[selinux-policy/f18] Fix typo in dovecot policy Allow dovecot block_suspend capability2 Look up group name by spamass-mil
Miroslav Grepl
mgrepl at fedoraproject.org
Tue Sep 4 08:55:11 UTC 2012
commit 57f75f9be9364257412d88fcef7c1077bd342aeb
Author: Miroslav Grepl <mgrepl at redhat.com>
Date: Tue Sep 4 10:53:33 2012 +0200
Fix typo in dovecot policy
Allow dovecot block_suspend capability2
Look up group name by spamass-milter-postfix
Allow hplip to read /etc/nsswitch.conf
sandbox_file_t is now part of sandboxX
vbetool seems to want to use secure_firmware capability
Add mozilla_plugin_can_network_connect boolean
Fix /var/lib/sqlgrey labeling
Allow realmd to read /usr files
Add support for a new path for passenger
policy_contrib-rawhide.patch | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/policy_contrib-rawhide.patch b/policy_contrib-rawhide.patch
index 330cc14..222c98a 100644
--- a/policy_contrib-rawhide.patch
+++ b/policy_contrib-rawhide.patch
@@ -17396,7 +17396,7 @@ index e1d7dc5..df96c0d 100644
admin_pattern($1, dovecot_var_run_t)
diff --git a/dovecot.te b/dovecot.te
-index 2df7766..dd26869 100644
+index 2df7766..9520d47 100644
--- a/dovecot.te
+++ b/dovecot.te
@@ -18,7 +18,7 @@ type dovecot_auth_tmp_t;
@@ -17433,7 +17433,7 @@ index 2df7766..dd26869 100644
-allow dovecot_t self:capability { dac_override dac_read_search chown kill net_bind_service setgid setuid sys_chroot };
+allow dovecot_t self:capability { dac_override dac_read_search chown fsetid kill net_bind_service setgid setuid sys_chroot };
-+allow dovecot self:capability2 block_suspend;
++allow dovecot_t self:capability2 block_suspend;
dontaudit dovecot_t self:capability sys_tty_config;
-allow dovecot_t self:process { setrlimit signal_perms getcap setcap };
+allow dovecot_t self:process { setrlimit signal_perms getcap setcap setsched };
More information about the scm-commits
mailing list