[selinux-policy/f15] * Fri Mar 16 2012 Miroslav Grepl <mgrepl at redhat.com> 3.9.16-53 - More fixes to make livecd working

[Miroslav Grepl]

commit f801810352bf46bd6127ae5ba43354d4e117c0b7
Author: Miroslav Grepl <mgrepl at redhat.com>
Date:   Fri Mar 16 09:05:21 2012 +0100

    * Fri Mar 16 2012 Miroslav Grepl <mgrepl at redhat.com> 3.9.16-53
    - More fixes to make livecd working

 policy-F15.patch    |   16 ++++++++++++++--
 selinux-policy.spec |    5 ++++-
 2 files changed, 18 insertions(+), 3 deletions(-)
---
diff --git a/policy-F15.patch b/policy-F15.patch
index ff1ccef..8788a0e 100644
--- a/policy-F15.patch
+++ b/policy-F15.patch
@@ -5749,7 +5749,7 @@ index f63c4c2..bf59895 100644
  	policykit_dbus_chat(kdumpgui_t)
  ')
 diff --git a/policy/modules/apps/livecd.if b/policy/modules/apps/livecd.if
-index 12b772f..1088fe0 100644
+index 12b772f..301c3a6 100644
 --- a/policy/modules/apps/livecd.if
 +++ b/policy/modules/apps/livecd.if
 @@ -41,6 +41,9 @@ interface(`livecd_run',`
@@ -5758,7 +5758,7 @@ index 12b772f..1088fe0 100644
  	role $2 types livecd_t;
 +	role_transition $2 livecd_exec_t system_r;	
 +
-+	seutil_run_setfiles_mac(livecd_t, $2)
++	seutil_run_setfiles_mac(livecd_t, system_r)
  
  	optional_policy(`
  		mount_run(livecd_t, $2)
@@ -15561,6 +15561,18 @@ index 786449a..e8ebc76 100644
 +	mls_trusted_object($1)
 +')
 +
+diff --git a/policy/modules/kernel/selinux.te b/policy/modules/kernel/selinux.te
+index 01a472d..7aabcac 100644
+--- a/policy/modules/kernel/selinux.te
++++ b/policy/modules/kernel/selinux.te
+@@ -18,6 +18,7 @@ attribute selinux_unconfined_type;
+ #
+ type security_t, boolean_type;
+ fs_type(security_t)
++files_mountpoint(security_t)
+ mls_trusted_object(security_t)
+ sid security gen_context(system_u:object_r:security_t,mls_systemhigh)
+ genfscon selinuxfs / gen_context(system_u:object_r:security_t,s0)
 diff --git a/policy/modules/kernel/storage.fc b/policy/modules/kernel/storage.fc
 index a9b8982..57c4a6a 100644
 --- a/policy/modules/kernel/storage.fc
diff --git a/selinux-policy.spec b/selinux-policy.spec
index ea276e2..3501e81 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -21,7 +21,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.9.16
-Release: 52%{?dist}
+Release: 53%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -471,6 +471,9 @@ exit 0
 %endif
 
 %changelog
+* Fri Mar 16 2012 Miroslav Grepl <mgrepl at redhat.com> 3.9.16-53
+- More fixes to make livecd working
+
 * Tue Mar 13 2012 Miroslav Grepl <mgrepl at redhat.com> 3.9.16-52
 - Fix livecd_run() interface
 - Add labeling for /var/spool/postfix/dev/log