[selinux-policy/f19] * Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27 - Add missing dyntransition for sa
Miroslav Grepl
mgrepl at fedoraproject.org
Wed May 14 19:54:01 UTC 2014
commit a9d960b0640eaab518433fbe128b114396c85873
Author: Miroslav Grepl <mgrepl at redhat.com>
Date: Wed May 14 21:53:42 2014 +0200
* Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27
- Add missing dyntransition for sandbox_x_domain
policy-f19-contrib.patch | 5 +++--
selinux-policy.spec | 7 +++++--
2 files changed, 8 insertions(+), 4 deletions(-)
---
diff --git a/policy-f19-contrib.patch b/policy-f19-contrib.patch
index 79ba43c..daa3ee0 100644
--- a/policy-f19-contrib.patch
+++ b/policy-f19-contrib.patch
@@ -78264,10 +78264,10 @@ index 0000000..6caef63
+/usr/share/sandbox/start -- gen_context(system_u:object_r:sandbox_exec_t,s0)
diff --git a/sandboxX.if b/sandboxX.if
new file mode 100644
-index 0000000..5da5bff
+index 0000000..75bb4c4
--- /dev/null
+++ b/sandboxX.if
-@@ -0,0 +1,392 @@
+@@ -0,0 +1,393 @@
+
+## <summary>policy for sandboxX </summary>
+
@@ -78296,6 +78296,7 @@ index 0000000..5da5bff
+ ')
+
+ allow $1 sandbox_x_domain:process { signal_perms transition };
++ allow $1 sandbox_x_domain:process dyntransition;
+ dontaudit $1 sandbox_x_domain:process { noatsecure siginh rlimitinh };
+ allow sandbox_x_domain $1:process { sigchld signull };
+ allow { sandbox_x_domain sandbox_xserver_t } $1:fd use;
diff --git a/selinux-policy.spec b/selinux-policy.spec
index f2f6ca7..29c7233 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.12.1
-Release: 74.26%{?dist}
+Release: 74.27%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -542,7 +542,10 @@ SELinux Reference policy mls base module.
%endif
%changelog
-* Wed May 02 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.26
+* Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27
+- Add missing dyntransition for sandbox_x_domain
+
+* Fri May 19 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.26
- Update sandbox_transition() to call sandbox_dyntrasition().
* Fri May 02 2014 Lukas Vrabec <lvrabec at redhat.com> 3.12.1-74.25
More information about the scm-commits
mailing list