rpms/selinux-policy/F-7 modules-targeted.conf, 1.59, 1.60 policy-20070501.patch, 1.21, 1.22 selinux-policy.spec, 1.465, 1.466

Daniel J Walsh (dwalsh) fedora-extras-commits at redhat.com
Mon Jun 18 16:21:28 UTC 2007


Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29857

Modified Files:
	modules-targeted.conf policy-20070501.patch 
	selinux-policy.spec 
Log Message:
* Thu Jun 14 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-17
- Allow udev to manage xen logs



Index: modules-targeted.conf
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-7/modules-targeted.conf,v
retrieving revision 1.59
retrieving revision 1.60
diff -u -r1.59 -r1.60
--- modules-targeted.conf	4 May 2007 17:14:04 -0000	1.59
+++ modules-targeted.conf	18 Jun 2007 16:20:49 -0000	1.60
@@ -674,6 +674,13 @@
 # 
 mailman = base
 
+# Layer: services
+# Module: mailscanner
+#
+# Anti-Virus and Anti-Spam Filter
+# 
+mailscanner = module
+
 # Layer: kernel
 # Module: mcs
 # Required in base

policy-20070501.patch:

View full diff with command:
/usr/bin/cvs -f diff  -kk -u -N -r 1.21 -r 1.22 policy-20070501.patch
Index: policy-20070501.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-7/policy-20070501.patch,v
retrieving revision 1.21
retrieving revision 1.22
diff -u -r1.21 -r1.22
--- policy-20070501.patch	14 Jun 2007 14:40:43 -0000	1.21
+++ policy-20070501.patch	18 Jun 2007 16:20:49 -0000	1.22
@@ -1,6 +1,6 @@
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/man/man8/ftpd_selinux.8 serefpolicy-2.6.4/man/man8/ftpd_selinux.8
 --- nsaserefpolicy/man/man8/ftpd_selinux.8	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/man/man8/ftpd_selinux.8	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/man/man8/ftpd_selinux.8	2007-06-18 10:18:55.000000000 -0400
 @@ -12,7 +12,7 @@
  .TP
  chcon -R -t public_content_t /var/ftp
@@ -12,7 +12,7 @@
  .TP
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/flask/access_vectors serefpolicy-2.6.4/policy/flask/access_vectors
 --- nsaserefpolicy/policy/flask/access_vectors	2007-05-07 14:50:57.000000000 -0400
-+++ serefpolicy-2.6.4/policy/flask/access_vectors	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/flask/access_vectors	2007-06-18 10:18:55.000000000 -0400
 @@ -598,6 +598,8 @@
  	shmempwd
  	shmemgrp
@@ -33,7 +33,7 @@
  class key
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/global_booleans serefpolicy-2.6.4/policy/global_booleans
 --- nsaserefpolicy/policy/global_booleans	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/global_booleans	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/global_booleans	2007-06-18 10:18:55.000000000 -0400
 @@ -4,7 +4,6 @@
  # file should be used.
  #
@@ -52,7 +52,7 @@
  ## <p>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/global_tunables serefpolicy-2.6.4/policy/global_tunables
 --- nsaserefpolicy/policy/global_tunables	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/global_tunables	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/global_tunables	2007-06-18 10:18:55.000000000 -0400
 @@ -102,12 +102,6 @@
  ## </desc>
  gen_tunable(use_samba_home_dirs,false)
@@ -81,7 +81,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/mls serefpolicy-2.6.4/policy/mls
 --- nsaserefpolicy/policy/mls	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/mls	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/mls	2007-06-18 10:18:55.000000000 -0400
 @@ -89,12 +89,14 @@
  mlsconstrain { file lnk_file fifo_file dir chr_file blk_file sock_file } { write create setattr relabelfrom append unlink link rename mounton }
  	(( l1 eq l2 ) or
@@ -155,7 +155,7 @@
  mlsconstrain association { polmatch }
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/acct.te serefpolicy-2.6.4/policy/modules/admin/acct.te
 --- nsaserefpolicy/policy/modules/admin/acct.te	2007-05-07 14:51:04.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/acct.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/acct.te	2007-06-18 10:18:55.000000000 -0400
 @@ -9,6 +9,7 @@
  type acct_t;
  type acct_exec_t;
@@ -166,7 +166,7 @@
  logging_log_file(acct_data_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/alsa.fc serefpolicy-2.6.4/policy/modules/admin/alsa.fc
 --- nsaserefpolicy/policy/modules/admin/alsa.fc	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/alsa.fc	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/alsa.fc	2007-06-18 10:18:55.000000000 -0400
 @@ -1,4 +1,7 @@
  
