[selinux-policy/f19] * Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27 - Add missing dyntransition for sa

Miroslav Grepl mgrepl at fedoraproject.org
Wed May 14 19:54:01 UTC 2014


commit a9d960b0640eaab518433fbe128b114396c85873
Author: Miroslav Grepl <mgrepl at redhat.com>
Date:   Wed May 14 21:53:42 2014 +0200

    * Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27
    - Add missing dyntransition for sandbox_x_domain

 policy-f19-contrib.patch |    5 +++--
 selinux-policy.spec      |    7 +++++--
 2 files changed, 8 insertions(+), 4 deletions(-)
---
diff --git a/policy-f19-contrib.patch b/policy-f19-contrib.patch
index 79ba43c..daa3ee0 100644
--- a/policy-f19-contrib.patch
+++ b/policy-f19-contrib.patch
@@ -78264,10 +78264,10 @@ index 0000000..6caef63
 +/usr/share/sandbox/start --	gen_context(system_u:object_r:sandbox_exec_t,s0)
 diff --git a/sandboxX.if b/sandboxX.if
 new file mode 100644
-index 0000000..5da5bff
+index 0000000..75bb4c4
 --- /dev/null
 +++ b/sandboxX.if
-@@ -0,0 +1,392 @@
+@@ -0,0 +1,393 @@
 +
 +## <summary>policy for sandboxX </summary>
 +
@@ -78296,6 +78296,7 @@ index 0000000..5da5bff
 +	')
 +
 +	allow $1 sandbox_x_domain:process { signal_perms transition };
++	allow $1 sandbox_x_domain:process dyntransition;
 +	dontaudit $1 sandbox_x_domain:process { noatsecure siginh rlimitinh };
 +	allow sandbox_x_domain $1:process { sigchld signull };
 +	allow { sandbox_x_domain sandbox_xserver_t } $1:fd use;
diff --git a/selinux-policy.spec b/selinux-policy.spec
index f2f6ca7..29c7233 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.12.1
-Release: 74.26%{?dist}
+Release: 74.27%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -542,7 +542,10 @@ SELinux Reference policy mls base module.
 %endif
 
 %changelog
-* Wed May 02 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.26
+* Wed May 14 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.27
+- Add missing dyntransition for sandbox_x_domain
+
+* Fri May 19 2014 Miroslav Grepl <mgrepl at redhat.com> 3.12.1-74.26
 - Update sandbox_transition() to call sandbox_dyntrasition().
 
 * Fri May 02 2014 Lukas Vrabec <lvrabec at redhat.com> 3.12.1-74.25


More information about the scm-commits mailing list