rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Upgrade to upstream to grab postgressql changes

Browse Source
This commit is contained in:
Daniel J Walsh 2007-08-23 14:07:25 +00:00
parent e92bb82e8a
commit 95bbe5cff0
3 changed files with 27 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules-targeted.conf
View File

@ -117,6 +117,13 @@ avahi = base
#
bind = base
# Layer: services
# Module: dnsmasq
#
# A lightweight DHCP and caching DNS server.
#
dnsmasq = base
# Layer: services
# Module: bluetooth
#

24
policy-20070703.patch
View File

@ -2518,8 +2518,8 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/domain
+')
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/domain.te serefpolicy-3.0.6/policy/modules/kernel/domain.te
--- nsaserefpolicy/policy/modules/kernel/domain.te 2007-07-25 10:37:36.000000000 -0400
+++ serefpolicy-3.0.6/policy/modules/kernel/domain.te 2007-08-23 09:30:52.000000000 -0400
@@ -6,6 +6,15 @@
+++ serefpolicy-3.0.6/policy/modules/kernel/domain.te 2007-08-23 09:56:05.000000000 -0400
@@ -6,6 +6,22 @@
# Declarations
#
@ -2531,11 +2531,18 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/domain
+## </desc>
+gen_tunable(allow_netlabel,true)
+')
+
+## <desc>
+## <p>
+## Allow unlabeled packets to work on system
+## </p>
+## </desc>
+gen_tunable(allow_unlabeled_packets,true)
+
# Mark process types as domains
attribute domain;
@@ -134,3 +143,22 @@
@@ -134,3 +150,22 @@
# act on all domains keys
allow unconfined_domain_type domain:key *;
@ -7573,7 +7580,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/send
+
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/sendmail.te serefpolicy-3.0.6/policy/modules/services/sendmail.te
--- nsaserefpolicy/policy/modules/services/sendmail.te 2007-07-25 10:37:42.000000000 -0400
+++ serefpolicy-3.0.6/policy/modules/services/sendmail.te 2007-08-22 08:03:53.000000000 -0400
+++ serefpolicy-3.0.6/policy/modules/services/sendmail.te 2007-08-23 09:58:58.000000000 -0400
@@ -32,7 +32,6 @@
allow sendmail_t self:unix_dgram_socket create_socket_perms;
allow sendmail_t self:tcp_socket create_stream_socket_perms;
@ -7591,8 +7598,11 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/send
corenet_all_recvfrom_unlabeled(sendmail_t)
corenet_all_recvfrom_netlabel(sendmail_t)
corenet_tcp_sendrecv_all_if(sendmail_t)
@@ -93,9 +94,6 @@
@@ -91,11 +92,9 @@
logging_send_syslog_msg(sendmail_t)
+miscfiles_read_certs(sendmail_t)
miscfiles_read_localization(sendmail_t)
-sysnet_dns_name_resolve(sendmail_t)
@ -7601,7 +7611,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/send
userdom_dontaudit_use_unpriv_user_fds(sendmail_t)
userdom_dontaudit_search_sysadm_home_dirs(sendmail_t)
@@ -106,17 +104,14 @@
@@ -106,17 +105,14 @@
# Write to /var/spool/mail and /var/spool/mqueue.
mta_manage_queue(sendmail_t)
mta_manage_spool(sendmail_t)
@ -7622,7 +7632,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/send
')
optional_policy(`
@@ -130,6 +125,10 @@
@@ -130,6 +126,10 @@
')
optional_policy(`

3
selinux-policy.spec
View File

@ -360,6 +360,9 @@ exit 0
%endif
%changelog
* Wed Aug 22 2007 Dan Walsh <dwalsh@redhat.com> 3.0.6-1
- Upgrade to upstream to grab postgressql changes
* Tue Aug 21 2007 Dan Walsh <dwalsh@redhat.com> 3.0.5-11
- Add setransd for mls policy