  /etc/alsa/pcm(/.*)?		gen_context(system_u:object_r:alsa_etc_rw_t,s0)
@@ -177,7 +177,7 @@
 +/sbin/alsactl 		--	gen_context(system_u:object_r:alsa_exec_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/alsa.te serefpolicy-2.6.4/policy/modules/admin/alsa.te
 --- nsaserefpolicy/policy/modules/admin/alsa.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/alsa.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/alsa.te	2007-06-18 10:18:55.000000000 -0400
 @@ -20,20 +20,24 @@
  # Local policy
  #
@@ -226,7 +226,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/amanda.te serefpolicy-2.6.4/policy/modules/admin/amanda.te
 --- nsaserefpolicy/policy/modules/admin/amanda.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/amanda.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/amanda.te	2007-06-18 10:18:55.000000000 -0400
 @@ -85,7 +85,7 @@
  
  # access to amandas data structure
@@ -248,14 +248,14 @@
  logging_log_filetrans(amanda_t,amanda_log_t,{ file dir })
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/amtu.fc serefpolicy-2.6.4/policy/modules/admin/amtu.fc
 --- nsaserefpolicy/policy/modules/admin/amtu.fc	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-2.6.4/policy/modules/admin/amtu.fc	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/amtu.fc	2007-06-18 10:18:55.000000000 -0400
 @@ -0,0 +1,3 @@
 +
 +/usr/bin/amtu    --    gen_context(system_u:object_r:amtu_exec_t,s0)
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/amtu.if serefpolicy-2.6.4/policy/modules/admin/amtu.if
 --- nsaserefpolicy/policy/modules/admin/amtu.if	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-2.6.4/policy/modules/admin/amtu.if	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/amtu.if	2007-06-18 10:18:55.000000000 -0400
 @@ -0,0 +1,53 @@
 +## <summary>
 +##	abstract Machine Test Utility 
@@ -312,7 +312,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/amtu.te serefpolicy-2.6.4/policy/modules/admin/amtu.te
 --- nsaserefpolicy/policy/modules/admin/amtu.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-2.6.4/policy/modules/admin/amtu.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/amtu.te	2007-06-18 10:18:55.000000000 -0400
 @@ -0,0 +1,57 @@
 +policy_module(amtu,1.0.23)
 +
@@ -373,7 +373,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/bootloader.te serefpolicy-2.6.4/policy/modules/admin/bootloader.te
 --- nsaserefpolicy/policy/modules/admin/bootloader.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/bootloader.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/bootloader.te	2007-06-18 10:18:55.000000000 -0400
 @@ -65,6 +65,8 @@
  files_tmp_filetrans(bootloader_t,bootloader_tmp_t,{ dir file lnk_file chr_file blk_file })
  # for tune2fs (cjp: ?)
@@ -393,7 +393,7 @@
  optional_policy(`
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/consoletype.te serefpolicy-2.6.4/policy/modules/admin/consoletype.te
 --- nsaserefpolicy/policy/modules/admin/consoletype.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/consoletype.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/consoletype.te	2007-06-18 11:02:19.000000000 -0400
 @@ -8,7 +8,12 @@
  
  type consoletype_t;
@@ -425,9 +425,20 @@
  
  domain_use_interactive_fds(consoletype_t)
  
+@@ -93,6 +99,10 @@
+ ')
+ 
+ optional_policy(`
++	hotplug_dontaudit_use_fds(consoletype_t)
++')
++
++optional_policy(`
+ 	logrotate_dontaudit_use_fds(consoletype_t)
+ ')
+ 
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/dmesg.te serefpolicy-2.6.4/policy/modules/admin/dmesg.te
 --- nsaserefpolicy/policy/modules/admin/dmesg.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/dmesg.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/dmesg.te	2007-06-18 10:18:55.000000000 -0400
 @@ -10,6 +10,7 @@
  	type dmesg_t;
  	type dmesg_exec_t;
@@ -438,7 +449,7 @@
  
