rpms/selinux-policy/devel policy-20060104.patch, 1.9, 1.10 selinux-policy.spec, 1.81, 1.82

fedora-cvs-commits at redhat.com fedora-cvs-commits at redhat.com
Thu Jan 12 02:36:33 UTC 2006


Author: katzj

Update of /cvs/dist/rpms/selinux-policy/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv4176

Modified Files:
	policy-20060104.patch selinux-policy.spec 
Log Message:
* Wed Jan 11 2006 Jeremy Katz <katzj at redhat.com> - 2.1.9-2
- fix pup transitions (#177262)
- fix xen disks (#177599)


policy-20060104.patch:
 Makefile                                  |    2 
 policy/modules/admin/amanda.te            |    4 
 policy/modules/admin/kudzu.te             |    1 
 policy/modules/admin/readahead.te         |    6 +
 policy/modules/admin/rpm.fc               |    2 
 policy/modules/admin/su.if                |    2 
 policy/modules/admin/vpn.te               |    7 +
 policy/modules/apps/alsa.fc               |    3 
 policy/modules/apps/alsa.if               |   21 ++++
 policy/modules/apps/alsa.te               |   34 ++++++++
 policy/modules/apps/java.fc               |    4 
 policy/modules/apps/java.if               |   23 +++++
 policy/modules/apps/java.te               |   25 +++++
 policy/modules/apps/wine.fc               |    2 
 policy/modules/apps/wine.if               |   23 +++++
 policy/modules/apps/wine.te               |   27 ++++++
 policy/modules/kernel/corecommands.te     |    6 +
 policy/modules/kernel/devices.if          |   16 +++
 policy/modules/kernel/domain.if           |    1 
 policy/modules/kernel/domain.te           |    4 
 policy/modules/kernel/files.if            |   17 ++++
 policy/modules/kernel/mls.te              |    2 
 policy/modules/kernel/storage.fc          |    1 
 policy/modules/services/apache.te         |    9 ++
 policy/modules/services/apm.te            |    1 
 policy/modules/services/automount.te      |   10 ++
 policy/modules/services/bind.if           |   19 ++++
 policy/modules/services/cron.te           |   34 +-------
 policy/modules/services/cups.te           |    6 -
 policy/modules/services/dovecot.te        |    1 
 policy/modules/services/finger.te         |    1 
 policy/modules/services/hal.fc            |    1 
 policy/modules/services/hal.te            |   20 +++-
 policy/modules/services/kerberos.te       |    5 -
 policy/modules/services/locate.fc         |    4 
 policy/modules/services/locate.if         |    1 
 policy/modules/services/locate.te         |   50 +++++++++++
 policy/modules/services/mta.te            |   10 ++
 policy/modules/services/networkmanager.te |    5 -
 policy/modules/services/ntp.te            |    2 
 policy/modules/services/prelink.fc        |    7 +
 policy/modules/services/prelink.if        |   39 +++++++++
 policy/modules/services/prelink.te        |   64 +++++++++++++++
 policy/modules/services/samba.if          |    2 
 policy/modules/services/sendmail.te       |    2 
 policy/modules/services/ssh.if            |    4 
 policy/modules/services/xdm.te            |    4 
 policy/modules/system/authlogin.if        |   14 +++
 policy/modules/system/authlogin.te        |   12 --
 policy/modules/system/fstools.te          |    2 
 policy/modules/system/hostname.te         |   37 +-------
 policy/modules/system/init.if             |    3 
 policy/modules/system/init.te             |   20 +---
 policy/modules/system/iptables.te         |    1 
 policy/modules/system/libraries.fc        |  127 +++++++++++++++---------------
 policy/modules/system/libraries.te        |    4 
 policy/modules/system/locallogin.te       |    1 
 policy/modules/system/lvm.te              |    9 --
 policy/modules/system/mount.te            |    3 
 policy/modules/system/selinuxutil.te      |    1 
 policy/modules/system/unconfined.if       |    1 
 policy/modules/system/unconfined.te       |   12 +-
 policy/modules/system/userdomain.fc       |    2 
 policy/modules/system/userdomain.if       |   67 +++++++++++----
 policy/modules/system/userdomain.te       |    1 
 policy/users                              |    8 +
 66 files changed, 659 insertions(+), 200 deletions(-)

Index: policy-20060104.patch
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/policy-20060104.patch,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- policy-20060104.patch	11 Jan 2006 22:32:04 -0000	1.9
+++ policy-20060104.patch	12 Jan 2006 02:36:17 -0000	1.10
@@ -1692,3 +1692,24 @@
 +		gen_user(root, sysadm_r staff_r secadm_r , s0, s0 - s15:c0.c255, c0.c255)
  	')
  ')
+--- serefpolicy-2.1.9/policy/modules/admin/rpm.fc.pirut	2006-01-11 18:59:28.000000000 -0500
++++ serefpolicy-2.1.9/policy/modules/admin/rpm.fc	2006-01-11 18:59:31.000000000 -0500
+@@ -15,6 +15,8 @@
+ ifdef(`distro_redhat', `
+ /usr/sbin/up2date		--	gen_context(system_u:object_r:rpm_exec_t,s0)
+ /usr/sbin/rhn_check		--	gen_context(system_u:object_r:rpm_exec_t,s0)
++/usr/sbin/pup			--	gen_context(system_u:object_r:rpm_exec_t,s0)
++/usr/sbin/pirut			--	gen_context(system_u:object_r:rpm_exec_t,s0)
+ ')
+ 
+ /var/lib/alternatives(/.*)?		gen_context(system_u:object_r:rpm_var_lib_t,s0)
+--- serefpolicy-2.1.9/policy/modules/kernel/storage.fc.xen	2006-01-11 21:31:15.000000000 -0500
++++ serefpolicy-2.1.9/policy/modules/kernel/storage.fc	2006-01-11 21:31:48.000000000 -0500
+@@ -12,6 +12,7 @@
+ /dev/cm20.*		-b	gen_context(system_u:object_r:removable_device_t,s0)
+ /dev/dasd[^/]*		-b	gen_context(system_u:object_r:fixed_disk_device_t,s15:c0.c255)
+ /dev/dm-[0-9]+		-b	gen_context(system_u:object_r:fixed_disk_device_t,s15:c0.c255)
++/dev/xvd[^/]*		-b	gen_context(system_u:object_r:fixed_disk_device_t,s15:c0.c255)
+ /dev/fd[^/]+		-b	gen_context(system_u:object_r:removable_device_t,s0)
+ /dev/flash[^/]*		-b	gen_context(system_u:object_r:fixed_disk_device_t,s15:c0.c255)
+ /dev/gscd		-b	gen_context(system_u:object_r:removable_device_t,s0)


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/dist/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.81
retrieving revision 1.82
diff -u -r1.81 -r1.82
--- selinux-policy.spec	11 Jan 2006 22:25:06 -0000	1.81
+++ selinux-policy.spec	12 Jan 2006 02:36:17 -0000	1.82
@@ -7,7 +7,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 2.1.9
-Release: 1
+Release: 2
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -262,6 +262,10 @@
 %endif
 
 %changelog
+* Wed Jan 11 2006 Jeremy Katz <katzj at redhat.com> - 2.1.9-2
+- fix pup transitions (#177262)
+- fix xen disks (#177599)
+
 * Tue Jan 10 2006 Dan Walsh <dwalsh at redhat.com> 2.1.9-1
 - Update to upstream
 




More information about the fedora-cvs-commits mailing list