From ab9bb05673924a2331ea9605216047a970fd8dde Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Tue, 11 Jul 2017 18:01:45 +0200 Subject: [PATCH] * Tue Jul 11 2017 Lukas Vrabec - 3.13.1-263 - Add new boolean gluster_use_execmem --- container-selinux.tgz | Bin 6890 -> 6887 bytes policy-rawhide-contrib.patch | 15 +++++++++++++-- selinux-policy.spec | 5 ++++- 3 files changed, 17 insertions(+), 3 deletions(-) diff --git a/container-selinux.tgz b/container-selinux.tgz index 400e55dad28d65baf73e3a5ff315779d95b4981c..da42431575cfcf74dd7e02d19401c0ce622a6b32 100644 GIT binary patch literal 6887 zcmV>d`$0(Tz{2zD2^ z50|@+T2gl_qgN#LJkId`?N?QNh@wb}Qmbt*;0~ObX;uA57Rh3awQ`Z+Xh zSO>vZ*+U&}lE_Lo_WWP;vwHb5_^~Fb|3_ zPyY0RQN8%{poE|4K@etH`Iy8(TLx_%7EOwcGJ#$bD*V1mi#DmZVU(QzCTp{<4@H~i z$r{QdoL8@ZTb=EaVqGVH9MT$SS7&GKbEULE^0coFUnU@db$jRF%ByWd6t6B;tFx%A zlPHhZO%m48e!WSH^RI6%R%fC@>nd!a-uSJ(IMb8%Vub}P*p(bv>C&C{g!P(#*Pc!4 z+A~|%Y6a9~mKfmw2473?Fp83<8AC;+D6FnWhY$RmG;+G$7mq}Lv);#oq2KFtgI)0T ztr-I$PBB+ONT2OQ#Q{G>)N(#LXIm5&MCqJmM^31}C1FhRt?Cj7UjQo=h`-zpr`SR> z$YYROgbh_)Q}t$z>I$?LYvYLaI##5Ar*2f_m!+E^hH6G_S*J-eVepThyn}WI93OsNS4o{Wz_?Abq!9&kY8vDVuLhr+sA-OVOhH?8hU8m9 zUG&9GUHi!eP09gVNY$AoZtEC5BXIWEtU4stN052559{P}k~&q$U+#?DL+V-Dv^chH zLgzq+uY9^}oI5M-XCwG`_@KN0LbD#1D!NQ;K4|>nIDG#!?hL8vJg0e#ShuNQA zwDrN(L?qRU-6UzT^D5RnMZ|jU?cg;|5SKSrnFL?o!oRoh@7rbfBES5{&!5RUOBQ>T z#?x%1`cPOD4nQ>%Hh%Z{YA9g4Ii@pm1? zuw%Zd5CyT`N|C%yvJy9@AgL6_6Fmv|M=$zeV@(*2!S|xn{LWcT7j6cqk6 z$X5`)i}uXWMHxdamJu?3m}{hShOpIF5jOso6zvpI<7ZfsL*&FTN$lN1jpfH{UQ6r+ z|87v0e+z~5m*6vff@I~+!K$o<7K(kDC;AxRiy~ii#X+HEX+)CO!3+893iw`J%*Kh! z=zcy(1KjIDjquw!XkhBAIG0hDLif%`Vr^TXCbMM2Fv@72WVISJ90P{m4(w$bhBg!$ zq5>g%ih9M1;qR&fH+C&mn29qG#AF0Rch1DP%s|~W>d5l6{|!#-ZuD={-BnUNEQz`= zo3>dRkoIc}V%AAhW)D{=fkj|hPc>i&Y|5u(ndUQ0G-?-wD`EeTh0n_)-Yy6kwq>3Q z9RP+)4XgG#jPtZ$YY`rL+NKX%tOU}Pd;n-ix_-){5dIBmbYSCyFaSgUDQH?SNpf0W zlJ=9^RZ(yxwN0AvfxR%H<%O<*ClUW;S%Ra~tTC45UN9GNo#`#Wo*@NEk;SB57 zIq?4e%THY$n$LOkRgw1yL|U}V;D@hYhJ8(2t~Jz^3>4P#M%%&@_&b!4s1KtHc(vN{ z$lif{iSQ2A2dGuR+edB`(pf1K3~M*}c>7_l4{2Q%`J_$DX}XK*d91g_>UbAD>UQr8 zcP(J2n;-0q-!pT@(+wa(-rmC|y#{FnO}Z<>j7`|!!