diff --git a/policy/modules/services/distcc.te b/policy/modules/services/distcc.te index 504315c2..d7a01c69 100644 --- a/policy/modules/services/distcc.te +++ b/policy/modules/services/distcc.te @@ -1,5 +1,5 @@ -policy_module(distcc,1.3.0) +policy_module(distcc,1.3.1) ######################################## # @@ -28,6 +28,7 @@ allow distccd_t self:capability { setgid setuid }; dontaudit distccd_t self:capability sys_tty_config; allow distccd_t self:process { signal_perms setsched }; allow distccd_t self:fifo_file { read write getattr }; +allow distccd_t self:netlink_route_socket r_netlink_socket_perms; allow distccd_t self:tcp_socket create_stream_socket_perms; allow distccd_t self:udp_socket create_socket_perms; diff --git a/policy/modules/system/libraries.fc b/policy/modules/system/libraries.fc index db4b55cb..dba235d1 100644 --- a/policy/modules/system/libraries.fc +++ b/policy/modules/system/libraries.fc @@ -170,6 +170,10 @@ ifdef(`distro_gentoo',` /usr/lib(64)?/xorg/modules/drivers/nvidia_drv\.o -- gen_context(system_u:object_r:textrel_shlib_t,s0) /usr/lib(64)?/xorg/modules/extensions/nvidia(-[^/]*)?/libglx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) +ifdef(`distro_gentoo',` +/usr/lib -l gen_context(system_u:object_r:lib_t,s0) +') + ifdef(`distro_redhat',` /usr/share/rhn/rhn_applet/eggtrayiconmodule\.so -- gen_context(system_u:object_r:shlib_t,s0) diff --git a/policy/modules/system/libraries.te b/policy/modules/system/libraries.te index f849f0f5..3f0b3a21 100644 --- a/policy/modules/system/libraries.te +++ b/policy/modules/system/libraries.te @@ -1,5 +1,5 @@ -policy_module(libraries,1.6.1) +policy_module(libraries,1.6.2) ######################################## #