[selinux-policy/f18] * Wed Dec 18 2013 Lukas Vrabec <lvrabec at redhat.com> 3.11.1-208 - Should allow domains to lock the te

[Lukas Vrabec]

commit 17eea709029f8bb0d653b38139111daae2ae489e
Author: Lukas Vrabec <lvrabec at redhat.com>
Date:   Wed Dec 18 12:04:12 2013 +0100

    * Wed Dec 18 2013 Lukas Vrabec <lvrabec at redhat.com> 3.11.1-208
    - Should allow domains to lock the terminal device

 policy-f18-base.patch |    4 ++--
 selinux-policy.spec   |    5 ++++-
 2 files changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/policy-f18-base.patch b/policy-f18-base.patch
index ca63fbb..80bc2c7 100644
--- a/policy-f18-base.patch
+++ b/policy-f18-base.patch
@@ -150538,7 +150538,7 @@ index e79d545..101086d 100644
  ')
  
 diff --git a/policy/support/obj_perm_sets.spt b/policy/support/obj_perm_sets.spt
-index 6e91317..936a91d 100644
+index 6e91317..1dee6c7 100644
 --- a/policy/support/obj_perm_sets.spt
 +++ b/policy/support/obj_perm_sets.spt
 @@ -28,8 +28,7 @@ define(`devfile_class_set', `{ chr_file blk_file }')
@@ -150635,7 +150635,7 @@ index 6e91317..936a91d 100644
  # Use (read and write) terminals
  #
 -define(`rw_term_perms', `{ getattr open read write append ioctl }')
-+define(`rw_inherited_term_perms', `{ getattr read write append ioctl }')
++define(`rw_inherited_term_perms', `{ getattr lock read write append ioctl }')
 +define(`rw_term_perms', `{ rw_inherited_term_perms open }')
  
  #
diff --git a/selinux-policy.spec b/selinux-policy.spec
index ea5b65c..40e5d05 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.11.1
-Release: 107%{?dist}
+Release: 108%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -521,6 +521,9 @@ SELinux Reference policy mls base module.
 %endif
 
 %Changelog
+* Wed Dec 18 2013 Lukas Vrabec <lvrabec at redhat.com> 3.11.1-208
+- Should allow domains to lock the terminal device
+
 * Fri Nov 08 2013 Lukas Vrabec <lvrabec at redhat.com> 3.11.1-107
 - Added systemd_filetrans_home_content
 - Add rsync_filetrans_named_content to admin domains