rpms/selinux-policy-targeted/FC-4 selinux-policy-targeted.spec, 1.313, 1.314

Wed Jun 15 15:09:02 UTC 2005

Author: dwalsh

Update of /cvs/dist/rpms/selinux-policy-targeted/FC-4
In directory cvs.devel.redhat.com:/tmp/cvs-serv7207

Modified Files:
	selinux-policy-targeted.spec 
Log Message:
* Wed Jun 15 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-7
- Move FC4 to match rawhide policy



Index: selinux-policy-targeted.spec
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy-targeted/FC-4/selinux-policy-targeted.spec,v
retrieving revision 1.313
retrieving revision 1.314
diff -u -r1.313 -r1.314

--- selinux-policy-targeted.spec	2 Jun 2005 11:57:13 -0000	1.313
+++ selinux-policy-targeted.spec	15 Jun 2005 15:09:00 -0000	1.314
@@ -10,17 +10,16 @@
 
 Summary: SELinux %{type} policy configuration
 Name: selinux-policy-%{type}
-Version: 1.23.17
-Release: 3.1
+Version: 1.23.18
+Release: 7
 License: GPL
 Group: System Environment/Base
 Source: http://www.nsa.gov/selinux/archives/policy-%{version}.tgz
 Source1: booleans
 Prefix: %{_prefix}
 BuildRoot: %{_tmppath}/%{name}-buildroot
-Patch: policy-20050525.patch
+Patch: policy-20050606.patch
 Patch1: policy-%{type}.patch
-Patch2: policy-20050602.patch
 
 BuildArch: noarch
 BuildRequires: checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils >= %{POLICYCOREUTILSVER}
@@ -53,7 +52,7 @@
 mv domains/misc/unused/kernel.te domains/misc/
 mv domains/program/*.te domains/program/unused/
 rm domains/*.te
-for i in anaconda.te amanda.te apache.te apmd.te arpwatch.te auditd.te bluetooth.te checkpolicy.te canna.te cardmgr.te chkpwd.te comsat.te consoletype.te cpucontrol.te cpuspeed.te cups.te cvs.te cyrus.te dbskkd.te dmidecode.te dbusd.te dhcpc.te dhcpd.te dictd.te dovecot.te fingerd.te firstboot.te fsadm.te ftpd.te getty.te hald.te hostname.te hotplug.te howl.te hwclock.te kudzu.te i18n_input.te ifconfig.te init.te initrc.te inetd.te innd.te kerberos.te klogd.te ktalkd.te ldconfig.te load_policy.te login.te lpd.te mailman.te modutil.te mta.te mysqld.te named.te netutils.te NetworkManager.te nscd.te ntpd.te portmap.te postgresql.te pppd.te privoxy.te radius.te radvd.te restorecon.te rlogind.te rpcd.te rshd.te rsync.te saslauthd.te samba.te setfiles.te slapd.te snmpd.te squid.te stunnel.te syslogd.te telnetd.te tftpd.te udev.te updfstab.te uucpd.te webalizer.te winbind.te ypbind.te ypserv.te zebra.te; do
+for i in acct.te anaconda.te amanda.te apache.te apmd.te arpwatch.te auditd.te bluetooth.te checkpolicy.te canna.te cardmgr.te chkpwd.te comsat.te consoletype.te cpucontrol.te cpuspeed.te cups.te cvs.te cyrus.te dbskkd.te dmidecode.te dbusd.te dhcpc.te dhcpd.te dictd.te dovecot.te fingerd.te firstboot.te fsadm.te ftpd.te getty.te hald.te hostname.te hotplug.te howl.te hwclock.te kudzu.te i18n_input.te ifconfig.te init.te initrc.te inetd.te innd.te kerberos.te klogd.te ktalkd.te ldconfig.te load_policy.te login.te lpd.te mailman.te modutil.te mta.te mysqld.te named.te netutils.te NetworkManager.te nscd.te ntpd.te ping.te portmap.te postgresql.te pppd.te privoxy.te radius.te radvd.te restorecon.te rlogind.te rpcd.te rshd.te rsync.te saslauthd.te samba.te setfiles.te slapd.te snmpd.te squid.te stunnel.te syslogd.te telnetd.te tftpd.te udev.te updfstab.te uucpd.te webalizer.te winbind.te ypbind.te ypserv.te zebra.te; do
 mv domains/program/unused/$i domains/program/ 
 done 
 rm -rf domains/program/unused 
@@ -104,9 +103,9 @@
 %config %{_sysconfdir}/selinux/%{type}/booleans
 %ghost %config(noreplace) %{_sysconfdir}/selinux/%{type}/booleans.local
 %{_sysconfdir}/selinux/%{type}/policy/policy.%{POLICYVER}
-%{_sysconfdir}/selinux/%{type}/contexts/files/file_contexts
-%{_sysconfdir}/selinux/%{type}/contexts/files/file_contexts.homedirs
-%{_sysconfdir}/selinux/%{type}/contexts/files/homedir_template
+%config %{_sysconfdir}/selinux/%{type}/contexts/files/file_contexts
+%config %{_sysconfdir}/selinux/%{type}/contexts/files/file_contexts.homedirs
+%config %{_sysconfdir}/selinux/%{type}/contexts/files/homedir_template
 %config(noreplace) %{_sysconfdir}/selinux/%{type}/contexts/files/media
 %config(noreplace) %{_sysconfdir}/selinux/%{type}/contexts/dbus_contexts
 %config %{_sysconfdir}/selinux/%{type}/contexts/default_contexts
@@ -227,7 +226,7 @@
 %post sources
 if [ -x /usr/sbin/selinuxenabled -a -f /etc/selinux/config ]; then
 	. /etc/selinux/config
-	if [ "${SELINUXTYPE}" = "%{type}" ] -a /usr/sbin/selinuxenabled; then
+	if [ "${SELINUXTYPE}" = "%{type}" ] && /usr/sbin/selinuxenabled; then
 		make -C %{POLICYDIR}/src/policy load > /dev/null 2>&1
 		[ -f %{PRE_FILE_CONTEXT} ] && fixfiles -l /dev/null -C %{PRE_FILE_CONTEXT} restore && rm -f %{PRE_FILE_CONTEXT} 
 	fi
@@ -235,9 +234,39 @@
 exit 0
 
