+- Add support for Clustered Samba commands

+- Allow ricci_modrpm_t to send log msgs
+- move permissive virt_qmf_t from virt.te to permissivedomains.te
+- Allow ssh_t to use kernel keyrings
+- Add policy for libvirt-qmf and more fixes for linux containers
+- Initial Polipo
+- Sanlock needs to run ranged in order to kill svirt processes
+- Allow smbcontrol to stream connect to ctdbd
This commit is contained in:
Miroslav 2011-09-29 16:25:09 +02:00
parent 4d24861bc2
commit 0247247d56
4 changed files with 1128 additions and 344 deletions

View File

@ -2115,3 +2115,11 @@ unlabelednet = module
# policy for namespace.init script # policy for namespace.init script
# #
namespace = module namespace = module
# Layer: services
# Module: polipo
#
# polipo
#
polipo = module

View File

@ -2472,3 +2472,12 @@ sblim = module
# cfengine # cfengine
# #
cfengine = module cfengine = module
# Layer: services
# Module: polipo
#
# polipo
#
polipo = module

File diff suppressed because it is too large Load Diff

View File

@ -17,15 +17,13 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.10.0 Version: 3.10.0
Release: 34.2%{?dist} Release: 34.3%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
patch: policy-F16.patch patch: policy-F16.patch
patch1: ephemeral.patch patch1: unconfined_permissive.patch
patch2: unconfined_permissive.patch patch2: passwd.patch
patch3: grub.patch
patch4: passwd.patch
Source1: modules-targeted.conf Source1: modules-targeted.conf
Source2: booleans-targeted.conf Source2: booleans-targeted.conf
Source3: Makefile.devel Source3: Makefile.devel
@ -241,8 +239,6 @@ Based off of reference policy: Checked out revision 2.20091117
%patch -p1 %patch -p1
%patch1 -p1 %patch1 -p1
%patch2 -p1 %patch2 -p1
%patch3 -p1
%patch4 -p1
%install %install
mkdir selinux_config mkdir selinux_config
@ -474,6 +470,16 @@ SELinux Reference policy mls base module.
%endif %endif
%changelog %changelog
* Thu Sep 29 2011 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3
- Add support for Clustered Samba commands
- Allow ricci_modrpm_t to send log msgs
- move permissive virt_qmf_t from virt.te to permissivedomains.te
- Allow ssh_t to use kernel keyrings
- Add policy for libvirt-qmf and more fixes for linux containers
- Initial Polipo
- Sanlock needs to run ranged in order to kill svirt processes
- Allow smbcontrol to stream connect to ctdbd
* Mon Sep 26 2011 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.2 * Mon Sep 26 2011 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.2
- Add label for /etc/passwd - Add label for /etc/passwd