- Allow transition from initrc_t to getty_t

policy-20071130.patch

@@ -26829,6 +26829,17 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/fstool
 +optional_policy(`
 +	unconfined_domain(fsadm_t)
  ')
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/getty.te serefpolicy-3.3.1/policy/modules/system/getty.te
+--- nsaserefpolicy/policy/modules/system/getty.te	2008-02-18 14:30:18.000000000 -0500
++++ serefpolicy-3.3.1/policy/modules/system/getty.te	2008-04-08 15:56:50.000000000 -0400
+@@ -9,6 +9,7 @@
+ type getty_t;
+ type getty_exec_t;
+ init_domain(getty_t,getty_exec_t)
++init_system_domain(getty_t,getty_exec_t)
+ domain_interactive_fd(getty_t)
+ 
+ type getty_etc_t;
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/hostname.te serefpolicy-3.3.1/policy/modules/system/hostname.te
 --- nsaserefpolicy/policy/modules/system/hostname.te	2008-02-18 14:30:18.000000000 -0500
 +++ serefpolicy-3.3.1/policy/modules/system/hostname.te	2008-04-04 12:06:56.000000000 -0400

selinux-policy.spec

@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.3.1
-Release: 30%{?dist}
+Release: 31%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -387,6 +387,9 @@ exit 0
 %endif
 
 %changelog
+* Tue Apr 8 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-31
+- Allow transition from initrc_t to getty_t
+
 * Tue Apr 8 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-30
 - Allow passwd to communicate with user sockets to change gnome-keyring