fedora-cvs-commits@redhat.com
[Top] [All Lists]

rpms/selinux-policy/devel policy-20061106.patch,1.50,1.51

Subject: rpms/selinux-policy/devel policy-20061106.patch,1.50,1.51
From:
Date: Sun, 24 Dec 2006 11:05:18 -0500
Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv26239

Modified Files:
        policy-20061106.patch 
Log Message:
* Sat Dec 23 2006 Dan Walsh <dwalsh@xxxxxxxxxx> 2.4.6-18
- Many fixes for strict policy and by extension mls.


policy-20061106.patch:
 Rules.modular                             |   10 
 config/appconfig-strict-mcs/seusers       |    1 
 config/appconfig-strict-mls/seusers       |    1 
 config/appconfig-strict/seusers           |    1 
 policy/flask/access_vectors               |    2 
 policy/global_tunables                    |   48 ++
 policy/mls                                |   31 +
 policy/modules/admin/acct.te              |    1 
 policy/modules/admin/amanda.if            |   17 
 policy/modules/admin/amanda.te            |    1 
 policy/modules/admin/bootloader.fc        |    5 
 policy/modules/admin/bootloader.te        |    9 
 policy/modules/admin/consoletype.te       |   10 
 policy/modules/admin/dmesg.te             |    1 
 policy/modules/admin/firstboot.if         |    6 
 policy/modules/admin/logwatch.te          |    2 
 policy/modules/admin/netutils.te          |    1 
 policy/modules/admin/prelink.te           |    9 
 policy/modules/admin/quota.fc             |    7 
 policy/modules/admin/quota.te             |   20 -
 policy/modules/admin/rpm.fc               |    3 
 policy/modules/admin/rpm.if               |   24 +
 policy/modules/admin/rpm.te               |   46 +-
 policy/modules/admin/su.if                |   13 
 policy/modules/admin/sudo.if              |    5 
 policy/modules/admin/usermanage.te        |   21 -
 policy/modules/apps/evolution.if          |  100 +++++
 policy/modules/apps/gnome.if              |   33 +
 policy/modules/apps/gnome.te              |    3 
 policy/modules/apps/gpg.if                |    1 
 policy/modules/apps/java.fc               |    2 
 policy/modules/apps/java.te               |    2 
 policy/modules/apps/loadkeys.if           |   17 
 policy/modules/apps/mozilla.if            |    4 
 policy/modules/apps/slocate.te            |    2 
 policy/modules/apps/thunderbird.if        |   16 
 policy/modules/apps/userhelper.if         |   19 +
 policy/modules/kernel/corecommands.fc     |    4 
 policy/modules/kernel/corecommands.if     |   36 +-
 policy/modules/kernel/corenetwork.if.in   |   97 +++++
 policy/modules/kernel/corenetwork.te.in   |   15 
 policy/modules/kernel/corenetwork.te.m4   |    4 
 policy/modules/kernel/devices.fc          |    5 
 policy/modules/kernel/devices.te          |    8 
 policy/modules/kernel/domain.te           |    7 
 policy/modules/kernel/files.if            |  180 +++++++++-
 policy/modules/kernel/filesystem.te       |    6 
 policy/modules/kernel/kernel.if           |   61 +++
 policy/modules/kernel/kernel.te           |    4 
 policy/modules/kernel/mls.if              |   28 +
 policy/modules/kernel/mls.te              |    6 
 policy/modules/kernel/terminal.fc         |    1 
 policy/modules/kernel/terminal.if         |    2 
 policy/modules/kernel/terminal.te         |    1 
 policy/modules/services/apache.fc         |   10 
 policy/modules/services/apache.te         |   16 
 policy/modules/services/apm.te            |    3 
 policy/modules/services/automount.fc      |    1 
 policy/modules/services/automount.te      |    9 
 policy/modules/services/avahi.if          |   21 +
 policy/modules/services/bind.fc           |    1 
 policy/modules/services/clamav.te         |    2 
 policy/modules/services/cron.fc           |    2 
 policy/modules/services/cron.if           |   92 ++---
 policy/modules/services/cron.te           |   30 +
 policy/modules/services/cups.fc           |    2 
 policy/modules/services/cups.te           |    7 
 policy/modules/services/cvs.te            |    1 
 policy/modules/services/dbus.fc           |    1 
 policy/modules/services/dbus.if           |   16 
 policy/modules/services/ftp.te            |   14 
 policy/modules/services/hal.fc            |    4 
 policy/modules/services/hal.if            |   20 +
 policy/modules/services/hal.te            |    8 
 policy/modules/services/inetd.te          |    9 
 policy/modules/services/irqbalance.te     |    4 
 policy/modules/services/kerberos.if       |    1 
 policy/modules/services/kerberos.te       |   11 
 policy/modules/services/lpd.if            |   56 +--
 policy/modules/services/mta.if            |    1 
 policy/modules/services/mta.te            |    1 
 policy/modules/services/nis.fc            |    1 
 policy/modules/services/nis.if            |    8 
 policy/modules/services/nis.te            |   15 
 policy/modules/services/nscd.if           |   20 +
 policy/modules/services/nscd.te           |   15 
 policy/modules/services/oddjob.te         |    3 
 policy/modules/services/pcscd.fc          |    9 
 policy/modules/services/pcscd.if          |   62 +++
 policy/modules/services/pcscd.te          |   74 ++++
 policy/modules/services/pegasus.if        |   31 +
 policy/modules/services/pegasus.te        |    5 
 policy/modules/services/postfix.te        |   13 
 policy/modules/services/procmail.te       |   16 
 policy/modules/services/radvd.te          |    2 
 policy/modules/services/rhgb.te           |    1 
 policy/modules/services/rlogin.te         |   10 
 policy/modules/services/rpc.te            |    1 
 policy/modules/services/rsync.te          |    1 
 policy/modules/services/samba.if          |    2 
 policy/modules/services/samba.te          |    8 
 policy/modules/services/sasl.te           |    2 
 policy/modules/services/setroubleshoot.if |   20 +
 policy/modules/services/setroubleshoot.te |    1 
 policy/modules/services/smartmon.te       |    1 
 policy/modules/services/snmp.te           |    4 
 policy/modules/services/spamassassin.te   |    8 
 policy/modules/services/ssh.if            |    1 
 policy/modules/services/ssh.te            |    7 
 policy/modules/services/telnet.te         |    1 
 policy/modules/services/tftp.te           |    2 
 policy/modules/services/uucp.fc           |    1 
 policy/modules/services/uucp.if           |   67 +++
 policy/modules/services/uucp.te           |   44 ++
 policy/modules/services/xserver.fc        |    2 
 policy/modules/services/xserver.if        |   90 +++++
 policy/modules/services/xserver.te        |   12 
 policy/modules/system/authlogin.if        |   74 ++++
 policy/modules/system/authlogin.te        |    6 
 policy/modules/system/clock.te            |    8 
 policy/modules/system/fstools.fc          |    1 
 policy/modules/system/fstools.te          |    2 
 policy/modules/system/getty.te            |    3 
 policy/modules/system/hostname.te         |   10 
 policy/modules/system/init.if             |    3 
 policy/modules/system/init.te             |   27 +
 policy/modules/system/iptables.te         |    7 
 policy/modules/system/libraries.fc        |   28 -
 policy/modules/system/libraries.te        |    6 
 policy/modules/system/locallogin.if       |   37 ++
 policy/modules/system/locallogin.te       |    6 
 policy/modules/system/logging.te          |    9 
 policy/modules/system/lvm.fc              |    1 
 policy/modules/system/lvm.te              |   48 ++
 policy/modules/system/miscfiles.fc        |    1 
 policy/modules/system/miscfiles.if        |   79 ++++
 policy/modules/system/modutils.te         |   10 
 policy/modules/system/mount.te            |   20 -
 policy/modules/system/raid.te             |    7 
 policy/modules/system/selinuxutil.fc      |    2 
 policy/modules/system/selinuxutil.if      |  113 ++++++
 policy/modules/system/selinuxutil.te      |  107 +-----
 policy/modules/system/sysnetwork.te       |    3 
 policy/modules/system/tzdata.fc           |    3 
 policy/modules/system/tzdata.if           |   23 +
 policy/modules/system/tzdata.te           |   34 +
 policy/modules/system/unconfined.fc       |    4 
 policy/modules/system/unconfined.if       |   19 +
 policy/modules/system/unconfined.te       |   19 +
 policy/modules/system/userdomain.if       |  534 ++++++++++++++++++++++++++----
 policy/modules/system/userdomain.te       |   61 +--
 policy/modules/system/xen.fc              |    1 
 policy/modules/system/xen.te              |   35 +
 153 files changed, 2732 insertions(+), 481 deletions(-)

