[selinux-policy] MCS fixes quota fixes

[Daniel J Walsh]

commit 55e8d8e7cfdc1756bbe11b7d064168f461142bc8
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Fri Nov 4 15:36:01 2011 -0400

    MCS fixes
    quota fixes

 execmem.patch |   35 +++++++++++++++++++++++++++++++++++
 1 files changed, 35 insertions(+), 0 deletions(-)
---
diff --git a/execmem.patch b/execmem.patch
index 637ff4d..1c255d2 100644
--- a/execmem.patch
+++ b/execmem.patch
@@ -419,3 +419,38 @@ diff -up serefpolicy-3.10.0/policy/modules/system/userdomain.if~ serefpolicy-3.1
 +
 +	typeattribute $1 common_userdomain;
 +')
+diff -up serefpolicy-3.10.0/policy/modules/roles/staff.te~ serefpolicy-3.10.0/policy/modules/roles/staff.te
+--- serefpolicy-3.10.0/policy/modules/roles/staff.te~	2011-11-04 15:03:32.518287238 -0400
++++ serefpolicy-3.10.0/policy/modules/roles/staff.te	2011-11-04 15:34:10.747481773 -0400
+@@ -329,3 +329,5 @@ ifndef(`distro_redhat',`
+ tunable_policy(`allow_execmod',`
+ 	userdom_execmod_user_home_files(staff_usertype)
+ ')
++
++userdom_common_user(staff_execmem_t)
+diff -up serefpolicy-3.10.0/policy/modules/roles/sysadm.te~ serefpolicy-3.10.0/policy/modules/roles/sysadm.te
+--- serefpolicy-3.10.0/policy/modules/roles/sysadm.te~	2011-11-04 15:03:32.812288344 -0400
++++ serefpolicy-3.10.0/policy/modules/roles/sysadm.te	2011-11-04 15:35:11.552671224 -0400
+@@ -583,3 +583,5 @@ ifndef(`distro_redhat',`
+ 		xserver_role(sysadm_r, sysadm_t)
+ 	')
+ ')
++
++userdom_common_user(sysadm_execmem_t)
+diff -up serefpolicy-3.10.0/policy/modules/roles/unprivuser.te~ serefpolicy-3.10.0/policy/modules/roles/unprivuser.te
+--- serefpolicy-3.10.0/policy/modules/roles/unprivuser.te~	2011-11-04 15:03:32.521287248 -0400
++++ serefpolicy-3.10.0/policy/modules/roles/unprivuser.te	2011-11-04 15:34:20.887513436 -0400
+@@ -220,3 +220,4 @@ ifndef(`distro_redhat',`
+ 	')
+ ')
+ 
++userdom_common_user(user_execmem_t)
+diff -up serefpolicy-3.10.0/policy/modules/roles/xguest.te~ serefpolicy-3.10.0/policy/modules/roles/xguest.te
+--- serefpolicy-3.10.0/policy/modules/roles/xguest.te~	2011-11-04 15:03:32.522287252 -0400
++++ serefpolicy-3.10.0/policy/modules/roles/xguest.te	2011-11-04 15:34:52.250611193 -0400
+@@ -178,3 +178,5 @@ optional_policy(`
+ ')
+ 
+ gen_user(xguest_u, user, xguest_r, s0, s0)
++
++userdom_common_user(xguest_execmem_t)