`(E83=~GIlbKLd%zd)qLQsw` ztaDUceA$Kr4a`E|ljZPQzDAJA2pRq22R9&wN2{F9SBSKBf|Q-D$Y8CP+K^pg5~RYvlCXq zuy{7W^EHFX0!&U=(CX)^gyu3!HEou?7qjrym9DyTuT{8AKSsw6@w$>&Zz$DbPPcvx zcLyfEmSOBePGfkiQXTEF1IZXasnx{~$rw)9A?c4Lk{e1!`52M#siR86Pzc3p9C%6f zSO$yO`>_C;(B(r%t@VMIX?9r<> zIaL|%`~Tm6_rrJJ4(|Vdd-LV~|Ht?+Ps=(lV^D18ax}aSZm(|NT)nwiY5IbNc{1-x zP?u#}-cL1^S1*H~6Tqn{u>h<&D^g`~(nLJOrsBah35KXZb%Muz0(!7k!%0FikAnu)(p(`*TFW-n&d*O60Z@n>iIFE>gk8l za~}A;tII1L*2u+sQz4(-0RLvMN9aIt}kWwJ^phA}K`$On7BbDe*PD_r+|>2n&L+r6Sk@3KEfXxn)B|7|R$KN)#QAGo8II7H} z)OIo?5n%`~Vl?~MU5Fm{!rvs>_FWWK;U>+}_BnVTMEmlw2<}rbfVS`(-mq+vHjRV)z9{1WyM_+% z=(kN;$oPBuq7K2PN!l$y;)1uv;44c1^xFLrsJAhOC5@AzlaXdYi3Y(aH9uR#*lFdUksV%oGb`6dJ$dtHN5`e`(~|>( z=ve@^8c09JwC|YqzD!W3KLi*4?#X5f_~1pWUwWdoQMCZdAs(PiVecm7ZLlF*pgA;E zQp7G!U0142K^GBCRNIiyvK~9#vRe(BUnM@q)YS}sIM$7?$`JHg5n{0 z!0>=0Y9`@Kg+?X} z=Q@cVSWp*kv&U;Thli@>NiPL9fnIL--7G6@i=}zx%{*McZ!-N_|A=M5%);R}7XndU zj938DMpFw1fP z>sAYxX2th`ZK3-CZX?w+hTrnK>(|{be{ag-3Ld_2HQ>F`WjFKzd>BSkybS&l$1J8W z5ATy+z|TI3?t{m&zP|#pe=n*_ zxc-Y1AWvM<5$3kUc0lL8W)UurFu-Oqarf<((XMHelI#0x&JiUGK`@TxA$*w_LCjF5D zAGwBdw9tL=j}g3o8@OZQl!b^}=cg=VvcWy244+j*VNH_( zQ_YHb&5@Y{I)~YeS>{U2ICrpkU``$!9+*qxO`h#8OrIX+#1jo4-%%{9vW%rbH2sb}~_S{UCLBc*@+fkzwgql$jefw3)JBmyyFG(B#O zTa2hT>*sqAdXn*IZx&`nLEmO_mAXh;bWiw_(@oRoCTcTFRRr-PB72d7*qUgc#D0b2 zdACIfU8MAy;^D)nO&?%B#g_6peT>fzF{RVvg|H`$ODG~%FWp7^tjFb~pIW&YRod}k zI9eq=8np}X6JdR?oO6Xy%|6N(>^!`na|oe>X=9Eax#&|h`y|Ue==>Z@N1Ph=&hrFY zx}Cu^vn(xGXyK#1ecM)^MF^It%=0Qsp4K!b$9a3Fo4yh>GWnhH&OS+rj#cFBVimJz3Nhh;Do1E=grPS-6IAY2~Vzo+P3*ln@E`k6xx{n zUuX~T?-;r+V7Ca@bRe~k5?lLCtirC{!Z&~r0)|6%XtgCKFUtL69JZlj9+B-WCY`+k zFM}bqqvsrZ0mdtnAS>SI71I~;wSkt&l^oiX+pcl44G&q%{47s4k*FMO_}QSJ8(d;y z?!Q^H9DkNc!->fhO1Dm2L(-V0*>@Luja;wHjCGY;otqczF%!+kL1725l)8nFWioEk(T zMcqi}Sp1CLLE1Fd;X$15k&Jpli(BozC3D=Tv11OBhqMBl|hY7&C4cj39P9SPaBI{vCR~ofq<{JWN2!hNB0q+J|I}3ojM%db0M6tnFDH^dlxG%OZXlTC(;Bn2y=T0qNuRI&0c@G`Ix5^8kbTsMF^(oqrMbXZ-ZF(UUtW%gR zVQ0cUQpY70W422(b6I?