fedora-cvs-commits@redhat.com
[Top] [All Lists]

rpms/selinux-policy/devel policy-20061106.patch,1.18,1.19

Subject: rpms/selinux-policy/devel policy-20061106.patch,1.18,1.19
From:
Date: Wed, 15 Nov 2006 17:33:10 -0500
Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv24089

Modified Files:
        policy-20061106.patch 
Log Message:
* Wed Nov 15 2006 Dan Walsh <dwalsh@xxxxxxxxxx> 2.4.4-3
- Fixes for nvidia driver


policy-20061106.patch:
 Rules.modular                           |   10 
 policy/flask/access_vectors             |    2 
 policy/global_tunables                  |   36 ++
 policy/modules/admin/acct.te            |    1 
 policy/modules/admin/amanda.te          |    1 
 policy/modules/admin/consoletype.te     |    8 
 policy/modules/admin/dmesg.te           |    1 
 policy/modules/admin/logwatch.te        |    1 
 policy/modules/admin/netutils.te        |    2 
 policy/modules/admin/prelink.te         |    5 
 policy/modules/admin/rpm.fc             |    3 
 policy/modules/admin/rpm.if             |   24 +
 policy/modules/admin/rpm.te             |   37 --
 policy/modules/apps/java.fc             |    2 
 policy/modules/kernel/corecommands.if   |   17 +
 policy/modules/kernel/corenetwork.if.in |   12 
 policy/modules/kernel/corenetwork.te.in |   19 +
 policy/modules/kernel/corenetwork.te.m4 |    4 
 policy/modules/kernel/devices.fc        |    5 
 policy/modules/kernel/devices.te        |    6 
 policy/modules/kernel/domain.te         |    7 
 policy/modules/kernel/files.if          |   66 ++++
 policy/modules/kernel/filesystem.te     |    6 
 policy/modules/kernel/terminal.fc       |    1 
 policy/modules/kernel/terminal.te       |    1 
 policy/modules/services/aide.fc         |    3 
 policy/modules/services/aide.if         |   56 +++
 policy/modules/services/aide.te         |   52 +++
 policy/modules/services/apache.fc       |   10 
 policy/modules/services/apache.te       |   16 -
 policy/modules/services/automount.te    |    1 
 policy/modules/services/ccs.fc          |   10 
 policy/modules/services/ccs.if          |   83 +++++
 policy/modules/services/ccs.te          |   96 ++++++
 policy/modules/services/cron.if         |   26 -
 policy/modules/services/cron.te         |    5 
 policy/modules/services/cups.fc         |    2 
 policy/modules/services/cups.te         |    4 
 policy/modules/services/cvs.te          |    1 
 policy/modules/services/dbus.fc         |    1 
 policy/modules/services/dbus.if         |    1 
 policy/modules/services/hal.fc          |    4 
 policy/modules/services/hal.te          |    8 
 policy/modules/services/kerberos.if     |    1 
 policy/modules/services/kerberos.te     |   11 
 policy/modules/services/lpd.if          |   52 +--
 policy/modules/services/mta.if          |    1 
 policy/modules/services/mta.te          |    1 
 policy/modules/services/nscd.if         |   20 +
 policy/modules/services/nscd.te         |    3 
 policy/modules/services/oddjob.te       |    3 
 policy/modules/services/pegasus.if      |   31 ++
 policy/modules/services/pegasus.te      |    5 
 policy/modules/services/postfix.te      |    5 
 policy/modules/services/procmail.te     |   16 +
 policy/modules/services/ricci.fc        |   20 +
 policy/modules/services/ricci.if        |  222 ++++++++++++++
 policy/modules/services/ricci.te        |  490 ++++++++++++++++++++++++++++++++
 policy/modules/services/rsync.te        |    1 
 policy/modules/services/samba.if        |    2 
 policy/modules/services/samba.te        |    6 
 policy/modules/services/sasl.te         |    2 
 policy/modules/services/snmp.te         |    1 
 policy/modules/services/spamassassin.te |    4 
 policy/modules/services/squid.te        |    7 
 policy/modules/services/ssh.te          |    2 
 policy/modules/services/telnet.te       |    1 
 policy/modules/services/tftp.te         |    2 
 policy/modules/services/xserver.if      |   40 ++
 policy/modules/system/authlogin.if      |    2 
 policy/modules/system/authlogin.te      |    2 
 policy/modules/system/clock.te          |    1 
 policy/modules/system/fstools.fc        |    1 
 policy/modules/system/fstools.te        |    2 
 policy/modules/system/getty.te          |    3 
 policy/modules/system/hostname.te       |    6 
 policy/modules/system/init.fc           |    3 
 policy/modules/system/init.te           |   14 
 policy/modules/system/iscsi.if          |    2 
 policy/modules/system/libraries.fc      |   13 
 policy/modules/system/libraries.te      |    6 
 policy/modules/system/locallogin.if     |   37 ++
 policy/modules/system/logging.te        |    1 
 policy/modules/system/lvm.fc            |    1 
 policy/modules/system/lvm.te            |   48 ++-
 policy/modules/system/miscfiles.fc      |    1 
 policy/modules/system/modutils.te       |    5 
 policy/modules/system/mount.te          |   19 -
 policy/modules/system/raid.te           |    7 
 policy/modules/system/selinuxutil.if    |    4 
 policy/modules/system/selinuxutil.te    |   34 +-
 policy/modules/system/unconfined.fc     |    4 
 policy/modules/system/unconfined.if     |   19 +
 policy/modules/system/unconfined.te     |   11 
 policy/modules/system/userdomain.if     |  237 +++++++++++++--
 policy/modules/system/userdomain.te     |   10 
 policy/modules/system/xen.fc            |    1 
 policy/modules/system/xen.te            |   29 +
 98 files changed, 1937 insertions(+), 191 deletions(-)

