From e08cffb7e1fcdd4803a3d865ca3ccbf2cf26a656 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Tue, 18 Apr 2017 16:09:05 +0200 Subject: [PATCH] * Tue Apr 18 2017 Lukas Vrabec - 3.13.1-251 - Fix abrt module to reflect all changes in abrt release --- container-selinux.tgz | Bin 6555 -> 6557 bytes policy-rawhide-contrib.patch | 61 ++++++++++++++++++----------------- selinux-policy.spec | 5 ++- 3 files changed, 36 insertions(+), 30 deletions(-) diff --git a/container-selinux.tgz b/container-selinux.tgz index 1e43445c9f8fe0a32b65a00c3a3aded59b222c7a..19e9920b25ba1d9294eac4711c7d4fd74e094a44 100644 GIT binary patch delta 6204 zcmV-C7{lkAGo3SkABzY8(jE3#00Zq^>yO+vlF!%aze2DBcqXuC>~Z1%c6JYoWP!U6 z2L!td+=t6uM=i0twWC+`n8z93zx}F;4^a|HQEE->y_*J-_Oz;gEEdUPu~?*{B5%SZ zXVqo0|LT!Gui^9V-M9Gt=KJqn>)-Hs`}X?V@4kBT_VxFF-+lY$-S^kmU%h_w_WI4c zuY%W)C6NAU>n5y%;H&hu3U@5B(oH@8C;e=mKM#JW+bj#Khd=)9$bzC|`K!8UtB3_* zS*A%8Hc62Ok?be|%Mb8<`NNfD+W?5)r&k*MarWnX7PSr2(33o9j`|OAk-GY9B`I z{8uH-wrcYx$=DXkBb*m6f8CrNSiY^;Z*5Wm?dI&Pc__6SD4yn};YS7<*ft*=Tv@rV ziQ>h@W^)!56^pWXTeGl=j@w<5pMU-4Vsj=1+LmE|19Ic9_To%Wnu`qUs(lk)p7?n(RLCJ*($*tuG(R_U5gR z1w*@6$qt*~>uWOxLOjM;1top40~I^`9966F=p1cPm=mRQl$|)B{z_$P>Q0kg5QF$p zQ&b6mt7mB1Ic_|JIo`JxJe{M@wWi>GFla$r6 zU_nhSva;#=(o{_y>i1N%rGqQJ6E*%97RCd0Q`3HSMOPpg)sVzlq;6{;JtJ`b*gQ)s ztlvTB^)am2m!x$P$Y1ZA+(YYWQa9MQZAuq^K!%@unrxao&2JVX_&4~dx&K6?9_Qz} zWKptDpn-Tp;@rwcCXdRDd51v$6DRjaw1cO06pLkBpmKxK|2@pZ!*C+`GR9a&qCJ{z z6Y!^4H;FMdU>?;<8e8y7as{+@M5FdN&FC0a2(_kwQhLpQ z@qjFMNplQBAZ#1ZaFav<)xKLifVo4uP_u(&mE2-ENclT9=m1$ru|+8i_!y0$suX*& z#9S$8yd%=moT51IHcG>~wiHFr#%1l8C@!8;9{&GXP?V_uF#W@`rfO|fMAAXAJC@`J zuVT$ZMA|s-2#s-oxWXygAo%(k{(B35|9!izfA;gg{q%**9OT86Njz`ffVHs2-~d!T z!yzUhDNtoucR$n(%c3To8$udBYxATb^>+=$v18$A$%1%mB}iVe zv_NMaG?hSqq9=j)NM_Nj`+|d)U|8;Al!W6L)}xvv@9`^8JwvTXC%A+_ftbL5#GjIT zb5=qZs|p+e6A{u?mRVsQ2X|FsaUY z@1tY24)Z2T9?n>nh+&$uLq%86l?+PjGw%a6B0N^AxH zX3(a83x!%k;sHoL5nr zK=Up~;&od=l0~}V7)7*9vjYigfdSp`0RA#{LmLWpQHhY=N4?