rpms/selinux-policy/F-8 policy-20070703.patch,1.115,1.116

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-8
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6693

Modified Files:
	policy-20070703.patch 
Log Message:
* Tue Oct 30 2007 Dan Walsh <dwalsh at redhat.com> 3.0.8-42
- Make tcbdomain 
- Allow domain domain:fd use
- Dontaudit rpm_rw_pipes


policy-20070703.patch:

Index: policy-20070703.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-8/policy-20070703.patch,v
retrieving revision 1.115
retrieving revision 1.116
diff -u -r1.115 -r1.116
--- policy-20070703.patch	30 Oct 2007 21:02:53 -0000	1.115
+++ policy-20070703.patch	31 Oct 2007 00:04:07 -0000	1.116
@@ -3708,8 +3708,8 @@
  ## <param name="domain">
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/domain.if serefpolicy-3.0.8/policy/modules/kernel/domain.if
 --- nsaserefpolicy/policy/modules/kernel/domain.if	2007-10-22 13:21:42.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/kernel/domain.if	2007-10-30 16:06:28.000000000 -0400
-@@ -33,6 +33,33 @@
++++ serefpolicy-3.0.8/policy/modules/kernel/domain.if	2007-10-30 19:46:37.000000000 -0400
+@@ -33,6 +33,36 @@
  
  ########################################
  ## <summary>
@@ -3734,8 +3734,11 @@
 +		attribute tcbdomain;
 +	')
 +
-+	typeattribute $1 tcbdomain;
 +	domain_type($1)
++
++	optional_policy(`
++		unconfined_domain($1)
++	')
 +')
 +
 +########################################
@@ -3743,7 +3746,7 @@
  ##	Make the specified type usable as a domain.
  ## </summary>
  ## <param name="type">
-@@ -45,6 +72,11 @@
+@@ -45,6 +75,11 @@
  	# start with basic domain
  	domain_base_type($1)
  
@@ -3755,7 +3758,7 @@
  	# send init a sigchld and signull
  	optional_policy(`
  		init_sigchld($1)
-@@ -59,6 +91,7 @@
+@@ -59,6 +94,7 @@
  	')
  
  	optional_policy(`
@@ -3763,7 +3766,7 @@
  		selinux_dontaudit_read_fs($1)
  	')
  
-@@ -1271,3 +1304,20 @@
+@@ -1271,3 +1307,20 @@
  	typeattribute $1 mmap_low_domain_type;
  ')