From df624fe50013a32eb8f34fcb84d3239f055e3147 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Wed, 30 Nov 2005 20:07:41 +0000 Subject: [PATCH] *** empty log message *** --- policycoreutils-rhat.patch | 55 ++++++++++++++++++++------------------ 1 file changed, 29 insertions(+), 26 deletions(-) diff --git a/policycoreutils-rhat.patch b/policycoreutils-rhat.patch index 91effa9..5438642 100644 --- a/policycoreutils-rhat.patch +++ b/policycoreutils-rhat.patch @@ -1,6 +1,6 @@ -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow policycoreutils-1.27.30/audit2allow/audit2allow +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow policycoreutils-1.27.31/audit2allow/audit2allow --- nsapolicycoreutils/audit2allow/audit2allow 2005-11-29 13:43:42.000000000 -0500 -+++ policycoreutils-1.27.30/audit2allow/audit2allow 2005-11-30 13:40:16.000000000 -0500 ++++ policycoreutils-1.27.31/audit2allow/audit2allow 2005-11-30 14:51:35.000000000 -0500 @@ -25,8 +25,9 @@ # # @@ -338,8 +338,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow + out=seruleRecords(input, last_reload, verbose, te_ind) + if auditlogs: - input=open("/var/log/audit/audit.log", "r") +- input=open("/var/log/audit/audit.log", "r") - out.load(input) ++ input=os.popen("ausearch -m avc") + out.load(input) + if buildPP: @@ -361,9 +362,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow if rc[0]==0: print ("\n******************** IMPORTANT ***********************\n") print ("In order to load this newly created policy package into the kernel,\nyou are required to execute \n\nsemodule -i %s.pp\n\n" % module) -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow.1 policycoreutils-1.27.30/audit2allow/audit2allow.1 +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow.1 policycoreutils-1.27.31/audit2allow/audit2allow.1 --- nsapolicycoreutils/audit2allow/audit2allow.1 2005-11-29 13:43:42.000000000 -0500 -+++ policycoreutils-1.27.30/audit2allow/audit2allow.1 2005-11-30 13:45:15.000000000 -0500 ++++ policycoreutils-1.27.31/audit2allow/audit2allow.1 2005-11-30 14:53:31.000000000 -0500 @@ -33,37 +33,44 @@ .B "\-a" | "\-\-all" Read input from audit and message log, conflicts with -i @@ -374,8 +375,10 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow. .B "\-d" | "\-\-dmesg" Read input from output of .I /bin/dmesg. - Note that audit messages are not available via dmesg when - auditd is running; use -i /var/log/audit/audit.log instead. +-Note that audit messages are not available via dmesg when +-auditd is running; use -i /var/log/audit/audit.log instead. ++Note that all audit messages are not available via dmesg when ++auditd is running; use "ausearch -m avc | audit2allow" or "-a" instead. .TP -.B "\-v" | "\-\-verbose" -Turn on verbose output @@ -421,9 +424,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/audit2allow/audit2allow. .SH DESCRIPTION .PP This utility scans the logs for messages logged when the system denied -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/scripts/genhomedircon policycoreutils-1.27.30/scripts/genhomedircon +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/scripts/genhomedircon policycoreutils-1.27.31/scripts/genhomedircon --- nsapolicycoreutils/scripts/genhomedircon 2005-11-30 13:59:30.000000000 -0500 -+++ policycoreutils-1.27.30/scripts/genhomedircon 2005-11-30 10:35:24.000000000 -0500 ++++ policycoreutils-1.27.31/scripts/genhomedircon 2005-11-30 14:31:26.000000000 -0500 @@ -32,6 +32,8 @@ fd=open("/etc/shells", 'r') VALID_SHELLS=fd.read().split('\n') @@ -433,7 +436,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/scripts/genhomedircon po def getStartingUID(): starting_uid = sys.maxint -@@ -266,7 +271,7 @@ +@@ -266,7 +268,7 @@ homedir = u[5][:string.rfind(u[5], "/")] if not homedir in homedirs: if self.checkExists(homedir)==0: @@ -442,9 +445,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/scripts/genhomedircon po else: homedirs.append(homedir) -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/Makefile policycoreutils-1.27.30/semodule/Makefile +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/Makefile policycoreutils-1.27.31/semodule/Makefile --- nsapolicycoreutils/semodule/Makefile 2005-10-10 09:02:48.000000000 -0400 -+++ policycoreutils-1.27.30/semodule/Makefile 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule/Makefile 2005-11-30 14:31:26.000000000 -0500 @@ -17,6 +17,8 @@ install: all -mkdir -p $(SBINDIR) @@ -454,9 +457,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/Makefile policy relabel: -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/semodule.8 policycoreutils-1.27.30/semodule/semodule.8 +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/semodule.8 policycoreutils-1.27.31/semodule/semodule.8 --- nsapolicycoreutils/semodule/semodule.8 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-1.27.30/semodule/semodule.8 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule/semodule.8 2005-11-30 14:31:26.000000000 -0500 @@ -0,0 +1,53 @@ +.TH SEMODULE "8" "Nov 2005" "Security Enhanced Linux" NSA +.SH NAME @@ -511,9 +514,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule/semodule.8 poli +.nf +This manual page was written by Dan Walsh . +The program was written by Karl MacMillan , Joshua Brindle , Jason Tang -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/Makefile policycoreutils-1.27.30/semodule_expand/Makefile +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/Makefile policycoreutils-1.27.31/semodule_expand/Makefile --- nsapolicycoreutils/semodule_expand/Makefile 2005-10-12 15:25:33.000000000 -0400 -+++ policycoreutils-1.27.30/semodule_expand/Makefile 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_expand/Makefile 2005-11-30 14:31:26.000000000 -0500 @@ -3,6 +3,7 @@ INCLUDEDIR ?= $(PREFIX)/include BINDIR ?= $(PREFIX)/bin @@ -531,9 +534,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/Makefile relabel: -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/semodule_expand.8 policycoreutils-1.27.30/semodule_expand/semodule_expand.8 +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/semodule_expand.8 policycoreutils-1.27.31/semodule_expand/semodule_expand.8 --- nsapolicycoreutils/semodule_expand/semodule_expand.8 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-1.27.30/semodule_expand/semodule_expand.8 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_expand/semodule_expand.8 2005-11-30 14:31:26.000000000 -0500 @@ -0,0 +1,26 @@ +.TH SEMODULE_EXPAND "8" "Nov 2005" "Security Enhanced Linux" NSA +.SH NAME @@ -561,9 +564,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_expand/semodule +.nf +This manual page was written by Dan Walsh . +The program was written by Karl MacMillan , Joshua Brindle -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/Makefile policycoreutils-1.27.30/semodule_link/Makefile +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/Makefile policycoreutils-1.27.31/semodule_link/Makefile --- nsapolicycoreutils/semodule_link/Makefile 2005-10-12 15:25:33.000000000 -0400 -+++ policycoreutils-1.27.30/semodule_link/Makefile 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_link/Makefile 2005-11-30 14:31:26.000000000 -0500 @@ -2,6 +2,7 @@ PREFIX ?= ${DESTDIR}/usr INCLUDEDIR ?= $(PREFIX)/include @@ -581,9 +584,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/Makefile p relabel: -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/semodule_link.8 policycoreutils-1.27.30/semodule_link/semodule_link.8 +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/semodule_link.8 policycoreutils-1.27.31/semodule_link/semodule_link.8 --- nsapolicycoreutils/semodule_link/semodule_link.8 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-1.27.30/semodule_link/semodule_link.8 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_link/semodule_link.8 2005-11-30 14:31:26.000000000 -0500 @@ -0,0 +1,27 @@ +.TH SEMODULE_LINK "8" "Nov 2005" "Security Enhanced Linux" NSA +.SH NAME @@ -612,9 +615,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_link/semodule_l +.nf +This manual page was written by Dan Walsh . +The program was written by Karl MacMillan -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_package/Makefile policycoreutils-1.27.30/semodule_package/Makefile +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_package/Makefile policycoreutils-1.27.31/semodule_package/Makefile --- nsapolicycoreutils/semodule_package/Makefile 2005-10-12 15:25:33.000000000 -0400 -+++ policycoreutils-1.27.30/semodule_package/Makefile 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_package/Makefile 2005-11-30 14:31:26.000000000 -0500 @@ -3,6 +3,7 @@ INCLUDEDIR ?= $(PREFIX)/include BINDIR ?= $(PREFIX)/bin @@ -632,9 +635,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_package/Makefil relabel: -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_package/semodule_package.8 policycoreutils-1.27.30/semodule_package/semodule_package.8 +diff --exclude-from=exclude -N -u -r nsapolicycoreutils/semodule_package/semodule_package.8 policycoreutils-1.27.31/semodule_package/semodule_package.8 --- nsapolicycoreutils/semodule_package/semodule_package.8 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-1.27.30/semodule_package/semodule_package.8 2005-11-30 10:35:13.000000000 -0500 ++++ policycoreutils-1.27.31/semodule_package/semodule_package.8 2005-11-30 14:31:26.000000000 -0500 @@ -0,0 +1,29 @@ +.TH SEMODULE_PACKAGE "8" "Nov 2005" "Security Enhanced Linux" NSA +.SH NAME