@@_jidPoL!3u3vot@ zn2lg)&V?ASQZRS5-m^UYe?uUz>;3!WaLMx9HBpa6-PCIX(t2%0%!<`TdV7f)SOu21 zR1J>6uDECGRG(v_Q@bKu0qcK2O=%{ zW$@)2m*GFtl4}dHl7qr)UJsV=1pXd1B<10Bfe@=HPHY`mm&oW~)q+%ks2_z<$Yv!_ zFwET)E9f+ZWa`F~u(;k^_F!vIhWf4CI#H zyy8E2v5V>(f`rrDT0fbN&dE3%nuSr2O$Pk8WsxS)1NCqj6ckaw5Jo^FH()Qc=MzE0 z7i$N5w_)2HMW)s$;!6*|u#7g6cTV0ZG4!m3R^=1(Nj0R=&!>OoEtnhX)Lg?yvg=X{ z-pz4RdZC7J>OQN%+2(rwa(y1E{d~83JPOLR1rzJ-40$=hLrmXi^9PKfHHRBj6kyyH zZ64P&U~o5e9b3jXgcbY=dAXg4i}oP&8jh)8`a0e1gjq1m9}Mtf&fvNLmlGzm>Y*&4 zy4+Ju>U9&_SI&Pu@5Ei27wvNWI33@_>q_FSp^3$VZvDL04ov>6QhUdo#*{%#oWWxU zk};=jAd4T8F~zDw8a`G?ZYY)IV?@HI4w1&G5SrIGijod<87yk==K>6rt{yt1>hECN zoK`chzR{+!%AZ}Oj^_?rJjaD%UV6LM=BH<<(>5sjKXQLvRX3C;wZ{dx7P9!tUray_fEt zfg8PE+7h;(NpRkKI_^g*;Mo^ZON8Ngq%L!u)R@H5hm(mda*Gka`H#p4tAq0){}@*W zcl&?HT`Zc*DgLIa8w10};CCNW2E;jHD$`ibhg>GKk$@tIKFrNHA22yacvg-^IsT+t z2L2cz_E??BxTQA2=39*l9sacABdxhtQHLA%DswM2N6-hT!|+KTd>qWNmN6t97o`Qd z`=#`@Qe?zh{djIf7{kjfzCL!B1jrNmnumY$G0PZC?CJNhRGu1FLRLVN(E|K@#Ar}7 z%$y_j(r+I&7^%!zLw}zSS?13F-8>E>Dog|Jguo*nS1?U?HB0yJqp%EjNt!ed!N(vv z7I%4YlfbmUhkpUszGh7l2iZ+t!~qIRn;!J9U6QMuW%{8CVJ2tI9w2cF*kZy8-FbiU z>BE#1Fn7yM&Wfer6sEYzIl&~?ZU2BmqqYKNHq$(PH*1Pq?VVt5sJ4;9H)p(=wS!!q zyjgvq?I8H}lFU@gl`^ zO7>K+@u}y9eFg-H03tyfc42b%2As_-D(i z%-5Huyr3o3wWAGIxL$RYXdi#Eu9Srwd{So#mR0s(_+e>PomjJnmJQE*)WQ!;Q=Cd> z{p4rq2;sdP!u%9B%v%j$nhoD4z5whe@JxtlOfM9&50CS_`g>jEm+$UeApGFT(5=?x`n^*LxdO)J{J@34bfN(pzv~6#%{D(`!SL+`o2(C(4d`zv@Fa9Zt_pgHpOgv^G@>K0(mNDDmo>PX;EHXS&fjv{3 zK0dg&SzM*>^?>o*VZ!UCyA{i-qfSPXl`QfPi$8*lb#cVYUp zuppl4`1tl>CCWOUlKEKSqhNPu3?CEzdVPG;x!A`kLOav?cm;ppG1SfTj;1TAcNf8W zKG)RMTT2GMC+2LU=ZQPp@Ok3S4@P+c&$fb7xIUJ!cU|kuMWE?KyuZjRIJUENczlb^pzq!(J0lJXLjT5V&4)jK z5_{!htD?VUZmfSxw~tPYm@SM;;|4Q^&Gz{Ql+IF-&B~L6D5=#4aUw-hQ5BOZE$x7M3+gby<09@7Oe@XAzPmDzdCh+5MLK zK-o-nq3$~J{c1HPhM?