL_TARGET_SELINUX,
+ },
+ {
++ .type = POLICY_KERN,
++ .version = POLICYDB_VERSION_NEW_OBJECT_DEFAULTS,
++ .sym_num = SYM_NUM,
++ .ocon_num = OCON_NODE6 + 1,
++ .target_platform = SEPOL_TARGET_SELINUX,
++ },
++ {
+ .type = POLICY_BASE,
+ .version = MOD_POLICYDB_VERSION_BASE,
+ .sym_num = SYM_NUM,
+@@ -228,6 +235,13 @@ static struct policydb_compat_info policydb_compat[] = {
.target_platform = SEPOL_TARGET_SELINUX,
},
{
@@ -169,7 +183,7 @@ index 136b450..3f0008b 100644
.type = POLICY_MOD,
.version = MOD_POLICYDB_VERSION_BASE,
.sym_num = SYM_NUM,
-@@ -304,6 +311,13 @@ static struct policydb_compat_info policydb_compat[] = {
+@@ -304,6 +318,13 @@ static struct policydb_compat_info policydb_compat[] = {
.ocon_num = 0,
.target_platform = SEPOL_TARGET_SELINUX,
},
@@ -183,7 +197,7 @@ index 136b450..3f0008b 100644
};
#if 0
-@@ -2064,6 +2078,18 @@ static int class_read(policydb_t * p, hashtab_t h, struct policy_file *fp)
+@@ -2064,6 +2085,18 @@ static int class_read(policydb_t * p, hashtab_t h, struct policy_file *fp)
goto bad;
}
diff --git a/libsepol.spec b/libsepol.spec
index 693fb33..d15499d 100644
--- a/libsepol.spec
+++ b/libsepol.spec
@@ -1,7 +1,7 @@
Summary: SELinux binary policy manipulation library
Name: libsepol
Version: 2.1.4
-Release: 3%{?dist}
+Release: 4%{?dist}
License: LGPLv2+
Group: System Environment/Libraries
Source: http://www.nsa.gov/selinux/archives/libsepol-%{version}.tgz
@@ -99,6 +99,9 @@ exit 0
/%{_lib}/libsepol.so.1
%changelog
+* Thu Dec 15 2011 Dan Walsh <dwalsh at redhat.com> - 2.1.4-4
+- Additional fix for default transitioning labeling for semodule
+
* Thu Dec 15 2011 Dan Walsh <dwalsh at redhat.com> - 2.1.4-3
- Add Eparis patch for handling of default transition labeling
More information about the scm-commits
mailing list