_VMXT?Bw^<%s-P4xGwy}VQrfQSY!Ud~>LIYO(>l%Lb!f?^ z7iwAR%kmhBmEA?eOor~<3QY~my5!6f?`KAs=yMQlTG;$wEEA%sXSweWa-(iLk+3lq5uT|Ocyww_d~&gRsSegD z!A-oGLaiy)wha|x0KF38SrVtm1TiUPd9`RXyG!0sVMD$dcDQ-gBku0!xkt!hvj+K| zJF9`DF_M{IQ}do)Ryuk(V6tqw(xNW^ps;IZWGhhF`k_Lh!<5qt^9?eZoahJ>4I5J& zQBu8QF0;Ba^$lJ_VVo_4Vr2Ho3xq7h|eiylSgc-Zs4^>ZvP9N8tIaeAsG+GWLRxku+sI7v_wNSt{qm z{7}*ix4)GhtjD_Hxw<#7X!*#LZ*dp9_EPT+% z?^#&h)-s~@k9~a$`P-*l_L(L)zfgWT*0swP2G5lwbp=;SA|+x@ZZAHr7kOPZ0nA50?ukcNRfx&i_S@^s9UGT&eET^VgEc=En z4rqIlb#|xUe$X;>vOM?%XvllqyC}pjOL$!>nsa5swZB*lXf(;=uo2?ohH1gzMd=F$ z%cN;uW6UhKK|cXtaMzzwY5j*`N(m=X&t*@JdhP5<5{}p!z3*tE=o|f34+1vE_42dd zqGTtVTGD6cwc{bIGW#GuTDBr)piMjv1I?oYk^p>ZSW?_AU(no*%P-I_9mEpii^a_=;-(Z6Ro z;F8=FUNZY19SrJ&RTj_~9D0%6M_3iS3(l zyW7R%_{Va-+!6G`!t~R2V_2DX5^h!UCpg#kJ5uGRX-fOK3@`?+OdUrqJf607;vn!qygdT4 z!|dd^%rI5@C2Y$)ojQ|@4Oc*U7M~@>YDYgt#1bA?rDbG`NY{J^nN003bN3&mgq@m- zW1c`^31qY0I$CX+;TP3j_9B*1Vgi3*T_#``S7{pX@tO@xqnUO}7a1e#iC~go&Qvzw zvC92=Ri*JHlWYVIJ%xbREQ5E+FKH|zLcV%2JGYq%ItW}+^cVmuHroUZK(9_xfp+t7 hgeLjaPMI&CFP|@;FP|@;FP{^C{vS;j(xL#!008Ime=Gn1 literal 6890 zcmVUsfE!5K)2ez%7Rh3aidRi}sG}qZt13&QuuaP% zh{Qk%l41wnmp@(!wiST*eR`$AA7_7kNTNfVDClVsw0rf3xXj@nm&AId@CH9tVIAf{ z5$4ICo-wLte;$8u~8<_D?){TuhODT>TMV$=fBC?tm{M3 zrg^f4@(Aa}%imUKyQEmx$sdQb2HMrxS^HQiEs#9zOT&)|NMPOGIJoj^+YrTzi`D8Z zD(fW5<8_mSb+lh^(&GHvHy5ijQK5Aewoq^U)n1(GNqe!v0v7B_j;wU)PJ6<7&A)5U zCUxzZt!uRc>M~0V@PC7!C3qM`Nz;s>B2pAqSEIuRz9)^GuJ^?w(ci51v0&);I^AFw ze0y!iK!{V!RS?pXov1kAr-)k4N9Syd!h$HBv+T$T^|vI9NxoHG;@}Hlr2_Gn+u;;j zXa;!s4eR>X(kNb(+HA}GpLr2 zAn(E&NjpJO`N6kuOf(;$odL&(f3B;f&KqFdrdiU6f;lw}@`YD}rzUEeqn}gI7M&sa zmQWXcaZ}fRaY2)Ez!p+Ok$XrzOPdzQ zwoT|9$ncX-myL60#qDea{|+B?_g`q%#iH3}h}G3(1TB^_q=1r#EKr|Ms!z@ARdklGbf>Em3t2({Ia**;fcBqET zYq7>!81T`VOHC=aWOXp1prI0xl%^ELc-K)DHjSkydNwR;lkno=Ddpk+p9N)w@(;5= zJ!