+nhJD%cfq1VWxE|t(p+}XIEb-?2|v$-Y< z6FZrH#NsjpV`v-4T4mcB58Y(A{qFF&&?5v}pThC|e(fH90fZ1R9HwI+Eirjf9`E9?2_55zd~Z4E>?;C1560AvmUFBHIIp_oRf|4v zxV=#CHL?sY);5XoU1PQn+qB_vmV28@bd%2yAOQ}O@DECVCshJ(7DihPpH@lC=ntNO z{AoIQx4SO~3_B$yt1oOW{4Nhk9LSa3=sq3aBtIB`D!DJ_X~Ju&!XX;ow~kUdDbk`Sy`cPxMB!jQ zubk^|sk5X`VoHUYTpx>d!U+tM%i|G;&jNVFq&CE6ajEUDsl`6$nJz%sE~NIM%i%vt zVoS^+a}#dAzP9!jJX4EkJuKi_YcmgjGG7hU{lnF+E;S^bh(mzMu0`65t1fDlv%Tl5 zK0jiLaI6vpp(*Rw!f;G?4oJ^H2%#l;(Ioo^cf2IYj|?qxtmOwy)JRFWehg?rpLc#` zZ@L{M6)CnZ;}mJxWcLmdsd+%MYMuz?B7Blij*B)&2Qmt&5$wBN=z+m9xm%@wLEF{v zqkXMRM__r_h&qfq`D$B-cPv%2Re#C%$T)f8U5nmFi0!cH&G;VYzK!ooN%8lZa;Usp@pjJjv#8yj4l0Ud=<4^R!MZ(`qMmP04Ikg1C@{l(C2Z?bSPYIzjmFj(Qr&9nu)- z-8Gdg)O|RIlTh|F4^mR#w9w`l8)9hW!;ACko|5?v^TmK^bVr^KQ$Hmp$;6@E?LzzC zjrMk#A({%O`V?)rqRq~>uY36nyivF>VQ0cMQpb}?6CMG4lV}qi0o{{^6DohJ7V5U` z02^Z-;f6+z`q0PH5qJ9_)(>H#r1Acd_`kXI;!eUwP-1y2;gKkxU_Hm02XJDb1QDwymoW z1K5=iH*y3$-lUSy6_OTX?I)D@3~V9B#n{G{0@wd z^d`i~%>k2V)0Gx=*V9SAX2DefI$J+aCv>=S!@_(sd}iMWh_{#;?*gLx*iJb~>bm4@ zbjQ7Mw2X>TSCh`=*Yc_bf}@Aii&eU9LF>k!;r3MXp!X|L^ixB6IrM*4Jy{of?qCWR zMHqLy?Nh4Yvd_}pMX*+%gUCC_Lt$zUK|yF9wWq$b-!?DEjq6bP&-~3My`)e#a%Wlk z_KWQ1#gr+R@A2u3x6Q6eIfq8lk@c+!zU(S5{`P>0`@F<8iVLo*(m7{d&ZOLM3!Jw7 zuPzPypx>=x^(*A%{S#QHA*SCz;CeQBFk&Tm=TU~0%5a@(IJF4(0S6!S=|c{dS3yje z{Zro!LGkuECvD~_&M%K%_4UC?2Semak-9P)6_J*%CNEzxg88NFDe~!TE=9V~;59>& zh7}@z_JYV4;?@X$9iv_>|AkKu=zEfP_F;JRU~su3e+9$Ptd6peaGe9o?dXPIp2RX! zYD{N1DOjA>L98V{f$b#GRC=DYuSu_An~RO18=F>bY&8`FF-o+|id zlb+PqLI29Vz^c=^m;9Y}!=NiSY*zNw@;m!~7Tnc$>K%RS-OaaFHr#kX$@@+9fhF%b zr8`fd`-yzOmVcF)E@;2&6a#`syh>EukE-R%sEbgwi_%=@eS7nX49pIH@jBt_i8NN% zkVd~^@*~fE3q+_kX!#dbPM^Dy>NmsO)%26M4B2Ll-(kOI#_6ZV|4dBde@9|7<8H)% zX2wY#le80b&Vy2o|J{e=t;nF}Fy*PSXC^iF#H_}VkTq~mtOtpj;b8^i`GdiRD{Zq5 zG6xW7Vv*SUjXa!TgjS^ExQ^5CjEB77=_rFs-sPyHqt4HRH@I>MK3DV~T-4G$Ym+S(B!6p6_Cmc>Bj#wAW_+&5 zo#LHyWA7B!44>u2%i!1UwX%AOt?g8mWwX5_=;g=_QxA+ec7wD4t5x#r$|y7yJAFdT z9*nE&I<|*)9DLK8iOoOHTdS1Nm-|P1w~_n(Pp`lK?%kWw`=8!iKfV9y_xN1llHlr> zOa8hCdRZHG2~c+5h<6xm+xNoORPVbUE^Y{}U&9!=YU}DMO?DVCxZ*fhm*1SddgYBK z7vkc5!iZ`Dm--jHAkZ6BZq1t@6;+Msm*4z?H&^>B zk>7zm4J_{*^hfp=ny!BvTn8BU?C16)7oNB-a%Ly+K)gNyvcv53xK20K+9hm?ESWo! zj1@O}L)n1Gh5O~QOyXJo$OIflhX7cwUI*`$Nbz1rg<=BW zPF_71bd>g>*)agt+@2X0fZlqd109y(NK5j$7yM73r_a;p>GSk?