[selinux-policy/f18] Fix typo in dovecot policy Allow dovecot block_suspend capability2 Look up group name by spamass-mil

Miroslav Grepl mgrepl at fedoraproject.org
Tue Sep 4 08:55:11 UTC 2012


commit 57f75f9be9364257412d88fcef7c1077bd342aeb
Author: Miroslav Grepl <mgrepl at redhat.com>
Date:   Tue Sep 4 10:53:33 2012 +0200

    Fix typo in dovecot policy
    Allow dovecot block_suspend capability2
    Look up group name by spamass-milter-postfix
    Allow hplip to read /etc/nsswitch.conf
    sandbox_file_t is now part of sandboxX
    vbetool seems to want to use secure_firmware capability
    Add mozilla_plugin_can_network_connect boolean
    Fix /var/lib/sqlgrey labeling
    Allow realmd to read /usr files
    Add support for a new path for passenger

 policy_contrib-rawhide.patch |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/policy_contrib-rawhide.patch b/policy_contrib-rawhide.patch
index 330cc14..222c98a 100644
--- a/policy_contrib-rawhide.patch
+++ b/policy_contrib-rawhide.patch
@@ -17396,7 +17396,7 @@ index e1d7dc5..df96c0d 100644
  	admin_pattern($1, dovecot_var_run_t)
  
 diff --git a/dovecot.te b/dovecot.te
-index 2df7766..dd26869 100644
+index 2df7766..9520d47 100644
 --- a/dovecot.te
 +++ b/dovecot.te
 @@ -18,7 +18,7 @@ type dovecot_auth_tmp_t;
@@ -17433,7 +17433,7 @@ index 2df7766..dd26869 100644
  
 -allow dovecot_t self:capability { dac_override dac_read_search chown kill net_bind_service setgid setuid sys_chroot };
 +allow dovecot_t self:capability { dac_override dac_read_search chown fsetid kill net_bind_service setgid setuid sys_chroot };
-+allow dovecot self:capability2 block_suspend;
++allow dovecot_t self:capability2 block_suspend;
  dontaudit dovecot_t self:capability sys_tty_config;
 -allow dovecot_t self:process { setrlimit signal_perms getcap setcap };
 +allow dovecot_t self:process { setrlimit signal_perms getcap setcap setsched };


More information about the scm-commits mailing list