rpms/selinux-policy/F-11 policy-20090521.patch, 1.26, 1.27 selinux-policy.spec, 1.882, 1.883

[Miroslav Grepl]

Author: mgrepl

Update of /cvs/extras/rpms/selinux-policy/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv12134

Modified Files:
	policy-20090521.patch selinux-policy.spec 
Log Message:
- Allow ftpd to create shm



policy-20090521.patch:

Index: policy-20090521.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-11/policy-20090521.patch,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- policy-20090521.patch	3 Jul 2009 07:57:26 -0000	1.26
+++ policy-20090521.patch	3 Jul 2009 09:40:09 -0000	1.27
@@ -1211,7 +1211,7 @@ diff -b -B --ignore-all-space --exclude-
  /dev/lp.*		-c	gen_context(system_u:object_r:printer_device_t,s0)
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.if serefpolicy-3.6.12/policy/modules/kernel/devices.if
 --- nsaserefpolicy/policy/modules/kernel/devices.if	2009-06-25 10:19:44.000000000 +0200
-+++ serefpolicy-3.6.12/policy/modules/kernel/devices.if	2009-06-25 10:21:01.000000000 +0200
++++ serefpolicy-3.6.12/policy/modules/kernel/devices.if	2009-07-03 11:25:38.000000000 +0200
 @@ -1727,6 +1727,133 @@
  
  ########################################
@@ -1346,6 +1346,28 @@ diff -b -B --ignore-all-space --exclude-
  ##	Read the lvm comtrol device.
  ## </summary>
  ## <param name="domain">
+@@ -3780,3 +3907,21 @@
+ 
+ 	typeattribute $1 devices_unconfined_type;
+ ')
++
++######################################
++## <summary>
++##      Set the attributes of the tty device
++## </summary>
++## <param name="domain">
++##      <summary>
++##      Domain allowed access.
++##      </summary>
++## </param>
++#
++interface(`dev_setattr_tty',`
++       gen_require(`
++               type devtty_t;
++       ')
++
++       setattr_chr_files_pattern($1, devtty_t, devtty_t)
++')
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.te serefpolicy-3.6.12/policy/modules/kernel/devices.te
 --- nsaserefpolicy/policy/modules/kernel/devices.te	2009-06-25 10:19:44.000000000 +0200
 +++ serefpolicy-3.6.12/policy/modules/kernel/devices.te	2009-06-25 10:21:01.000000000 +0200


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/F-11/selinux-policy.spec,v
retrieving revision 1.882
retrieving revision 1.883
diff -u -p -r1.882 -r1.883
--- selinux-policy.spec	29 Jun 2009 20:57:51 -0000	1.882
+++ selinux-policy.spec	3 Jul 2009 09:40:09 -0000	1.883
@@ -20,7 +20,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.6.12
-Release: 62%{?dist}
+Release: 63%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -475,6 +475,9 @@ exit 0
 %endif
 
 %changelog
+* Fri Jul 3 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-63
+- Allow ftpd to create shm
+
 * Mon Jun 29 2009 Miroslav Grepl <mgrepl at redhat.com> 3.6.12-62
 - Allow sshd to manage gitosis var/lib files