`aFG}K2M*g&(r7W a^YnT8Jbj)%PoMu+pZ^8OzBow$$N&Hau1KQ* delta 6160 zcmV+r81LtuGn+GiABzY89X<6}00Zq^ZI9eGlFrxZUm@55JQLV6_Be3>JG+NPvcTPk z1A^TJ?!)D-qn6m++RZh%nunK~&(%UNBvB*j{_57dovw8kJ_@QpIEUX^>__reqijw88>Y}Y87KCM) zCQ;ZVMIJ=5qXaBJ!1v`3SCVZ5Aby`gY4FF{pYK`JHcUZJ@}N1YKg2}_|F|U9D}^`s zp$w}q3-U03V}E$Ysh<6DRKid6APCd6xMOk96hTvkd7WUTOrTeU3jf|DdBduG7_swT zJ88C6n>R_uwoo47ym3#;h3-6i??*KaO1XHuYT88#q)H~wlb&h(_Y*kA!GHl;vTn)IMO z;jQN1v}d!L_RQ9_S^-s&G6Vcy;O7oJj3QRoQ>cg(h2_;`_kr(OJ*RJd`AD`mZ+$En z+PzA4*aTl+n=ugLF~%w=>5Cnx*x~1>x*Lzq(H4a{Q94K2i394dRHmZtG}#3)h#xgY zm9Tn$hNhk4#-nSSRVbGwq#XS1LHnPSuG0| z)YKv?o31ZS)zqPWPeofgc*l35#{a^?SW`DO?PphX1%goxNt{LMw)W980_Ts-vvh~` zJLtSVh86pgv`zx~>z$K(Xgy8p2K%;6=>o`q@RLuIO>?LD&0+-q1|K!|pJ>$M{9KnT zO7;mf5N}AFTiM9uQJFFC5XgVxRnc z$a0r7#~=j4wgC+{Nfc1+`^5v8JERL0J6Kl9EtZ3nzhi@H$U=%ON@2jqXbe@Q*pnsZ zNudP$E&TU??YjQi&;Rz*7cz5@7gHwjymS}FX1uYjp|dp)WFB!W43#QJh^CWN1R+enK;*NpqHO#Z%bPi> z#?QDUhsudzmfHJ?8q1HjLP~4}|7K98e+xyohQw$307;93gH@ReEfmKhV|pJDlcJb( zWu)ISH6qE&;92*R!2}q8Rh(B*nn3d|N8)u`L6Swf;TT1}U{~C;b*j%X(WzY#u7LG_LmED;k9fTzWY`p0 zB5eRTE)~q$+c3_OoX+E=c{rSgUhWbl??tNwC-2;&p{WAFSjmz+#Y00$(S;;}+HLtZLJb}MQ4M}-8T_D72 ziW6H0)+I7JShXNkAnHe96tYtr!i$v5l4IMKr-f(X|nhs8B?r!B>i!RUi$3#dBOJ=B2l5ZGL)&I&FiZ z|0CCbRdqvoQhQv0DP}+=t};4}ba{x`sVg8Se9+ z@7{j*_U-8WC;aqu{_}VE@P+y|E8;d~=Us1j8N9iCefj!gqm5pkB*@q1K~)q@aWmJ^ z+B^?_Vt`Z8xl*uL8!{|0t0R%1QHsc+sZG59^ilmT&$n94MkbDhhC zHWE+-(e>PnbB)O{!n1NT%JHYJW#A7Dalq4@((rrO1eN_v5({VGJ*`_=ebh5+G0LYaY&j$1Gzo zv8O-8>hjdM60!oCj27VMBSwRwVdfmEmwx-O!AND!8v6TOXPG-}?-QEf2hAJB=d~?Q|Svkn%$(z*&+75zmPYz5H<_V^1qVN>cv1dB^GJ#CLNiO`i zC!1+QTNJJS=!w=uAp#)c6EeFb~NZZ3d<$P4b)VjW~eSvRmB#JV7#v2n`V@;X#9vPZvSD zr0OOB>;PmIRgv|R zG97ZyiWsK!jq!N$gm^O5alA+|osvBjY<%i@G2&!Orzf%@$5TQJpq=S3!Kdyl!LrI8 z3_mQbsuOGW(6Zr~k6QSFDT?coSwHz%Izo6ahcG|I4f9q5m}bNGi7x<$2|N>G8q*7f z?D}z@SAVaI{1P5Mb5-D@G2k>_!G0R=7C#UE6vsSgDhqGeAfe&NqMP8ZsBSKS>|cwL z?b|ecz>qL#AS-TvDPEihcPu!D@JATz7%CvBi?qcUBXIqPAV8kDppCVCf%SmKeaUz5 z?