Index: policy-20061106.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20061106.patch,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -r1.50 -r1.51
--- policy-20061106.patch       24 Dec 2006 07:31:09 -0000      1.50
+++ policy-20061106.patch       24 Dec 2006 16:05:15 -0000      1.51
@@ -4142,7 +4142,7 @@
 +
 diff --exclude-from=exclude -N -u -r 
nsaserefpolicy/policy/modules/services/xserver.te 
serefpolicy-2.4.6/policy/modules/services/xserver.te
 --- nsaserefpolicy/policy/modules/services/xserver.te  2006-11-16 
17:15:21.000000000 -0500
-+++ serefpolicy-2.4.6/policy/modules/services/xserver.te       2006-12-23 
23:42:20.000000000 -0500
++++ serefpolicy-2.4.6/policy/modules/services/xserver.te       2006-12-24 
11:03:54.000000000 -0500
 @@ -10,9 +10,6 @@
  attribute fonts_cache_type;
  attribute fonts_config_type;
@@ -4171,15 +4171,18 @@
  allow xdm_t xconsole_device_t:fifo_file { getattr setattr };
  
  allow xdm_t xdm_tmp_t:dir manage_dir_perms;
-@@ -219,6 +214,7 @@
- # Search /proc for any user domain processes.
+@@ -220,6 +215,10 @@
  userdom_read_all_users_state(xdm_t)
  userdom_signal_all_users(xdm_t)
-+gnome_signal_all(xdm_t)
  
++optional_policy(`
++      gnome_signal_all(xdm_t)
++')
++
  ifdef(`strict_policy',`
        allow xdm_t xdm_lock_t:file create_file_perms;
-@@ -401,6 +397,7 @@
+       files_lock_filetrans(xdm_t,xdm_lock_t,file)
+@@ -401,6 +400,7 @@
  corenet_tcp_bind_vnc_port(xdm_xserver_t)
  
  fs_search_auto_mountpoints(xdm_xserver_t)

-- 
fedora-cvs-commits mailing list
fedora-cvs-commits@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-cvs-commits

<Prev in Thread] Current Thread [Next in Thread>
  • rpms/selinux-policy/devel policy-20061106.patch,1.50,1.51, fedora-cvs-commits <=