- Fix labeling on new pm*log

- Allow ssh to bind to all nodes
This commit is contained in:
Daniel J Walsh 2008-09-18 21:02:12 +00:00
parent 8ff0154e03
commit 11ef2470b7
4 changed files with 7 additions and 7 deletions

View File

@ -409,14 +409,14 @@ snmp = module
# #
# Policy for rshd, rlogind, and telnetd. # Policy for rshd, rlogind, and telnetd.
# #
remotelogin = base remotelogin = module
# Layer: services # Layer: services
# Module: telnet # Module: telnet
# #
# Telnet daemon # Telnet daemon
# #
telnet = base telnet = module
# Layer: services # Layer: services
# Module: irqbalance # Module: irqbalance

View File

@ -1040,7 +1040,7 @@ rdisc = module
# #
# Policy for rshd, rlogind, and telnetd. # Policy for rshd, rlogind, and telnetd.
# #
remotelogin = base remotelogin = module
# Layer: services # Layer: services
# Module: ricci # Module: ricci

View File

@ -23287,7 +23287,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
## <param name="domain"> ## <param name="domain">
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc.te serefpolicy-3.5.8/policy/modules/services/rpc.te diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc.te serefpolicy-3.5.8/policy/modules/services/rpc.te
--- nsaserefpolicy/policy/modules/services/rpc.te 2008-08-14 13:08:27.000000000 -0400 --- nsaserefpolicy/policy/modules/services/rpc.te 2008-08-14 13:08:27.000000000 -0400
+++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:45:56.000000000 -0400 +++ serefpolicy-3.5.8/policy/modules/services/rpc.te 2008-09-18 16:55:00.000000000 -0400
@@ -23,7 +23,7 @@ @@ -23,7 +23,7 @@
gen_tunable(allow_nfsd_anon_write, false) gen_tunable(allow_nfsd_anon_write, false)
@ -23331,7 +23331,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
+userdom_dontaudit_search_users_home_dirs(gssd_t) +userdom_dontaudit_search_users_home_dirs(gssd_t)
+sysadm_dontaudit_search_home_dirs(gssd_t) +sysadm_dontaudit_search_home_dirs(gssd_t)
+userdom_dontaudit_write_user_tmp_files(user, gssd_t) +userdom_dontaudit_manage_user_tmp_files(user, gssd_t)
+ +
tunable_policy(`allow_gssd_read_tmp',` tunable_policy(`allow_gssd_read_tmp',`
userdom_list_unpriv_users_tmp(gssd_t) userdom_list_unpriv_users_tmp(gssd_t)

View File

@ -17,7 +17,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.5.8 Version: 3.5.8
Release: 2%{?dist} Release: 3%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -381,7 +381,7 @@ exit 0
%endif %endif
%changelog %changelog
* Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-2 * Thu Sep 18 2008 Dan Walsh <dwalsh@redhat.com> 3.5.8-3
- Fix labeling on new pm*log - Fix labeling on new pm*log
- Allow ssh to bind to all nodes - Allow ssh to bind to all nodes