rpms/selinux-policy/devel policy-20071130.patch,1.53,1.54

[Daniel J Walsh (dwalsh)]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv25890

Modified Files:
	policy-20071130.patch 
Log Message:
* Tue Feb 5 2008 Dan Walsh <dwalsh at redhat.com> 3.2.6-6
- Add policy for kerneloops
- Add policy for gnomeclock


policy-20071130.patch:

Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20071130.patch,v
retrieving revision 1.53
retrieving revision 1.54
diff -u -r1.53 -r1.54
--- policy-20071130.patch	5 Feb 2008 18:25:42 -0000	1.53
+++ policy-20071130.patch	5 Feb 2008 18:31:25 -0000	1.54
@@ -29268,8 +29268,8 @@
 +## <summary>Policy for staff user</summary>
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/staff.te serefpolicy-3.2.6/policy/modules/users/staff.te
 --- nsaserefpolicy/policy/modules/users/staff.te	1969-12-31 19:00:00.000000000 -0500
-+++ serefpolicy-3.2.6/policy/modules/users/staff.te	2008-02-05 09:47:25.000000000 -0500
-@@ -0,0 +1,55 @@
++++ serefpolicy-3.2.6/policy/modules/users/staff.te	2008-02-05 13:29:59.000000000 -0500
+@@ -0,0 +1,65 @@
 +policy_module(staff,1.0.1)
 +userdom_unpriv_user_template(staff)
 +
@@ -29284,6 +29284,8 @@
 +
 +files_read_kernel_modules(staff_t)
 +
++kernel_read_fs_sysctls(staff_t)
++
 +modutils_read_module_config(staff_t)
 +modutils_read_module_deps(staff_t)
 +
@@ -29293,6 +29295,10 @@
 +seutil_run_newrole(staff_t, staff_r, { staff_tty_device_t staff_devpts_t })
 +
 +optional_policy(`
++	gnomeclock_dbus_chat(staff_t)
++')
++
++optional_policy(`
 +	gpg_per_role_template(staff, staff_usertype, staff_r)
 +')
 +
@@ -29322,9 +29328,13 @@
 +')
 +
 +optional_policy(`
-+	xserver_per_role_template(staff, staff_t, staff_r)
++	polkit_run_grant(staff_t, staff_r, { staff_devpts_t staff_tty_device_t })
++	polkit_read_lib(staff_t)
 +')
 +
++optional_policy(`
++	xserver_per_role_template(staff, staff_t, staff_r)
++')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/users/user.fc serefpolicy-3.2.6/policy/modules/users/user.fc
 --- nsaserefpolicy/policy/modules/users/user.fc	1969-12-31 19:00:00.000000000 -0500
 +++ serefpolicy-3.2.6/policy/modules/users/user.fc	2008-02-01 16:01:42.000000000 -0500