|WOt%*pg6}w5&V&_$?d5Vbj+}puxoFFc5tTG9{y@vnZ!hhc{yBGQ8KYo59>nvI9 zRT@vTk?KQXQ8)nAOxXMpknzXGT^vnP-z{>4v5=qJ;$wPj+9Z$KY^twLe|9L+mc-w6 z6vK}Bra~0NdMicpI>}1hn1ZBI7*F&h;2*)vyLDSK@Cp>meT+3>I0oN~Qj-t(708hx zy)PqNyg~tA!1$kn`!l*IX&Q$`9NgEbX)~E8Ijme?ep26qjPhCDUPDhv8t8{SVAw+T z6QrpNGYB+k_NQglK2BZ20}bCQ&S2tk#i4=0);^MY#JSKHs+b{~XyfFrYRT@!hbSog zHpo{Heu(zW&_x+TEtU~7ewb^dbB3_hR}nV;D=FG3qQ=j#B!|d}VUpOpg&NC`*Swb4 z3;x}pEdLe?=`X=&`UJ_!or6_b3oR7;GEej|z!ycn=!%0v%hHG>FN0_D*(LBjyO@m= zm(lHfkOsKdgBszlbI`!lS8-lNSqj}dABnYXftt*c4Z|p-d6Ly?&~OYGemk(2X&Bm2 zXow1g>>=tEFNVLX3f$PWRADC0KoFA=4Ba^s<5dRgu2Dypr~PkmT6d#=o9-@?;%-UQ zec80l(txyITM)BOnlih)L=o2sO?R!pk1?jt^&8 zzs`a8_g{YM>d-vp(N{&@BM@oPE`u*$zYP1Cwp?qdD;X%P<&Cz5C-4s_AyFSj7w~Ge z<&nJu`x4Yjm^6~b=T<_AlEb>X4meX_>)$>?yjn(lkderUS z8SYxZPB%Z;8GmQyjHeqwguH!(O?nN|2%20kKryDPilx(9;%5laCBX zSC9rj9~Yxz?xx9pR)ew4 zU|2jF;Q5-tWC128ENJy(RYG%_rJ6R&-iulI>PlDLxz{ROrXQnYhj?8{tT&WuF{fKU zhPwk3Kg%%oA*V4sR;iBm*nwn>pVaE&hhz*V?2z=w63GoEqkN1=_|#FQVJL)RH4eO_ zdMtxQ?EP2(P3ZEWqgMSBY@5+)=2Z{c6jt%GtJLAzVe{v>P|RCz*WUd2+Zgt%L{OUI zviQ<#G`8L6E)ls6Ms5!g%_8w+4Xs!Wog*_R!nQ;sXA?GQ)L%e_eEpWos!q1)gF&9Z z&;u$4d#yvW%M%8Eg=Y||I2qqsJTl6&yEUluscR)D>%QS3NkkbybdE$9@+b5Rqx#Ef zSGR7%dY80NFhEd-aRcEq9@`OL0*2<3!GTPlsbny0iOLRKlG2T?rJI*$ZwA zQR>5quqAPTOy&aphw^znb=ER;(qU1`F-E_X-a(l-kB~o}8xe-^B1W^1-Gz9vaLxAde8@5c z;}IKuEE$E!gpileW#nEtA21pO4Xf%vy!6}63jNSU($e4OIt#9)={8Qb=f5Si=B>fJ z$F0b79ubZUKzz(H1be;L!K(mw4NUs`bhn3zb(o*z^cwj%mB=*SvghHc3 z4MV3L=jj`qBh=d%!;;3y(8)-%phSaUl$xI{V(heX(8vxiy_uD3qn^BZv!mlu`1a($ zAbJ*ntp?JMG3`61y)P5g=?}q$|Mp}v1$^+L)gL|4+NfFp-m2rl5<6Cac#tW=bf4X;MZhRNiAoQR9wi@e!<`a?&OG4AfVa7PsqLenIh& z++ldY5j7Kt&=GMO?ldUzbQYwmR&oi&0YDlWHi=1{Mr%;uMl7$W&zz!xe`p6geZC&QwLQe@#@-hZ9VP#B)Fj74c3OwBAnQoCE3pUKNFdK0+ zMww0pvgHQ6V&Ai6$3_r|msuOGS)Ux53uOj(@DT0&1-kjiEe}YvcA0pvVSkDWP8Z6M|8M@1oHBZyzxbFp9K35{s@Cjf&vJdGCQCL z7r6e56Ch7q(h=si#CAaEzGM+D_vImrdExkX4$Cu`ORyhI0KgfZ!