- Allow cobblerd to list cobler appache content

This commit is contained in:
Dan Walsh 2010-10-15 11:35:17 -04:00
parent d33e644851
commit c849c84305
2 changed files with 12 additions and 4 deletions

View File

@ -16810,7 +16810,7 @@ index 293e08d..e3787fb 100644
+ ')
')
diff --git a/policy/modules/services/cobbler.te b/policy/modules/services/cobbler.te
index 0258b48..c4d678b 100644
index 0258b48..8fde016 100644
--- a/policy/modules/services/cobbler.te
+++ b/policy/modules/services/cobbler.te
@@ -6,13 +6,35 @@ policy_module(cobbler, 1.1.0)
@ -17031,6 +17031,13 @@ index 0258b48..c4d678b 100644
')
########################################
@@ -124,5 +231,6 @@ optional_policy(`
#
apache_content_template(cobbler)
+list_dirs_pattern(cobblerd_t, httpd_cobbler_content_t, httpd_cobbler_content_t)
manage_dirs_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
manage_files_pattern(cobblerd_t, httpd_cobbler_content_rw_t, httpd_cobbler_content_rw_t)
diff --git a/policy/modules/services/consolekit.if b/policy/modules/services/consolekit.if
index 42c6bd7..ac43a92 100644
--- a/policy/modules/services/consolekit.if

View File

@ -21,12 +21,11 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.9.7
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
patch: policy-F14.patch
patch2: telepathy_removal.patch
Source1: modules-targeted.conf
Source2: booleans-targeted.conf
Source3: Makefile.devel
@ -204,7 +203,6 @@ Based off of reference policy: Checked out revision 2.20091117
%prep
%setup -n serefpolicy-%{version} -q
%patch -p1
%patch2 -p1
%install
mkdir selinux_config
@ -472,6 +470,9 @@ exit 0
%endif
%changelog
* Fri Oct 15 2010 Dan Walsh <dwalsh@redhat.com> 3.9.7-3
- Allow cobblerd to list cobler appache content
* Fri Oct 15 2010 Dan Walsh <dwalsh@redhat.com> 3.9.7-2
- Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps