- Allow transition from initrc_t to getty_t

This commit is contained in:
Daniel J Walsh 2008-04-08 20:14:36 +00:00
parent 5a576e06f0
commit 254e3c7af3
2 changed files with 15 additions and 1 deletions

View File

@ -26829,6 +26829,17 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/fstool
+optional_policy(` +optional_policy(`
+ unconfined_domain(fsadm_t) + unconfined_domain(fsadm_t)
') ')
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/getty.te serefpolicy-3.3.1/policy/modules/system/getty.te
--- nsaserefpolicy/policy/modules/system/getty.te 2008-02-18 14:30:18.000000000 -0500
+++ serefpolicy-3.3.1/policy/modules/system/getty.te 2008-04-08 15:56:50.000000000 -0400
@@ -9,6 +9,7 @@
type getty_t;
type getty_exec_t;
init_domain(getty_t,getty_exec_t)
+init_system_domain(getty_t,getty_exec_t)
domain_interactive_fd(getty_t)
type getty_etc_t;
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/hostname.te serefpolicy-3.3.1/policy/modules/system/hostname.te diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/hostname.te serefpolicy-3.3.1/policy/modules/system/hostname.te
--- nsaserefpolicy/policy/modules/system/hostname.te 2008-02-18 14:30:18.000000000 -0500 --- nsaserefpolicy/policy/modules/system/hostname.te 2008-02-18 14:30:18.000000000 -0500
+++ serefpolicy-3.3.1/policy/modules/system/hostname.te 2008-04-04 12:06:56.000000000 -0400 +++ serefpolicy-3.3.1/policy/modules/system/hostname.te 2008-04-04 12:06:56.000000000 -0400

View File

@ -17,7 +17,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.3.1 Version: 3.3.1
Release: 30%{?dist} Release: 31%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -387,6 +387,9 @@ exit 0
%endif %endif
%changelog %changelog
* Tue Apr 8 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-31
- Allow transition from initrc_t to getty_t
* Tue Apr 8 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-30 * Tue Apr 8 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-30
- Allow passwd to communicate with user sockets to change gnome-keyring - Allow passwd to communicate with user sockets to change gnome-keyring