From 2a650ea1aab3b759ccf4fc590d39f706e128105e Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Wed, 5 Nov 2008 22:21:30 +0000 Subject: [PATCH] - Allow lvm to dbus chat with hal - Allow rlogind to read nfs_t --- policy-20080710.patch | 6 +++--- selinux-policy.spec | 6 +++++- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/policy-20080710.patch b/policy-20080710.patch index 2a865cc8..3e63efc2 100644 --- a/policy-20080710.patch +++ b/policy-20080710.patch @@ -21322,7 +21322,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol files_manage_etc_files(ricci_modstorage_t) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rlogin.te serefpolicy-3.5.13/policy/modules/services/rlogin.te --- nsaserefpolicy/policy/modules/services/rlogin.te 2008-08-07 11:15:11.000000000 -0400 -+++ serefpolicy-3.5.13/policy/modules/services/rlogin.te 2008-11-05 16:47:28.000000000 -0500 ++++ serefpolicy-3.5.13/policy/modules/services/rlogin.te 2008-11-05 17:20:28.000000000 -0500 @@ -94,10 +94,22 @@ remotelogin_signal(rlogind_t) @@ -21338,13 +21338,13 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol ') + +tunable_policy(`use_nfs_home_dirs',` -+ fs_list_nfs_dirs(rlogind_t) ++ fs_list_nfs(rlogind_t) + fs_read_nfs_files(rlogind_t) + fs_read_nfs_symlinks(rlogind_t) +') + +tunable_policy(`use_samba_home_dirs',` -+ fs_list_cifs_dirs(rlogind_t) ++ fs_list_cifs(rlogind_t) + fs_read_cifs_files(rlogind_t) + fs_read_cifs_symlinks(rlogind_t) +') diff --git a/selinux-policy.spec b/selinux-policy.spec index 199349cb..fa6f8bb6 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.5.13 -Release: 16%{?dist} +Release: 17%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -457,6 +457,10 @@ exit 0 %endif %changelog +* Wed Nov 5 2008 Dan Walsh 3.5.13-17 +- Allow lvm to dbus chat with hal +- Allow rlogind to read nfs_t + * Wed Nov 5 2008 Dan Walsh 3.5.13-16 - Fix cyphesis file context