-##
-## Allow users to control network interfaces
-## (also needs USERCTL=true)
-##
-##
-gen_tunable(user_net_control,false)
-')
-
type usernetctl_t;
type usernetctl_exec_t;
application_domain(usernetctl_t,usernetctl_exec_t)
diff --git a/policy/modules/apps/vmware.fc b/policy/modules/apps/vmware.fc
index 8a9f1e3c..ea0b7ef2 100644
--- a/policy/modules/apps/vmware.fc
+++ b/policy/modules/apps/vmware.fc
@@ -25,6 +25,7 @@ HOME_DIR/\.vmware[^/]*/.*\.cfg -- gen_context(system_u:object_r:ROLE_vmware_conf
/usr/bin/vmware-smbd -- gen_context(system_u:object_r:vmware_host_exec_t,s0)
/usr/bin/vmware-smbpasswd -- gen_context(system_u:object_r:vmware_host_exec_t,s0)
/usr/bin/vmware-smbpasswd\.bin -- gen_context(system_u:object_r:vmware_host_exec_t,s0)
+/usr/bin/vmware-vmx -- gen_context(system_u:object_r:vmware_host_exec_t,s0)
/usr/bin/vmware-wizard -- gen_context(system_u:object_r:vmware_exec_t,s0)
/usr/bin/vmware -- gen_context(system_u:object_r:vmware_exec_t,s0)
diff --git a/policy/modules/apps/vmware.te b/policy/modules/apps/vmware.te
index 5d0b2ac9..458b7665 100644
--- a/policy/modules/apps/vmware.te
+++ b/policy/modules/apps/vmware.te
@@ -1,5 +1,5 @@
-policy_module(vmware,1.2.0)
+policy_module(vmware,1.2.1)
########################################
#
@@ -56,6 +56,8 @@ corenet_raw_sendrecv_all_nodes(vmware_host_t)
corenet_tcp_sendrecv_all_ports(vmware_host_t)
corenet_udp_sendrecv_all_ports(vmware_host_t)
corenet_raw_bind_all_nodes(vmware_host_t)
+corenet_tcp_bind_all_nodes(vmware_host_t)
+corenet_udp_bind_all_nodes(vmware_host_t)
corenet_tcp_connect_all_ports(vmware_host_t)
corenet_sendrecv_all_client_packets(vmware_host_t)
corenet_sendrecv_all_server_packets(vmware_host_t)
diff --git a/policy/modules/services/avahi.te b/policy/modules/services/avahi.te
index ef97cdce..d03f3ad8 100644
--- a/policy/modules/services/avahi.te
+++ b/policy/modules/services/avahi.te
@@ -1,5 +1,5 @@
-policy_module(avahi,1.6.0)
+policy_module(avahi,1.6.1)
########################################
#
@@ -57,6 +57,7 @@ dev_read_urand(avahi_t)
fs_getattr_all_fs(avahi_t)
fs_search_auto_mountpoints(avahi_t)
+fs_list_inotifyfs(avahi_t)
domain_use_interactive_fds(avahi_t)
diff --git a/policy/modules/system/fstools.if b/policy/modules/system/fstools.if
index 34d07e81..640ce612 100644
--- a/policy/modules/system/fstools.if
+++ b/policy/modules/system/fstools.if
@@ -69,6 +69,24 @@ interface(`fstools_exec',`
can_exec($1,fsadm_exec_t)
')
+########################################
+##