- Change user and staff roles to work correctly with varied perms

modules-mls.conf

@@ -1059,3 +1059,31 @@ tzdata = base
 # Abstract Machine Test Utility (AMTU)
 # 
 amtu = module
+
+# Layer: users
+# Module: staff
+#
+# Fully Privledged user. with su/sudo/newrole
+# 
+staff = base
+
+# Layer: users
+# Module: user
+#
+# Fully Privledged user. without su/sudo/newrole
+# 
+user = base
+
+# Layer: users
+# Module: secadm
+#
+# Root role used to manage selinux 
+# 
+secadm = module
+
+# Layer: users
+# Module: auditadm
+#
+# Root role used to manage audit system
+# 
+auditadm = module

modules-targeted.conf

@@ -747,6 +747,12 @@ mount = base
 # 
 mozilla = module
 
+# Layer: apps
+# Module: nsplugin
+#
+# Policy for nspluginwrapper 
+# 
+nsplugin = module
 
 # Layer: apps
 # Module: mplayer
@@ -755,6 +761,13 @@ mozilla = module
 # 
 mplayer = module
 
+# Layer: apps
+# Module: gpg
+#
+# Policy for Mozilla and related web browsers
+# 
+gpg = module
+
 # Layer: admin
 # Module: mrtg
 #
@@ -1572,3 +1585,17 @@ bitlbee = module
 # 
 soundserver = module
 
+# Layer: users
+# Module: staff
+#
+# Minimally privs guest account on tty logins
+# 
+staff = base
+
+# Layer: users
+# Module: user
+#
+# Minimally privs guest account on tty logins
+# 
+user = base
+

selinux-policy.spec

@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.2.5
-Release: 7%{?dist}
+Release: 8%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -386,6 +386,9 @@ exit 0
 %endif
 
 %changelog
+* Wed Jan 2 2008 Dan Walsh <dwalsh@redhat.com> 3.2.5-8
+- Change user and staff roles to work correctly with varied perms
+
 * Mon Dec 31 2007 Dan Walsh <dwalsh@redhat.com> 3.2.5-7
 - Fix munin log,
 - Eliminate duplicate mozilla file context