Index: policy-20061106.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20061106.patch,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -r1.18 -r1.19
--- policy-20061106.patch       15 Nov 2006 22:28:06 -0000      1.18
+++ policy-20061106.patch       15 Nov 2006 22:33:08 -0000      1.19
@@ -3132,7 +3132,7 @@
  
 diff --exclude-from=exclude -N -u -r 
nsaserefpolicy/policy/modules/system/selinuxutil.te 
serefpolicy-2.4.4/policy/modules/system/selinuxutil.te
 --- nsaserefpolicy/policy/modules/system/selinuxutil.te        2006-11-14 
13:51:46.000000000 -0500
-+++ serefpolicy-2.4.4/policy/modules/system/selinuxutil.te     2006-11-15 
15:54:14.000000000 -0500
++++ serefpolicy-2.4.4/policy/modules/system/selinuxutil.te     2006-11-15 
17:32:39.000000000 -0500
 @@ -107,6 +107,11 @@
  type semanage_exec_t;
  domain_entry_file(semanage_t, semanage_exec_t)
@@ -3182,12 +3182,15 @@
  
  allow semanage_t policy_config_t:file { read write };
  
-@@ -568,10 +570,16 @@
+@@ -568,10 +570,19 @@
  
  corecmd_exec_bin(semanage_t)
  corecmd_exec_sbin(semanage_t)
 +corecmd_exec_shell(semanage_t)
-+consoletype_exec(semanage_t)
++
++optional_policy(`
++      consoletype_exec(semanage_t)
++')
 +
 +init_exec_script_files(semanage_t)
 +init_dontaudit_use_script_ptys(semanage_t)
@@ -3199,7 +3202,7 @@
  
  files_read_etc_files(semanage_t)
  files_read_etc_runtime_files(semanage_t)
-@@ -586,7 +594,6 @@
+@@ -586,7 +597,6 @@
  selinux_get_enforce_mode(semanage_t)
  # for setsebool:
  selinux_set_boolean(semanage_t)
@@ -3207,7 +3210,7 @@
  term_use_all_terms(semanage_t)
  
  # Running genhomedircon requires this for finding all users
-@@ -617,13 +624,10 @@
+@@ -617,13 +627,10 @@
  
  userdom_search_sysadm_home_dirs(semanage_t)
  
@@ -3224,7 +3227,7 @@
  ')
  
  ########################################
-@@ -672,6 +676,7 @@
+@@ -672,6 +679,7 @@
  init_use_fds(setfiles_t)
  init_use_script_fds(setfiles_t)
  init_use_script_ptys(setfiles_t)

-- 
fedora-cvs-commits mailing list
fedora-cvs-commits@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-cvs-commits

<Prev in Thread] Current Thread [Next in Thread>
  • rpms/selinux-policy/devel policy-20061106.patch,1.18,1.19, fedora-cvs-commits <=