 %changelog
-* Thu Jun 2 2005 Dan Walsh <dwalsh at redhat.com> 1.23.17-3.1
-- Fix cups using ptal
-- Fix acct.te
+* Wed Jun 15 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-7
+- Move FC4 to match rawhide policy
+
+* Mon Jun 13 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-6
+- Further cleanup of user separation patches from Ivan
+
+* Fri Jun 10 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-5
+- Further cleanup of user separation patches from Ivan
+
+* Thu Jun 9 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-3
+- Add /etc/profile.d/selinux.sh /etc/profile.d/selinux.csh for strict
+- move ice_tmp_t definition for mls
+
+* Wed Jun 8 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-2
+- Add alsa policy
+- Policy cleanup from Ivan
+
+* Mon Jun 6 2005 Dan Walsh <dwalsh at redhat.com> 1.23.18-1
+- Upgrade from NSA
+	* Merged minor fixes to pppd.fc and courier.te by Russell Coker.
+	* Removed devfsd policy as suggested by Russell Coker.
+	* Merged patch from Dan Walsh.  Includes beginnings of Ivan
+	Gyurdiev's Font Config policy.  Don't transition to fsadm_t from
+	unconfined_t (sysadm_t) in targeted policy.  Add support for
+	debugfs in modutil.  Allow automount to create and delete
+	directories in /root and /home dirs.  Move can_ypbind to
+	chkpwd_macro.te.  Allow useradd to create additional files and
+	types via the skell mechanism.  Other minor cleanups and fixes.
+
+
+* Sat May 28 2005 Dan Walsh <dwalsh at redhat.com> 1.23.17-4
+- Add evolution/thunderbird support for strict policy.  Including
+break out of orbits, fonts, and gnome.  All done by Ivan G.
 
 * Sat May 28 2005 Dan Walsh <dwalsh at redhat.com> 1.23.17-3
 - Update policy, to remove crond_log_t 


