- Fix labeling on new pm*log

- Allow ssh to bind to all nodes
This commit is contained in:
Daniel J Walsh 2008-09-18 21:02:12 +00:00
parent 8ff0154e03
commit 11ef2470b7
4 changed files with 7 additions and 7 deletions

View File

@ -409,14 +409,14 @@ snmp = module
#
# Policy for rshd, rlogind, and telnetd.
#
remotelogin = base
remotelogin = module
# Layer: services
# Module: telnet
#
# Telnet daemon
#
telnet = base
telnet = module
# Layer: services
# Module: irqbalance

View File

@ -1040,7 +1040,7 @@ rdisc = module
#
# Policy for rshd, rlogind, and telnetd.
#
remotelogin = base
remotelogin = module
# Layer: services
# Module: ricci

View File

@ -23287,7 +23287,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
## <param name="domain">
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc.te serefpolicy-3.5.8/policy/modules/services/rpc.te
--- nsaserefpolicy/policy/modules/services/rpc.te 2008-08-14 13:08:27.000000000 -0400
+++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:45:56.000000000 -0400
+++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:55:00.000000000 -0400
@@ -23,7 +23,7 @@
gen_tunable(allow_nfsd_anon_write, false)
@ -23331,7 +23331,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
+userdom_dontaudit_search_users_home_dirs(gssd_t)
+sysadm_dontaudit_search_home_dirs(gssd_t)
+userdom_dontaudit_write_user_tmp_files(user, gssd_t)
+userdom_dontaudit_manage_user_tmp_files(user, gssd_t)
+
tunable_policy(`allow_gssd_read_tmp',`
userdom_list_unpriv_users_tmp(gssd_t)

View File

@ -17,7 +17,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.5.8
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@ -381,7 +381,7 @@ exit 0
%endif
%changelog
* Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-2
* Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-3
- Fix labeling on new pm*log
- Allow ssh to bind to all nodes