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kudzu.te serefpolicy-2.6.4/policy/modules/admin/kudzu.te
 --- nsaserefpolicy/policy/modules/admin/kudzu.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/kudzu.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/kudzu.te	2007-06-18 10:18:55.000000000 -0400
 @@ -21,8 +21,8 @@
  # Local policy
  #
@@ -461,7 +472,7 @@
  init_telinit(kudzu_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/logrotate.te serefpolicy-2.6.4/policy/modules/admin/logrotate.te
 --- nsaserefpolicy/policy/modules/admin/logrotate.te	2007-05-07 14:51:04.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/logrotate.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/logrotate.te	2007-06-18 10:18:55.000000000 -0400
 @@ -75,6 +75,7 @@
  mls_file_read_up(logrotate_t)
  mls_file_write_down(logrotate_t)
@@ -472,7 +483,7 @@
  selinux_get_enforce_mode(logrotate_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/logwatch.te serefpolicy-2.6.4/policy/modules/admin/logwatch.te
 --- nsaserefpolicy/policy/modules/admin/logwatch.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/logwatch.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/logwatch.te	2007-06-18 10:18:55.000000000 -0400
 @@ -30,7 +30,6 @@
  allow logwatch_t self:process signal;
  allow logwatch_t self:fifo_file rw_file_perms;
@@ -533,7 +544,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/netutils.te serefpolicy-2.6.4/policy/modules/admin/netutils.te
 --- nsaserefpolicy/policy/modules/admin/netutils.te	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/netutils.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/netutils.te	2007-06-18 10:18:55.000000000 -0400
 @@ -31,6 +31,7 @@
  type traceroute_t;
  type traceroute_exec_t;
@@ -544,7 +555,7 @@
  ########################################
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/prelink.te serefpolicy-2.6.4/policy/modules/admin/prelink.te
 --- nsaserefpolicy/policy/modules/admin/prelink.te	2007-05-07 14:51:04.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/admin/prelink.te	2007-06-12 11:16:32.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/admin/prelink.te	2007-06-18 10:18:55.000000000 -0400
 @@ -26,7 +26,7 @@
  # Local policy
  #
@@ -554,17 +565,18 @@
[...2258 lines suppressed...]
  #
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/selinuxutil.if serefpolicy-2.6.4/policy/modules/system/selinuxutil.if
 --- nsaserefpolicy/policy/modules/system/selinuxutil.if	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/selinuxutil.if	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/selinuxutil.if	2007-06-18 10:18:55.000000000 -0400
 @@ -445,6 +445,7 @@
  	role $2 types run_init_t;
  	allow run_init_t $3:chr_file rw_term_perms;
@@ -8269,7 +8525,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/selinuxutil.te serefpolicy-2.6.4/policy/modules/system/selinuxutil.te
 --- nsaserefpolicy/policy/modules/system/selinuxutil.te	2007-05-07 14:51:01.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/selinuxutil.te	2007-06-14 08:16:50.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/selinuxutil.te	2007-06-18 10:18:55.000000000 -0400
 @@ -1,10 +1,8 @@
  
  policy_module(selinuxutil,1.5.0)
@@ -8503,7 +8759,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/sysnetwork.te serefpolicy-2.6.4/policy/modules/system/sysnetwork.te
 --- nsaserefpolicy/policy/modules/system/sysnetwork.te	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/sysnetwork.te	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/sysnetwork.te	2007-06-18 10:18:55.000000000 -0400
 @@ -164,6 +164,10 @@
  	dbus_connect_system_bus(dhcpc_t)
  	dbus_send_system_bus(dhcpc_t)
@@ -8533,7 +8789,7 @@
  optional_policy(`
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/udev.te serefpolicy-2.6.4/policy/modules/system/udev.te
 --- nsaserefpolicy/policy/modules/system/udev.te	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/udev.te	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/udev.te	2007-06-18 11:26:44.000000000 -0400
 @@ -18,11 +18,6 @@
  type udev_etc_t alias etc_udev_t;
  files_config_file(udev_etc_t)
@@ -8546,21 +8802,23 @@
  type udev_tbl_t alias udev_tdb_t;
  files_type(udev_tbl_t)
  