`-Ls3kYvK89IN5 z@PKq8AydHU5YbEs47bzRSl%!6FWBse8Pm7tuCqRvH=QS9PoCbs_08z1K6RR~ zwy9>tyynQv0iDBa#w>FsW}G`%JTNB@4iC(w@g~o97p6}SbK;4HkMAg!RawSTGGDtr z33hh}_muG0%j28wji06n<<9r%3czdHtLGg}S5hxm$8t8;SZcaC6W6>T)6$X z0`FnKAx*jFHlR{=}mV_)$ea=)l;PE)szlF`6E? z#w|wFoAvW82tCPov^NX0qM&axxk_CmExIRs$?2x)V-vNRr7D8>9+ACBL2OO5Ph!8q z@x0q2gf3EgP4Vzy)TVbZpJGe-oIb{9hnUjo@j}>>#w8RHtC#Mgeb(c0(oe12j4JK; zFdVIt9*x=s_=&K-7tXoDsAeDK3w9n}&^d(A!L%_)k6iSrnthUG9&~<=r6W!ad*^wA zE#1ywnpu_>EVS^^-o9-s&msg%ROWe=B@b&FljFR-(@kFq8kzjgcxRua&NxaQI~irm z9Zhwv?pOr5gQhXB#;s^ZSfc-a{Bozb71}-mlAoC5PpyV$5x6+OkFy z4r3TdeLr9jU)tPS=;`Pl7qOyg?$b8fo9TFZ1bz6x#xySPEzmrpt+=mdrXnJIez3HN z6O@&k-=>b}x!6YX6I03)fsrtdj$U=CLU6)UtMg`Oq3#ibjf5vxKyBN6r%j|x0}5?S z|1Y!$_;(Cl7qDA|YdVlxM~SWdCRSnBZs8X|2m!;PI<(pnlNaUwJ`UT^F^|ah7L(3i zf#<=H+R<~4y#V8tNstxq^NQ&U`Px9sVP? zq^KL|9E+c^J4lLorRr`>Pap9#RUQgDZu{GN4 zp{0c^E}O;8Xg7@pd@QRZDr6W^$v(+oGP=y~)hbTz)IEsB6QvM=;P9~B=H>!Q>ULOc zEwe?E96V^UJ6dzwx^z?xUx|RVa#CbvS$RSE6^WGtlcILI0EEoaCXFc?Yjlgww<EE7r4Jn;;#1#T6yWx>HuC~aH*7|{MJpG8t$+CzahL)`T0j6WNaX@>{WM&C7spQounkK+Wf&mA|ww; zR>>2g@B@qzig|G;(146W>ID0N8(LtnQ|~s4(02{|Xy2~WJ!a;)q5&hXFWX!J9ZTJ= zV z>{K4Rx>J%XC{vX&Qf`&dW?Zg#h7##4xJ#i^$&b2am#8~c3con&pb|3C+U({- z424|JZQ1mM%nrFPG^RlsOCP3wRFsKBN!~+8@U8L!C>>3DbbX38WKp!UZJS<51?v=M zOW2ukkJNFA#hC5V%v=^9Y*^9x1WDL=iYh2Y%#3>>vy`^0I$H$(ZS@dX*lC^S@jA3* z(+jmM^<{aC#LDg>VkSd(ZiS|XWnFS+iT5)jO!PU3HZ5%aFO~_>RPr{hlY6ie;?ah_ zunHCTp5lr%pM{R(B=ML_q2=I=_?YK$z;nWjbw5; z%it#7Orh44YTJeiF@RnP@hpkcV}h8Jvbk)VN^V}okuvvqA z&z;pk(iq9iuc`S+FDo5A957inU1?F5e^A&pGqM$^Z2eH7&|%8yh4}^+9GfS-Ux|F28Y0|b zw5svKIC8ZmoEKp{bhj_5oXfsSE4i9&HV2V+hKIyd9)f^SJt|LqSHE>pk{Q>bvY*+@ zhk9|TZsbn0^z|3%&5JQrE?%|ODQ}xz6ZO=Uq$BWrRz7SsLm7L)$4Htoo(pqE#w?X{ zVty!ThFjp22n3l6?M6-SVzn#8`!z-`WQ@Ng#Pw|SZpK3J&f63VmEpQracmLpI~G3Z z!6T_AkGUPDVKk)e6_ObBb)%23d-tba{?NFQ^fxYQ5zVMjn{G{+!WOxSO}Td(*y!J~ z9B@f)3a=ZM7%Rb(H+%rgC}Yu#R2RHqYMVS!tr|R4qx*L-$J+5wthOK8Wr#&<{ca=j zY2&(eK}XHLSGZdLi#@G>qQ`bZg2#5kbtF@5N9dfly;}bSj;5(PGsWw1`DKSWlBX1E zjOLvbFFQZc>x=}i$0l}NE}`pE@ykQ?B@%6`YD^^DrsUgTD)0#I1N*8lz}ud58;@}I znA4gk>Q*8gWkzl#yQV8iL~jQmj?#upjz?MuPo$x^bQ*O*{K%q}1Ae$htukKRXkzneNZ=d6Hh33cAub1qNF7$Rt91_Vx%U@x(K78Oht^UxBGM>V^ zc@4w!