rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

- Allow init to transition to initrc_t on shell exec.

Browse Source 
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes
This commit is contained in:
Daniel J Walsh 2008-03-12 01:10:44 +00:00
parent 59c6413a37
commit 0879f489ab
3 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
booleans-mls.conf
View File

@ -223,3 +223,7 @@ allow_unlabeled_packets = true
# Allow samba to act as the domain controller # Allow samba to act as the domain controller
# #
samba_domain_controller = false samba_domain_controller = false
# Run the xserver as an object manager
#
xserver_object_manager = true

4
policy-20071130.patch
View File

@ -27726,7 +27726,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.f
+/usr/bin/qemu-kvm -- gen_context(system_u:object_r:qemu_exec_t,s0) +/usr/bin/qemu-kvm -- gen_context(system_u:object_r:qemu_exec_t,s0)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.if serefpolicy-3.3.1/policy/modules/system/qemu.if diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.if serefpolicy-3.3.1/policy/modules/system/qemu.if
--- nsaserefpolicy/policy/modules/system/qemu.if 1969-12-31 19:00:00.000000000 -0500 --- nsaserefpolicy/policy/modules/system/qemu.if 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-3.3.1/policy/modules/system/qemu.if 2008-03-11 17:53:51.000000000 -0400 +++ serefpolicy-3.3.1/policy/modules/system/qemu.if 2008-03-11 21:09:37.000000000 -0400
@@ -0,0 +1,303 @@ @@ -0,0 +1,303 @@
+ +
+## <summary>policy for qemu</summary> +## <summary>policy for qemu</summary>
@ -27999,7 +27999,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.i
+ files_read_var_files($1_t) + files_read_var_files($1_t)
+ files_search_all($1_t) + files_search_all($1_t)
+ +
+ fs_list_inotify($1_t) + fs_list_inotifyfs($1_t)
+ fs_rw_anon_inodefs_files($1_t) + fs_rw_anon_inodefs_files($1_t)
+ fs_rw_tmpfs_files($1_t) + fs_rw_tmpfs_files($1_t)
+ +

12
selinux-policy.spec
View File

@ -17,12 +17,11 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.3.1 Version: 3.3.1
Release: 14%{?dist} Release: 15%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
patch: policy-20071130.patch patch: policy-20071130.patch
Patch2: policy-init.patch
Source1: modules-targeted.conf Source1: modules-targeted.conf
Source2: booleans-targeted.conf Source2: booleans-targeted.conf
Source3: Makefile.devel Source3: Makefile.devel
@ -180,7 +179,6 @@ Based off of reference policy: Checked out revision 2624.
%prep %prep
%setup -n serefpolicy-%{version} -q %setup -n serefpolicy-%{version} -q
%patch -p1 %patch -p1
%patch2 -p1
%install %install
# Build targeted policy # Build targeted policy
@ -390,6 +388,14 @@ exit 0
%endif %endif
%changelog %changelog
* Tue Mar 11 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-15
- Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes
* Tue Mar 11 2008 Bill Nottingham <notting@redhat.com> 3.3.1-14 * Tue Mar 11 2008 Bill Nottingham <notting@redhat.com> 3.3.1-14
- fixes for init policy (#436988) - fixes for init policy (#436988)
- fix build - fix build