rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Fix mcs rules to include chr_file and blk_file

Browse Source
This commit is contained in:
Daniel J Walsh 2009-06-18 20:01:47 +00:00
parent e3bf6793cb
commit 9386d6f55f
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy-F12.patch
View File

@ -300,12 +300,14 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
+ +
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/mcs serefpolicy-3.6.16/policy/mcs diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/mcs serefpolicy-3.6.16/policy/mcs
--- nsaserefpolicy/policy/mcs 2009-05-21 08:43:08.000000000 -0400 --- nsaserefpolicy/policy/mcs 2009-05-21 08:43:08.000000000 -0400
+++ serefpolicy-3.6.16/policy/mcs 2009-06-12 15:59:08.000000000 -0400 +++ serefpolicy-3.6.16/policy/mcs 2009-06-18 12:58:31.000000000 -0400
@@ -67,7 +67,7 @@ @@ -66,8 +66,8 @@
#
# Note that getattr on files is always permitted. # Note that getattr on files is always permitted.
# #
mlsconstrain file { write setattr append unlink link rename ioctl lock execute relabelfrom } -mlsconstrain file { write setattr append unlink link rename ioctl lock execute relabelfrom }
- ( h1 dom h2 ); - ( h1 dom h2 );
+mlsconstrain { file chr_file blk_file sock_file lnk_file fifo_file } { write setattr append unlink link rename ioctl lock execute relabelfrom }
+ (( h1 dom h2 ) or ( t1 == mlsfilewrite )); + (( h1 dom h2 ) or ( t1 == mlsfilewrite ));
mlsconstrain dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl } mlsconstrain dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl }

5
selinux-policy.spec
View File

@ -20,7 +20,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.6.16 Version: 3.6.16
Release: 3%{?dist} Release: 4%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -473,6 +473,9 @@ exit 0
%endif %endif
%changelog %changelog
* Thu Jun 18 2009 Dan Walsh <dwalsh@redhat.com> 3.6.16-4
- Fix mcs rules to include chr_file and blk_file
* Tue Jun 16 2009 Dan Walsh <dwalsh@redhat.com> 3.6.16-3 * Tue Jun 16 2009 Dan Walsh <dwalsh@redhat.com> 3.6.16-3
- Add label for udev-acl - Add label for udev-acl