Require POLICYCOREUTILSVER 2.1.13-53

policy-rawhide-contrib.patch

@@ -6796,9 +6796,18 @@ index e9fe2ca..4c2d076 100644
  /usr/sbin/avahi-dnsconfd	--	gen_context(system_u:object_r:avahi_exec_t,s0)
  /usr/sbin/avahi-autoipd	--	gen_context(system_u:object_r:avahi_exec_t,s0)
 diff --git a/avahi.if b/avahi.if
-index aebe7cb..3355ef9 100644
+index aebe7cb..33fe57b 100644
 --- a/avahi.if
 +++ b/avahi.if
+@@ -97,7 +97,7 @@ interface(`avahi_dbus_chat',`
+ ########################################
+ ## <summary>
+ ##	Connect to avahi using a unix
+-$$	stream socket.
++##	stream socket.
+ ## </summary>
+ ## <param name="domain">
+ ##	<summary>
 @@ -135,6 +135,29 @@ interface(`avahi_dontaudit_search_pid',`
  
  ########################################
@@ -14921,10 +14930,10 @@ index 6ce66e7..1d0337a 100644
  
  optional_policy(`
 diff --git a/cups.fc b/cups.fc
-index 949011e..63eb4c7 100644
+index 949011e..f3c8888 100644
 --- a/cups.fc
 +++ b/cups.fc
-@@ -1,77 +1,86 @@
+@@ -1,77 +1,85 @@
 -/etc/alchemist/namespace/printconf(/.*)?	gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
  
 -/etc/cups(/.*)?	gen_context(system_u:object_r:cupsd_etc_t,s0)
@@ -14965,7 +14974,6 @@ index 949011e..63eb4c7 100644
  
 -/usr/bin/cups-config-daemon	--	gen_context(system_u:object_r:cupsd_config_exec_t,s0)
 -/usr/bin/hpijs	--	gen_context(system_u:object_r:hplip_exec_t,s0)
-+#/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0)
 +/usr/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0)
  
 -/usr/Brother/fax/.*\.log.*	gen_context(system_u:object_r:cupsd_log_t,s0)
@@ -15048,8 +15056,8 @@ index 949011e..63eb4c7 100644
 +/var/run/udev-configure-printer(/.*)? 	gen_context(system_u:object_r:cupsd_config_var_run_t,s0)
 +/var/turboprint(/.*)?		gen_context(system_u:object_r:cupsd_var_run_t,s0)
 +
-+#/usr/Brother/fax/.*\.log.*		gen_context(system_u:object_r:cupsd_log_t,s0)
-+/usr/local/Brother/(.*/)?inf(/.*)?      gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
++/usr/Brother/fax/.*\.log.*		gen_context(system_u:object_r:cupsd_log_t,s0)
++/usr/Brother/(.*/)?inf(/.*)?      gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
 +/etc/opt/Brother/(.*/)?inf(/.*)?      gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
 +/usr/Printer/(.*/)?inf(/.*)?      gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
 +
@@ -32610,6 +32618,18 @@ index 5a414e0..4e159c2 100644
  miscfiles_manage_man_cache(mandb_t)
  
  optional_policy(`
+diff --git a/mcelog.if b/mcelog.if
+index 9dbe694..f89651e 100644
+--- a/mcelog.if
++++ b/mcelog.if
+@@ -56,6 +56,6 @@ interface(`mcelog_admin',`
+ 	logging_search_logs($1)
+ 	admin_pattern($1, mcelog_log_t)
+ 
+-	files_search_pids($1
++	files_search_pids($1)
+ 	admin_pattern($1, mcelog_var_run_t)
+ ')
 diff --git a/mcelog.te b/mcelog.te
 index 13ea191..799df10 100644
 --- a/mcelog.te
@@ -52980,7 +53000,7 @@ index efcb653..ff2c96a 100644
 +/var/log/ppp-connect-errors.*	--	gen_context(system_u:object_r:pppd_log_t,s0)
 +/var/log/ppp(/.*)?	gen_context(system_u:object_r:pppd_log_t,s0)
 diff --git a/ppp.if b/ppp.if
-index cd8b8b9..cb827c0 100644
+index cd8b8b9..cde0d62 100644
 --- a/ppp.if
 +++ b/ppp.if
 @@ -1,110 +1,91 @@
@@ -53242,14 +53262,7 @@ index cd8b8b9..cb827c0 100644
  ##	</summary>
  ## </param>
  ## <rolecap/>
-@@ -288,13 +266,13 @@ interface(`ppp_run',`
- 		attribute_role pppd_roles;
- 	')
- 
--	ppp_domtrans($1)
-+	ppp_domtrans($1
- 	roleattribute $2 pppd_roles;
- ')
+@@ -294,7 +272,7 @@ interface(`ppp_run',`
  
  ########################################
  ## <summary>
@@ -58311,7 +58324,7 @@ index 1bef513..af2850e 100644
  
  allow qmail_tcp_env_t qmail_smtpd_exec_t:file read_file_perms;
 diff --git a/qpid.if b/qpid.if
-index cd51b96..670cb1a 100644
+index cd51b96..f7e9c70 100644
 --- a/qpid.if
 +++ b/qpid.if
 @@ -1,4 +1,4 @@
@@ -58588,7 +58601,7 @@ index cd51b96..670cb1a 100644
  
 -	files_search_pids($1)
 -	admin_pattern($1, qpidd_var_run_t)
-+    files_search_var_lib($1(
++    files_search_var_lib($1)
 +    admin_pattern($1, qpidd_var_lib_t)
 +
 +    files_search_pids($1)

selinux-policy.spec

@@ -13,8 +13,8 @@
 %if %{?BUILD_MLS:0}%{!?BUILD_MLS:1}
 %define BUILD_MLS 1
 %endif
-%define POLICYVER 29
-%define POLICYCOREUTILSVER 2.1.13-34
+%define POLICYVER 28
+%define POLICYCOREUTILSVER 2.1.13-53
 %define CHECKPOLICYVER 2.1.11-3
 Summary: SELinux policy configuration
 Name: selinux-policy