}|2!MdA2&2GcXROR#oh0N_kN5WzqG1%w|w8T!?_T)+1!Ay>e-oY!0kOefOV_+2j; zZ?^dn3x@9?*kpaMY&g%vo;|#M@rRK%ufeWCTL%4!3ZF=Svp-qszWApo-oFkaF!7j$ z$WyhCS;lOKdrlcXvxt7A0(+)1eSC0lv$#s%s{!M=!-UsObt{%tr#l%ynE&@#_;{8Ql(Se=1%V}xv^}?L%M0x@*>t-Ini@KQ$cepF=-3}8BLmf4#MHESVhsa)}ptd?Xve>V1+?%#2L1ay#x+vc_ zjGE*Y##3x5U(m<+tc~fqFi{A9QoEEQv&oV}bW8_aPWrjREfDD-y5XcqdcI_TCqHN7 z$&&VevBIeqZ{az0I-mz&)&mtsCRAgD1vimLd$!Xrf?xwE>jZA)fyo+~I7i=X@?Tqs2j)uB0cRa<} zLa&fVeJY`oxVLcw>ww2`W^+vzCU!FYh{XvS#?Us7mCCj?9=geJ``-tWpJw-}UYk=K zMvIf+4i*6qllKlWf9u@`7N&7=XMq+scFOZOW-21W=dGnif}kkf{5Eq$&*d^w?3mIy zc+7-xH1wvw3IPW^)jF#W7U}^p_(-^O1=P01cTz{nFrYNVZ228#mO&$k$rVcW zPF%yK7N>7kIDFsnj$I}5Rfj2%>eg5u8Q(|L)(*=)} z&Cdw_=*SEWB6q-u6A`Popd4&0VcZ^X)mt2bgP{0Jzw?t5mSU?l^_UBS;rQJW4d!ddImxW zEy;@}*+01BB}sl{Xpv(jKWL&xos{dxfF|^L=U4Wo-$Cjk#nxq9M_M-7y@Nz*9+0e> zCqlUhpCpvyqRr8Pj6!Mz`)(I{V6aT?SAS{Hb~XHHUn|oQSROW_4%3}{wXMT@ma5ry zf64dAICUKgL4O|=im+37v#{DkxAyE z&gHS2JLO!yGE_MuUA+<7oXd^4z@l5J-zLzg6vW)~o0)o33comH&wIt>S-i*NModT*Hp4l_u(8)LfO+iNJ)XyLYrf3 zh@p_{7w6RjCG#ET3yo=XN1hMUFefF+#G%~nLi^v1@^%>=tqZ666m7Vo&Ca&32l))V zQMfN*XTmj7&y!0N9szxmY7-p+{ga3jDu3H8)NR`VHpV={4UHW4Ev@%LU2LAKg#7`h zSw+!MnB1G;WR8swKB7F_J`<%Jic@8GL)JC361B_@^re?R+kk;Op@r*turDgyND6f$_m*X7zsPQ0Oqp`|9-rQL+w7W@Q#X>1 ztZzl|WmkFew+Bqz=OwODTyR~L$~p6Lrp^twz$x4R-KAk4)Vo!zeuccee_7%*#Pk~o zT+b#CMyv$yJj$?A8Lm?erxxKp;NXKkeaOM`Du@ZQf9ks-DBeEjq|H3V`Q_1feO){0 zV2E6Gq^``yjz~#Ylb5d;!TeJ8I`Zjku8wq}!E1DrhZQ1!4uZ%R;?@X$9iv(-|AkKu z=zEfP_CY^-pk40BU%{Z8)lv2lu5)0y9o_KDlUQa-jp+?11&i}Kh?T@Au$?4Ym!2o> zYcgoq=3-;$#->%I(`!-4CZ?3hTk6Ex#x!4yrwV@Aq$l-tFuZavuCRK=ej*>RO|O%s9zol6Hd5c~GkHzx$B96&cjj zQ=S@oW>RBM%xWA7S(AO*WZ8l?#<}^Pj9ZD-v9J_e6DawaP`Y2f87JUtPQ&aP`hu$JB+sNdtqy; z_k9l+Hw4$OVT@e0b#;{{I}8|Hah$8mZ_Zx5@K{4&6^-Qsv6NRzxf4kuJ%_VzXN+3Sl&74kL)irU4J*Y4lwT7 z&+SJpJaJv*%ue8eczpt7kJ;;Soo=eMOV|`yGIt~yD~=|49q|z9N-UPx+$x(jc#;Kj z4t9b02xDF%n}`0%Bi{_assXSUv5p;(_$!