rpms/selinux-policy/devel policy-20071130.patch, 1.86, 1.87 selinux-policy.spec, 1.623, 1.624

Daniel J Walsh (dwalsh) fedora-extras-commits at redhat.com
Fri Feb 29 22:33:29 UTC 2008


Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15708

Modified Files:
	policy-20071130.patch selinux-policy.spec 
Log Message:
* Fri Feb 29 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-9
- More xselinux rules


policy-20071130.patch:

Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20071130.patch,v
retrieving revision 1.86
retrieving revision 1.87
diff -u -r1.86 -r1.87
--- policy-20071130.patch	29 Feb 2008 22:18:30 -0000	1.86
+++ policy-20071130.patch	29 Feb 2008 22:33:21 -0000	1.87
@@ -22901,7 +22901,7 @@
  /var/lib/pam_devperm/:0	--	gen_context(system_u:object_r:xdm_var_lib_t,s0)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.if serefpolicy-3.3.1/policy/modules/services/xserver.if
 --- nsaserefpolicy/policy/modules/services/xserver.if	2007-12-04 11:02:50.000000000 -0500
-+++ serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-02-29 17:16:49.000000000 -0500
++++ serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-02-29 17:24:22.000000000 -0500
 @@ -15,6 +15,11 @@
  template(`xserver_common_domain_template',`
  	gen_require(`
@@ -23568,22 +23568,22 @@
 +	# can receive own events
 +	allow $3 $2_input_xevent_t:{ x_event x_synthetic_event } receive;
 +	allow $3 input_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_property_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_manage_xevent_t:{ x_event x_synthetic_event } receive;
 +	allow $1_t $2_manage_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_default_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } {send receive };
 +	
 +	allow $3 $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
-+	allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send };
++	allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
 +	type_transition $2_t input_xevent_t:x_event $2_input_xevent_t;
 +	type_transition $2_t property_xevent_t:x_event $2_property_xevent_t;
 +	type_transition $2_t focus_xevent_t:x_event $2_focus_xevent_t;


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.623
retrieving revision 1.624
diff -u -r1.623 -r1.624
--- selinux-policy.spec	29 Feb 2008 22:13:08 -0000	1.623
+++ selinux-policy.spec	29 Feb 2008 22:33:22 -0000	1.624
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.3.1
-Release: 8%{?dist}
+Release: 9%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -388,6 +388,9 @@
 %endif
 
 %changelog
+* Fri Feb 29 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-9
+- More xselinux rules
+
 * Thu Feb 28 2008 Dan Walsh <dwalsh at redhat.com> 3.3.1-8
 - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t
 




More information about the fedora-extras-commits mailing list