-@@ -69,7 +64,7 @@
+@@ -68,8 +63,9 @@
+ allow udev_t udev_tbl_t:file manage_file_perms;
  dev_filetrans(udev_t,udev_tbl_t,file)
  
++manage_dirs_pattern(udev_t,udev_var_run_t,udev_var_run_t)
  manage_files_pattern(udev_t,udev_var_run_t,udev_var_run_t)
 -files_pid_filetrans(udev_t,udev_var_run_t,file)
 +files_pid_filetrans(udev_t,udev_var_run_t,{ file dir })
  
  kernel_read_system_state(udev_t)
  kernel_getattr_core_if(udev_t)
-@@ -83,16 +78,22 @@
+@@ -83,16 +79,22 @@
  kernel_dgram_send(udev_t)
  kernel_signal(udev_t)
  
 +#https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235182
-+kernel_read_net_sysctls(udev_t)
++kernel_rw_net_sysctls(udev_t)
 +kernel_read_network_state(udev_t)
 +
  corecmd_exec_all_executables(udev_t)
@@ -8578,11 +8836,12 @@
  files_read_etc_runtime_files(udev_t)
  files_read_etc_files(udev_t)
  files_exec_etc_files(udev_t)
-@@ -142,8 +143,11 @@
+@@ -142,8 +144,12 @@
  seutil_read_file_contexts(udev_t)
  seutil_domtrans_restorecon(udev_t)
  
 +sysnet_read_dhcpc_pid(udev_t)
++sysnet_read_dhcp_config(udev_t)
 +sysnet_delete_dhcpc_pid(udev_t)
  sysnet_domtrans_ifconfig(udev_t)
  sysnet_domtrans_dhcpc(udev_t)
@@ -8590,7 +8849,7 @@
  
  userdom_use_sysadm_ttys(udev_t)
  userdom_dontaudit_search_all_users_home_content(udev_t)
-@@ -194,5 +198,24 @@
+@@ -194,5 +200,24 @@
  ')
  
  optional_policy(`
@@ -8604,7 +8863,7 @@
 +')
 +
 +optional_policy(`
-+	xen_append_log(udev_t)
++	xen_manage_log(udev_t)
 +	kernel_write_xen_state(udev_t)
 +	kernel_read_xen_state(udev_t)
 +	xen_read_image_files(udev_t)
@@ -8617,7 +8876,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.fc serefpolicy-2.6.4/policy/modules/system/unconfined.fc
 --- nsaserefpolicy/policy/modules/system/unconfined.fc	2007-05-07 14:51:01.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/unconfined.fc	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/unconfined.fc	2007-06-18 10:18:55.000000000 -0400
 @@ -10,4 +10,5 @@
  /usr/bin/valgrind 		--	gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
  /usr/local/RealPlayer/realplay\.bin --	gen_context(system_u:object_r:unconfined_execmem_exec_t,s0)
@@ -8626,7 +8885,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.if serefpolicy-2.6.4/policy/modules/system/unconfined.if
 --- nsaserefpolicy/policy/modules/system/unconfined.if	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/unconfined.if	2007-06-14 10:40:13.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/unconfined.if	2007-06-18 10:18:55.000000000 -0400
 @@ -18,7 +18,7 @@
  	')
  
@@ -8712,7 +8971,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/unconfined.te serefpolicy-2.6.4/policy/modules/system/unconfined.te
 --- nsaserefpolicy/policy/modules/system/unconfined.te	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/unconfined.te	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/unconfined.te	2007-06-18 10:18:55.000000000 -0400
 @@ -6,6 +6,15 @@
  # Declarations
  #
@@ -8797,7 +9056,7 @@
  		init_dbus_chat_script(unconfined_execmem_t)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.if serefpolicy-2.6.4/policy/modules/system/userdomain.if
 --- nsaserefpolicy/policy/modules/system/userdomain.if	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/userdomain.if	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/userdomain.if	2007-06-18 10:18:55.000000000 -0400
 @@ -114,6 +114,22 @@
  		# Allow making the stack executable via mprotect.
  		allow $1_t self:process execstack;
@@ -9349,7 +9608,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.te serefpolicy-2.6.4/policy/modules/system/userdomain.te
 --- nsaserefpolicy/policy/modules/system/userdomain.te	2007-05-07 14:51:01.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/userdomain.te	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/userdomain.te	2007-06-18 10:18:55.000000000 -0400
 @@ -15,7 +15,6 @@
  # Declarations
  #
@@ -9547,7 +9806,7 @@
  ')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/xen.if serefpolicy-2.6.4/policy/modules/system/xen.if
 --- nsaserefpolicy/policy/modules/system/xen.if	2007-05-07 14:51:01.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/xen.if	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/xen.if	2007-06-18 10:18:55.000000000 -0400
 @@ -72,12 +72,35 @@
  	')
  