>d@3zS-L@$f5mXFF26f_^~xJf?CbbjRS?w#%D$F?27|1_TM96Hh+ZMwl5Gdf zs|BkF&!S~2h-i}PzyJ5@f4*am=Vg266}n8DcCi|BRQ}$XrD2QmuFMX3@@l#$l$W@5 z&PRpf6)hY1GD2H^zEZ#**3Cm4_4w~<5`1d@OrMz~GqbIFUs^_3w zF8=Mz8!Hky`AGmB4xgvT!{O*W3T1V57c$vla1TTB1?s{#s6GOyC#prT0P2d>`d3WU z=?yC4Q%sPOszLP2?|#J$^8P|(x#-7%Mea|3WdBN2+RtTxF>qz-ICA0fw5<~dfd}IC z5s)2bC&y)msnRcDTjuH1nPhCZ0?M=aEGbqy`Y|Gw@VF{1BU?ne;ycJ>YJZu#|0pHw z)Knbv1PV(aoAuVwYRe42sP?iKv5XQE_zUYY0lTLe9t kHxEZ>k}vI)`TF_#`TF_#`TF_#Iq~QJ0dAIUqyWeO05q7N!~g&Q diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch index ba887b82..d932b5db 100644 --- a/policy-rawhide-contrib.patch +++ b/policy-rawhide-contrib.patch @@ -33050,10 +33050,10 @@ index 0000000..4501460 + diff --git a/glusterd.te b/glusterd.te new file mode 100644 -index 0000000..d474c09 +index 0000000..cbcaf9a --- /dev/null +++ b/glusterd.te -@@ -0,0 +1,313 @@ +@@ -0,0 +1,324 @@ +policy_module(glusterd, 1.1.3) + +## @@ -33079,6 +33079,13 @@ index 0000000..d474c09 +## +gen_tunable(gluster_export_all_rw, true) + ++## ++##

++## Allow glusterd_t domain to use executable memory ++##

++##
++gen_tunable(gluster_use_execmem, false) ++ +######################################## +# +# Declarations @@ -33289,6 +33296,10 @@ index 0000000..d474c09 + files_getattr_all_sockets(glusterd_t) +') + ++tunable_policy(`gluster_use_execmem',` ++ allow glusterd_t self:process { execmem }; ++') ++ +optional_policy(` + ctdbd_domtrans(glusterd_t) + ctdbd_signal(glusterd_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index f7fedd95..58fd76af 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 262%{?dist} +Release: 263%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -690,6 +690,9 @@ exit 0 %endif %changelog +* Tue Jul 11 2017 Lukas Vrabec - 3.13.1-263 +- Add new boolean gluster_use_execmem + * Mon Jul 10 2017 Lukas Vrabec - 3.13.1-262 - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service - Allow iptables to read container runtime files