rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Require POLICYCOREUTILSVER 2.1.13-53

Browse Source
This commit is contained in:
Miroslav Grepl 2013-01-09 14:52:16 +01:00
parent 23a9442e40
commit 8f47af1bde
2 changed files with 32 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
policy-rawhide-contrib.patch
View File

@ -6796,9 +6796,18 @@ index e9fe2ca..4c2d076 100644
/usr/sbin/avahi-dnsconfd -- gen_context(system_u:object_r:avahi_exec_t,s0) /usr/sbin/avahi-dnsconfd -- gen_context(system_u:object_r:avahi_exec_t,s0)
/usr/sbin/avahi-autoipd -- gen_context(system_u:object_r:avahi_exec_t,s0) /usr/sbin/avahi-autoipd -- gen_context(system_u:object_r:avahi_exec_t,s0)
diff --git a/avahi.if b/avahi.if diff --git a/avahi.if b/avahi.if
index aebe7cb..3355ef9 100644 index aebe7cb..33fe57b 100644
--- a/avahi.if --- a/avahi.if
+++ b/avahi.if +++ b/avahi.if
@@ -97,7 +97,7 @@ interface(`avahi_dbus_chat',`
########################################
## <summary>
## Connect to avahi using a unix
-$$ stream socket.
+## stream socket.
## </summary>
## <param name="domain">
## <summary>
@@ -135,6 +135,29 @@ interface(`avahi_dontaudit_search_pid',` @@ -135,6 +135,29 @@ interface(`avahi_dontaudit_search_pid',`
######################################## ########################################
@ -14921,10 +14930,10 @@ index 6ce66e7..1d0337a 100644
optional_policy(` optional_policy(`
diff --git a/cups.fc b/cups.fc diff --git a/cups.fc b/cups.fc
index 949011e..63eb4c7 100644 index 949011e..f3c8888 100644
--- a/cups.fc --- a/cups.fc
+++ b/cups.fc +++ b/cups.fc
@@ -1,77 +1,86 @@ @@ -1,77 +1,85 @@
-/etc/alchemist/namespace/printconf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) -/etc/alchemist/namespace/printconf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
-/etc/cups(/.*)? gen_context(system_u:object_r:cupsd_etc_t,s0) -/etc/cups(/.*)? gen_context(system_u:object_r:cupsd_etc_t,s0)
@ -14965,7 +14974,6 @@ index 949011e..63eb4c7 100644
-/usr/bin/cups-config-daemon -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) -/usr/bin/cups-config-daemon -- gen_context(system_u:object_r:cupsd_config_exec_t,s0)
-/usr/bin/hpijs -- gen_context(system_u:object_r:hplip_exec_t,s0) -/usr/bin/hpijs -- gen_context(system_u:object_r:hplip_exec_t,s0)
+#/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0)
+/usr/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) +/usr/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0)
-/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0) -/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0)
@ -15048,8 +15056,8 @@ index 949011e..63eb4c7 100644
+/var/run/udev-configure-printer(/.*)? gen_context(system_u:object_r:cupsd_config_var_run_t,s0) +/var/run/udev-configure-printer(/.*)? gen_context(system_u:object_r:cupsd_config_var_run_t,s0)
+/var/turboprint(/.*)? gen_context(system_u:object_r:cupsd_var_run_t,s0) +/var/turboprint(/.*)? gen_context(system_u:object_r:cupsd_var_run_t,s0)
+ +
+#/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0) +/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0)
+/usr/local/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) +/usr/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
+/etc/opt/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) +/etc/opt/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
+/usr/Printer/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) +/usr/Printer/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
+ +
@ -32610,6 +32618,18 @@ index 5a414e0..4e159c2 100644
miscfiles_manage_man_cache(mandb_t) miscfiles_manage_man_cache(mandb_t)
optional_policy(` optional_policy(`
diff --git a/mcelog.if b/mcelog.if
index 9dbe694..f89651e 100644
--- a/mcelog.if
+++ b/mcelog.if
@@ -56,6 +56,6 @@ interface(`mcelog_admin',`
logging_search_logs($1)
admin_pattern($1, mcelog_log_t)
- files_search_pids($1
+ files_search_pids($1)
admin_pattern($1, mcelog_var_run_t)
')
diff --git a/mcelog.te b/mcelog.te diff --git a/mcelog.te b/mcelog.te
index 13ea191..799df10 100644 index 13ea191..799df10 100644
--- a/mcelog.te --- a/mcelog.te
@ -52980,7 +53000,7 @@ index efcb653..ff2c96a 100644
+/var/log/ppp-connect-errors.* -- gen_context(system_u:object_r:pppd_log_t,s0) +/var/log/ppp-connect-errors.* -- gen_context(system_u:object_r:pppd_log_t,s0)
+/var/log/ppp(/.*)? gen_context(system_u:object_r:pppd_log_t,s0) +/var/log/ppp(/.*)? gen_context(system_u:object_r:pppd_log_t,s0)
diff --git a/ppp.if b/ppp.if diff --git a/ppp.if b/ppp.if
index cd8b8b9..cb827c0 100644 index cd8b8b9..cde0d62 100644
--- a/ppp.if --- a/ppp.if
+++ b/ppp.if +++ b/ppp.if
@@ -1,110 +1,91 @@ @@ -1,110 +1,91 @@
@ -53242,14 +53262,7 @@ index cd8b8b9..cb827c0 100644
## </summary> ## </summary>
## </param> ## </param>
## <rolecap/> ## <rolecap/>
@@ -288,13 +266,13 @@ interface(`ppp_run',` @@ -294,7 +272,7 @@ interface(`ppp_run',`
attribute_role pppd_roles;
')
- ppp_domtrans($1)
+ ppp_domtrans($1
roleattribute $2 pppd_roles;
')
######################################## ########################################
## <summary> ## <summary>
@ -58311,7 +58324,7 @@ index 1bef513..af2850e 100644
allow qmail_tcp_env_t qmail_smtpd_exec_t:file read_file_perms; allow qmail_tcp_env_t qmail_smtpd_exec_t:file read_file_perms;
diff --git a/qpid.if b/qpid.if diff --git a/qpid.if b/qpid.if
index cd51b96..670cb1a 100644 index cd51b96..f7e9c70 100644
--- a/qpid.if --- a/qpid.if
+++ b/qpid.if +++ b/qpid.if
@@ -1,4 +1,4 @@ @@ -1,4 +1,4 @@
@ -58588,7 +58601,7 @@ index cd51b96..670cb1a 100644
- files_search_pids($1) - files_search_pids($1)
- admin_pattern($1, qpidd_var_run_t) - admin_pattern($1, qpidd_var_run_t)
+ files_search_var_lib($1( + files_search_var_lib($1)
+ admin_pattern($1, qpidd_var_lib_t) + admin_pattern($1, qpidd_var_lib_t)
+ +
+ files_search_pids($1) + files_search_pids($1)

4
selinux-policy.spec
View File

@ -13,8 +13,8 @@
%if %{?BUILD_MLS:0}%{!?BUILD_MLS:1} %if %{?BUILD_MLS:0}%{!?BUILD_MLS:1}
%define BUILD_MLS 1 %define BUILD_MLS 1
%endif %endif
%define POLICYVER 29 %define POLICYVER 28
%define POLICYCOREUTILSVER 2.1.13-34 %define POLICYCOREUTILSVER 2.1.13-53
%define CHECKPOLICYVER 2.1.11-3 %define CHECKPOLICYVER 2.1.11-3
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy