rpms/selinux-policy/F-8 policy-20070703.patch, 1.230, 1.231 selinux-policy.spec, 1.651, 1.652

[Daniel J Walsh]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/F-8
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv18001

Modified Files:
	policy-20070703.patch selinux-policy.spec 
Log Message:
* Thu Nov 13 2008 Dan Walsh <dwalsh at redhat.com> 3.0.8-124
- More fixes for NetworkManager/dnsmasq


policy-20070703.patch:

Index: policy-20070703.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-8/policy-20070703.patch,v
retrieving revision 1.230
retrieving revision 1.231
diff -u -r1.230 -r1.231
--- policy-20070703.patch	29 Oct 2008 18:23:46 -0000	1.230
+++ policy-20070703.patch	13 Nov 2008 15:49:40 -0000	1.231
@@ -13552,7 +13552,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/munin.te serefpolicy-3.0.8/policy/modules/services/munin.te
 --- nsaserefpolicy/policy/modules/services/munin.te	2008-06-12 23:37:57.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/services/munin.te	2008-10-20 16:22:16.000000000 -0400
++++ serefpolicy-3.0.8/policy/modules/services/munin.te	2008-10-28 19:45:31.000000000 -0400
 @@ -1,5 +1,5 @@
  
 -policy_module(munin,1.3.0)
@@ -13615,7 +13615,7 @@
  dev_read_urand(munin_t)
  
  domain_use_interactive_fds(munin_t)
-+domain_dontaudit_read_all_domains_state(munin_t)
++domain_read_all_domains_state(munin_t)
  
  files_read_etc_files(munin_t)
  files_read_etc_runtime_files(munin_t)
@@ -14047,7 +14047,7 @@
 +')
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/networkmanager.te serefpolicy-3.0.8/policy/modules/services/networkmanager.te
 --- nsaserefpolicy/policy/modules/services/networkmanager.te	2008-06-12 23:37:57.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/services/networkmanager.te	2008-10-20 16:27:31.000000000 -0400
++++ serefpolicy-3.0.8/policy/modules/services/networkmanager.te	2008-11-03 15:38:58.000000000 -0500
 @@ -1,5 +1,5 @@
  
 -policy_module(networkmanager,1.7.1)
@@ -14120,7 +14120,7 @@
  kernel_read_kernel_sysctls(NetworkManager_t)
  kernel_load_module(NetworkManager_t)
 +kernel_read_debugfs(NetworkManager_t)
-+kernel_search_network_sysctl(NetworkManager_t)
++kernel_rw_net_sysctls(NetworkManager_t)
  
  corenet_all_recvfrom_unlabeled(NetworkManager_t)
  corenet_all_recvfrom_netlabel(NetworkManager_t)
@@ -14199,7 +14199,7 @@
  ')
  
  optional_policy(`
-@@ -129,15 +173,18 @@
+@@ -129,15 +173,19 @@
  ')
  
  optional_policy(`
@@ -14216,6 +14216,7 @@
 +')
 +
 +optional_policy(`
++	dnsmasq_domtrans(NetworkManager_t)
 +	dnsmasq_initrc_domtrans(NetworkManager_t)
 +	dnsmasq_signal(NetworkManager_t)
 +	dnsmasq_sigkill(NetworkManager_t)
@@ -14227,7 +14228,7 @@
  ')
  
  optional_policy(`
-@@ -145,39 +192,86 @@
+@@ -145,39 +193,86 @@
  ')
  
  optional_policy(`
@@ -16818,7 +16819,7 @@
 +
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/ppp.te serefpolicy-3.0.8/policy/modules/services/ppp.te
 --- nsaserefpolicy/policy/modules/services/ppp.te	2008-06-12 23:37:57.000000000 -0400
-+++ serefpolicy-3.0.8/policy/modules/services/ppp.te	2008-10-20 16:22:16.000000000 -0400
++++ serefpolicy-3.0.8/policy/modules/services/ppp.te	2008-10-29 10:50:58.000000000 -0400
 @@ -1,5 +1,5 @@
  
 -policy_module(ppp,1.5.0)
@@ -16929,7 +16930,7 @@
  miscfiles_read_localization(pptp_t)
  
  sysnet_read_config(pptp_t)
-+sysnet_exec_ifconfig(pppd_t)
++sysnet_exec_ifconfig(pptp_t)
  
  userdom_dontaudit_use_unpriv_user_fds(pptp_t)
  userdom_dontaudit_search_sysadm_home_dirs(pptp_t)


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-8/selinux-policy.spec,v
retrieving revision 1.651
retrieving revision 1.652
diff -u -r1.651 -r1.652
--- selinux-policy.spec	29 Oct 2008 18:23:47 -0000	1.651
+++ selinux-policy.spec	13 Nov 2008 15:49:41 -0000	1.652
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.0.8
-Release: 123%{?dist}
+Release: 124%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -382,6 +382,9 @@
 %endif
 
 %changelog
+* Thu Nov 13 2008 Dan Walsh <dwalsh at redhat.com> 3.0.8-124
+- More fixes for NetworkManager/dnsmasq
+
 * Mon Oct 27 2008 Dan Walsh <dwalsh at redhat.com> 3.0.8-123
 - Update to latest audit policy