@@ -9612,7 +9871,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/xen.te serefpolicy-2.6.4/policy/modules/system/xen.te
 --- nsaserefpolicy/policy/modules/system/xen.te	2007-05-07 14:51:02.000000000 -0400
-+++ serefpolicy-2.6.4/policy/modules/system/xen.te	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/system/xen.te	2007-06-18 10:28:01.000000000 -0400
 @@ -25,6 +25,10 @@
  domain_type(xend_t)
  init_daemon_domain(xend_t, xend_exec_t)
@@ -9694,6 +9953,15 @@
  ########################################
  #
  # Xen console local policy
+@@ -250,7 +260,7 @@
+ 
+ miscfiles_read_localization(xenconsoled_t)
+ 
+-xen_append_log(xenconsoled_t)
++xen_manage_log(xenconsoled_t)
+ xen_stream_connect_xenstore(xenconsoled_t)
+ 
+ ########################################
 @@ -284,6 +294,12 @@
  
  files_read_usr_files(xenstored_t)
@@ -9739,7 +10007,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/support/misc_patterns.spt serefpolicy-2.6.4/policy/support/misc_patterns.spt
 --- nsaserefpolicy/policy/support/misc_patterns.spt	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/support/misc_patterns.spt	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/support/misc_patterns.spt	2007-06-18 10:18:55.000000000 -0400
 @@ -41,11 +41,6 @@
  #
  # Other process permissions
@@ -9754,7 +10022,7 @@
  	allow $1 $2:{ file lnk_file } { read getattr };
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/support/obj_perm_sets.spt serefpolicy-2.6.4/policy/support/obj_perm_sets.spt
 --- nsaserefpolicy/policy/support/obj_perm_sets.spt	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/policy/support/obj_perm_sets.spt	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/policy/support/obj_perm_sets.spt	2007-06-18 10:18:55.000000000 -0400
 @@ -203,7 +203,6 @@
  define(`add_entry_dir_perms',`{ getattr search lock ioctl write add_name }')
  define(`del_entry_dir_perms',`{ getattr search lock ioctl write remove_name }')
@@ -9788,7 +10056,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/Rules.modular serefpolicy-2.6.4/Rules.modular
 --- nsaserefpolicy/Rules.modular	2007-05-07 14:51:05.000000000 -0400
-+++ serefpolicy-2.6.4/Rules.modular	2007-06-12 11:16:33.000000000 -0400
++++ serefpolicy-2.6.4/Rules.modular	2007-06-18 10:18:55.000000000 -0400
 @@ -167,7 +167,7 @@
  # these have to run individually because order matters:
  	$(verbose) $(GREP) '^sid ' $(tmpdir)/all_te_files.conf >> $(tmpdir)/all_post.conf || true


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-7/selinux-policy.spec,v
retrieving revision 1.465
retrieving revision 1.466
diff -u -r1.465 -r1.466
--- selinux-policy.spec	14 Jun 2007 14:20:12 -0000	1.465
+++ selinux-policy.spec	18 Jun 2007 16:20:49 -0000	1.466
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 2.6.4
-Release: 15%{?dist}
+Release: 17%{?dist}
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -360,7 +360,13 @@
 %endif
 
 %changelog
-* Wed Jun 6 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-15
+* Thu Jun 14 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-17
+- Allow udev to manage xen logs
+
+* Thu Jun 14 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-16
+- Allow udev to create directory in /var/run
+
+* Wed Jun 13 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-15
 - Allow udev to signal dhcpc
 
 * Wed Jun 6 2007 Dan Walsh <dwalsh at redhat.com> 2.6.4-14




More information about the fedora-extras-commits mailing list