rpms/selinux-policy/F-8 policy-20070703.patch, 1.107, 1.108 selinux-policy.spec, 1.557, 1.558

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-8
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv3806

Modified Files:
	policy-20070703.patch selinux-policy.spec 
Log Message:
* Thu Oct 25 2007 Dan Walsh <dwalsh at redhat.com> 3.0.8-35
- Add ecryptfs definition


policy-20070703.patch:

Index: policy-20070703.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-8/policy-20070703.patch,v
retrieving revision 1.107
retrieving revision 1.108
diff -u -r1.107 -r1.108
--- policy-20070703.patch	25 Oct 2007 21:46:04 -0000	1.107
+++ policy-20070703.patch	25 Oct 2007 23:48:40 -0000	1.108
@@ -4383,16 +4383,24 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesystem.te serefpolicy-3.0.8/policy/modules/kernel/filesystem.te
 --- nsaserefpolicy/policy/modules/kernel/filesystem.te	2007-10-22 13:21:41.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.te	2007-10-22 13:22:31.000000000 -0400
-@@ -29,6 +29,7 @@
++++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.te	2007-10-25 19:46:18.000000000 -0400
+@@ -21,6 +21,7 @@
+ 
+ # Use xattrs for the following filesystem types.
+ # Requires that a security xattr handler exist for the filesystem.
++fs_use_xattr ecryptfs gen_context(system_u:object_r:fs_t,s0);
+ fs_use_xattr encfs gen_context(system_u:object_r:fs_t,s0);
+ fs_use_xattr ext2 gen_context(system_u:object_r:fs_t,s0);
+ fs_use_xattr ext3 gen_context(system_u:object_r:fs_t,s0);
+@@ -28,6 +29,7 @@
+ fs_use_xattr gfs2 gen_context(system_u:object_r:fs_t,s0);
  fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0);
  fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0);
- fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0);
 +fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0);
+ fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0);
  
  # Use the allocating task SID to label inodes in the following filesystem
- # types, and label the filesystem itself with the specified context.
-@@ -80,6 +81,7 @@
+@@ -80,6 +82,7 @@
  type fusefs_t;
  fs_noxattr_type(fusefs_t)
  allow fusefs_t self:filesystem associate;
@@ -4400,7 +4408,7 @@
  genfscon fuse / gen_context(system_u:object_r:fusefs_t,s0)
  genfscon fuseblk / gen_context(system_u:object_r:fusefs_t,s0)
  
-@@ -116,6 +118,7 @@
+@@ -116,6 +119,7 @@
  
  type ramfs_t;
  fs_type(ramfs_t)
@@ -4408,7 +4416,7 @@
  genfscon ramfs / gen_context(system_u:object_r:ramfs_t,s0)
  
  type romfs_t;
-@@ -133,6 +136,11 @@
+@@ -133,6 +137,11 @@
  genfscon spufs / gen_context(system_u:object_r:spufs_t,s0)
  files_mountpoint(spufs_t)
  


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-8/selinux-policy.spec,v
retrieving revision 1.557
retrieving revision 1.558
diff -u -r1.557 -r1.558
--- selinux-policy.spec	25 Oct 2007 21:46:04 -0000	1.557
+++ selinux-policy.spec	25 Oct 2007 23:48:40 -0000	1.558
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.0.8
-Release: 34%{?dist}
+Release: 35%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -373,6 +373,9 @@
 %endif
 
 %changelog
+* Thu Oct 25 2007 Dan Walsh <dwalsh at redhat.com> 3.0.8-35
+- Add ecryptfs definition
+
 * Thu Oct 25 2007 Dan Walsh <dwalsh at redhat.com> 3.0.8-34
 - Allow automounter to create a sock file in /var/run/autofs
 - Fix corecmd_search_sbin to  be corecmd_search_bin