- Update to upstream

- Turn off boolean allow_execstack

.cvsignore

@@ -15,3 +15,4 @@ noarch
 nsadiff
 nsaserefpolicy
 serefpolicy-2.1.0.tgz
+serefpolicy-2.1.1.tgz

booleans-targeted.conf

@@ -8,7 +8,7 @@ allow_execmod = true
 
 # Allow making the stack executable via mprotect.Also requires allow_execmem.
 # 
-allow_execstack = true
+allow_execstack = false
 
 # Allow ftp servers to modify public filesused for public file transfer services.
 # 

selinux-policy.spec

@@ -8,12 +8,12 @@
 %define CHECKPOLICYVER 1.27.17-7
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 2.1.0
-Release: 3
+Version: 2.1.1
+Release: 1
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
-patch: policy-20051114.patch
+patch: policy-20051208.patch
 Source1: modules-%{polname1}.conf
 Source2: booleans-%{polname1}.conf
 Source3: seusers-%{polname1}
@@ -236,6 +236,10 @@ SELinux Reference policy %{polname3} base module.
 
 
 %changelog
+* Thu Dec  8 2005 Dan Walsh <dwalsh@redhat.com> 2.1.1-1
+- Update to upstream
+- Turn off boolean allow_execstack
+
 * Thu Dec  8 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-3
 - Change setrans-mls to use new libsetrans
 - Add default_context rule for xdm

sources

@@ -1 +1 @@
-430d1255d08765f88cc356089311a390  serefpolicy-2.1.0.tgz
+616555f125d058a5b53683a8a5059247  serefpolicy-2.1.1.tgz