trunk: 2 patches from dan.

policy/modules/kernel/filesystem.if

@@ -1285,6 +1285,24 @@ interface(`fs_unmount_fusefs',`
         allow $1 fusefs_t:filesystem unmount;
 ')
 
+########################################
+## <summary>
+##	Read and write hugetlbfs files.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`fs_rw_hugetlbfs_files',`
+	gen_require(`
+		type hugetlbfs_t;
+	')
+
+	rw_files_pattern($1, hugetlbfs_t, hugetlbfs_t)
+')
+
 ########################################
 ## <summary>
 ##	Search inotifyfs filesystem. 

policy/modules/kernel/filesystem.te

@@ -1,5 +1,5 @@
 
-policy_module(filesystem, 1.10.0)
+policy_module(filesystem, 1.10.1)
 
 ########################################
 #

policy/modules/services/postgresql.fc

@@ -28,6 +28,7 @@ ifdef(`distro_redhat', `
 /var/lib/postgres(ql)?(/.*)? 		gen_context(system_u:object_r:postgresql_db_t,s0)
 
 /var/lib/pgsql/data(/.*)?		gen_context(system_u:object_r:postgresql_db_t,s0)
+/var/lib/pgsql/logfile(/.*)?		gen_context(system_u:object_r:postgresql_log_t,s0)
 /var/lib/pgsql/pgstartup\.log		gen_context(system_u:object_r:postgresql_log_t,s0)
 
 /var/lib/sepgsql(/.*)?			gen_context(system_u:object_r:postgresql_db_t,s0)

policy/modules/services/postgresql.te

@@ -1,5 +1,5 @@
 
-policy_module(postgresql, 1.6.0)
+policy_module(postgresql, 1.6.1)
 
 gen_require(`
 	class db_database all_db_database_perms;
@@ -186,6 +186,7 @@ dev_read_urand(postgresql_t)
 
 fs_getattr_all_fs(postgresql_t)
 fs_search_auto_mountpoints(postgresql_t)
+fs_rw_hugetlbfs_files(postgresql_t)
 
 selinux_get_enforce_mode(postgresql_t)
 selinux_validate_context(postgresql_t)

policy/modules/system/iptables.if

@@ -49,6 +49,12 @@ interface(`iptables_run',`
 	iptables_domtrans($1)
 	role $2 types iptables_t;
 	allow iptables_t $3:chr_file rw_term_perms;
+
+	sysnet_run_ifconfig(iptables_t, $2, $3)
+
+	optional_policy(`
+		modutils_run_insmod(iptables_t, $2, $3)
+	')
 ')
 
 ########################################

policy/modules/system/iptables.te

@@ -1,5 +1,5 @@
 
-policy_module(iptables, 1.6.1)
+policy_module(iptables, 1.6.2)
 
 ########################################
 #