- Fix labeling on new pm*log
- Allow ssh to bind to all nodes
This commit is contained in:
parent
8ff0154e03
commit
11ef2470b7
@ -409,14 +409,14 @@ snmp = module
|
||||
#
|
||||
# Policy for rshd, rlogind, and telnetd.
|
||||
#
|
||||
remotelogin = base
|
||||
remotelogin = module
|
||||
|
||||
# Layer: services
|
||||
# Module: telnet
|
||||
#
|
||||
# Telnet daemon
|
||||
#
|
||||
telnet = base
|
||||
telnet = module
|
||||
|
||||
# Layer: services
|
||||
# Module: irqbalance
|
||||
|
@ -1040,7 +1040,7 @@ rdisc = module
|
||||
#
|
||||
# Policy for rshd, rlogind, and telnetd.
|
||||
#
|
||||
remotelogin = base
|
||||
remotelogin = module
|
||||
|
||||
# Layer: services
|
||||
# Module: ricci
|
||||
|
@ -23287,7 +23287,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
|
||||
## <param name="domain">
|
||||
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc.te serefpolicy-3.5.8/policy/modules/services/rpc.te
|
||||
--- nsaserefpolicy/policy/modules/services/rpc.te 2008-08-14 13:08:27.000000000 -0400
|
||||
+++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:45:56.000000000 -0400
|
||||
+++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:55:00.000000000 -0400
|
||||
@@ -23,7 +23,7 @@
|
||||
gen_tunable(allow_nfsd_anon_write, false)
|
||||
|
||||
@ -23331,7 +23331,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
|
||||
|
||||
+userdom_dontaudit_search_users_home_dirs(gssd_t)
|
||||
+sysadm_dontaudit_search_home_dirs(gssd_t)
|
||||
+userdom_dontaudit_write_user_tmp_files(user, gssd_t)
|
||||
+userdom_dontaudit_manage_user_tmp_files(user, gssd_t)
|
||||
+
|
||||
tunable_policy(`allow_gssd_read_tmp',`
|
||||
userdom_list_unpriv_users_tmp(gssd_t)
|
||||
|
@ -17,7 +17,7 @@
|
||||
Summary: SELinux policy configuration
|
||||
Name: selinux-policy
|
||||
Version: 3.5.8
|
||||
Release: 2%{?dist}
|
||||
Release: 3%{?dist}
|
||||
License: GPLv2+
|
||||
Group: System Environment/Base
|
||||
Source: serefpolicy-%{version}.tgz
|
||||
@ -381,7 +381,7 @@ exit 0
|
||||
%endif
|
||||
|
||||
%changelog
|
||||
* Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-2
|
||||
* Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-3
|
||||
- Fix labeling on new pm*log
|
||||
- Allow ssh to bind to all nodes
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user