rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- New fix for seunshare, requires seunshare_domains to be able to mounton /

Browse Source 
- Allow systemctl running as logrotate_t to connect to private systemd socket
- Allow tmpwatch to read meminfo
- Allow rpc.svcgssd to read supported_krb5_enctype
- Allow zarafa domains to read /dev/random and /dev/urandom
- Allow snmpd to read dev_snmp6
- Allow procmail to talk with cyrus
- Add fixes for check_disk and check_nagios plugins
This commit is contained in:
Miroslav 2012-01-04 15:58:41 +01:00
parent 904f70ac64
commit b3ef57fc19
2 changed files with 789 additions and 249 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1026
policy-F16.patch
View File

File diff suppressed because it is too large Load Diff

12
selinux-policy.spec
View File

@ -16,7 +16,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.10.0
Release: 71%{?dist}
Release: 72%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@ -471,6 +471,16 @@ SELinux Reference policy mls base module.
%endif
%changelog
* Wed Jan 4 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
- New fix for seunshare, requires seunshare_domains to be able to mounton /
- Allow systemctl running as logrotate_t to connect to private systemd socket
- Allow tmpwatch to read meminfo
- Allow rpc.svcgssd to read supported_krb5_enctype
- Allow zarafa domains to read /dev/random and /dev/urandom
- Allow snmpd to read dev_snmp6
- Allow procmail to talk with cyrus
- Add fixes for check_disk and check_nagios plugins
* Tue Dec 20 2011 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71
- default trans rules for Rawhide policy
- Make sure sound_devices controlC* are labeled correctly on creation