selinux-policy/thumb.patch

diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
index 1105ff5..620e17b 100644
--- a/policy/modules/roles/unconfineduser.te
+++ b/policy/modules/roles/unconfineduser.te
@@ -188,6 +188,11 @@ optional_policy(`
 		rtkit_scheduled(unconfined_usertype)
 	')
 
+	# Might remove later if this proves to be problematic, but would like to gather AVCs
+	optional_policy(`
+		thumb_role(unconfined_r, unconfined_usertype)
+	')
+
 	optional_policy(`
 		setroubleshoot_dbus_chat(unconfined_usertype)
 		setroubleshoot_dbus_chat_fixit(unconfined_t)
Fixes caused by the labeling of /etc/passwd Add thumb.patch to transition unconfined_t to thumb_t for Rawhide 2011-09-30 14:22:41 +00:00			`diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te`
			`index 1105ff5..620e17b 100644`
			`--- a/policy/modules/roles/unconfineduser.te`
			`+++ b/policy/modules/roles/unconfineduser.te`
			@@ -188,6 +188,11 @@ optional_policy(`
			`rtkit_scheduled(unconfined_usertype)`
			`')`

Allow logrotate setuid and setgid since logrotate is supposed to do it Fixes for thumb policy by grift Add new nfsd ports Added fix to allow confined apps to execmod on chrome Add labeling for additional vdsm directories Allow Exim and Dovecot SASL Add label for /var/run/nmbd Add fixes to make virsh and xen working together Colord executes ls /var/spool/cron is now labeled as user_cron_spool_t 2011-10-04 14:50:39 +00:00			`+ # Might remove later if this proves to be problematic, but would like to gather AVCs`
Fixes caused by the labeling of /etc/passwd Add thumb.patch to transition unconfined_t to thumb_t for Rawhide 2011-09-30 14:22:41 +00:00			+ optional_policy(`
			`+ thumb_role(unconfined_r, unconfined_usertype)`
			`+ ')`
			`+`
			optional_policy(`
			`setroubleshoot_dbus_chat(unconfined_usertype)`
			`setroubleshoot_dbus_chat_fixit(unconfined_t)`