+O3A?&g(11@j4&WCooTU4G^-fL%>j;(% zWdj};?w89liD&sE6L1(E0x!IJ9lTc}#d{qUiV1)_dG%b-QQCuI#{gJyduCVwdh3Y_ ibXbNXEy?Fz@IQT?K9g`691Z?oef}3E4^MFb$N&I2(Fvmf diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch index 99726a85..62ea368f 100644 --- a/policy-rawhide-contrib.patch +++ b/policy-rawhide-contrib.patch @@ -589,7 +589,7 @@ index 058d908..ee0c559 100644 +') + diff --git a/abrt.te b/abrt.te -index eb50f07..1c4fbd3 100644 +index eb50f07..ca625e9 100644 --- a/abrt.te +++ b/abrt.te @@ -6,11 +6,10 @@ policy_module(abrt, 1.4.1) @@ -870,7 +870,7 @@ index eb50f07..1c4fbd3 100644 ') optional_policy(` -@@ -222,6 +255,36 @@ optional_policy(` +@@ -222,6 +255,37 @@ optional_policy(` ') optional_policy(` @@ -887,6 +887,7 @@ index eb50f07..1c4fbd3 100644 + +optional_policy(` + mta_send_mail(abrt_t) ++ mta_manage_home_rw(abrt_t) +') + +optional_policy(` @@ -907,7 +908,7 @@ index eb50f07..1c4fbd3 100644 policykit_domtrans_auth(abrt_t) policykit_read_lib(abrt_t) policykit_read_reload(abrt_t) -@@ -234,18 +297,25 @@ optional_policy(` +@@ -234,18 +298,25 @@ optional_policy(` ') optional_policy(` @@ -936,7 +937,7 @@ index eb50f07..1c4fbd3 100644 optional_policy(` sosreport_domtrans(abrt_t) -@@ -253,9 +323,21 @@ optional_policy(` +@@ -253,9 +324,21 @@ optional_policy(` sosreport_delete_tmp_files(abrt_t) ') @@ -959,7 +960,7 @@ index eb50f07..1c4fbd3 100644 # allow abrt_handle_event_t self:fifo_file rw_fifo_file_perms; -@@ -266,9 +348,13 @@ tunable_policy(`abrt_handle_event',` +@@ -266,9 +349,13 @@ tunable_policy(`abrt_handle_event',` can_exec(abrt_t, abrt_handle_event_exec_t) ') @@ -974,7 +975,7 @@ index eb50f07..1c4fbd3 100644 # allow abrt_helper_t self:capability { chown setgid sys_nice }; -@@ -281,6 +367,7 @@ manage_dirs_pattern(abrt_helper_t, abrt_var_cache_t, abrt_var_cache_t) +@@ -281,6 +368,7 @@ manage_dirs_pattern(abrt_helper_t, abrt_var_cache_t, abrt_var_cache_t) manage_files_pattern(abrt_helper_t, abrt_var_cache_t, abrt_var_cache_t) manage_lnk_files_pattern(abrt_helper_t, abrt_var_cache_t, abrt_var_cache_t) files_var_filetrans(abrt_helper_t, abrt_var_cache_t, { file dir }) @@ -982,7 +983,7 @@ index eb50f07..1c4fbd3 100644 read_files_pattern(abrt_helper_t, abrt_var_run_t, abrt_var_run_t) read_lnk_files_pattern(abrt_helper_t, abrt_var_run_t, abrt_var_run_t) -@@ -289,15 +376,20 @@ corecmd_read_all_executables(abrt_helper_t) +@@ -289,15 +377,20 @@ corecmd_read_all_executables(abrt_helper_t) domain_read_all_domains_state(abrt_helper_t) @@ -1003,7 +1004,7 @@ index eb50f07..1c4fbd3 100644 userdom_dontaudit_read_user_home_content_files(abrt_helper_t) userdom_dontaudit_read_user_tmp_files(abrt_helper_t) dev_dontaudit_read_all_blk_files(abrt_helper_t) -@@ -305,11 +397,25 @@ ifdef(`hide_broken_symptoms',` +@@ -305,11 +398,25 @@ ifdef(`hide_broken_symptoms',` dev_dontaudit_write_all_chr_files(abrt_helper_t) dev_dontaudit_write_all_blk_files(abrt_helper_t) fs_dontaudit_rw_anon_inodefs_files(abrt_helper_t) @@ -1030,7 +1031,7 @@ index eb50f07..1c4fbd3 100644 # allow abrt_retrace_coredump_t self:fifo_file rw_fifo_file_perms; -@@ -327,10 +433,12 @@ corecmd_exec_shell(abrt_retrace_coredump_t) +@@ -327,10 +434,12 @@ corecmd_exec_shell(abrt_retrace_coredump_t) dev_read_urand(abrt_retrace_coredump_t) @@ -1044,7 +1045,7 @@ index eb50f07..1c4fbd3 100644 optional_policy(` rpm_exec(abrt_retrace_coredump_t) rpm_dontaudit_manage_db(abrt_retrace_coredump_t) -@@ -343,10 +451,11 @@ optional_policy(` +@@ -343,10 +452,11 @@ optional_policy(` ####################################### # @@ -1058,7 +1059,7 @@ index eb50f07..1c4fbd3 100644 allow abrt_retrace_worker_t self:fifo_file rw_fifo_file_perms; domtrans_pattern(abrt_retrace_worker_t, abrt_retrace_coredump_exec_t, abrt_retrace_coredump_t) -@@ -365,38 +474,84 @@ corecmd_exec_shell(abrt_retrace_worker_t) +@@ -365,38 +475,84 @@ corecmd_exec_shell(abrt_retrace_worker_t) dev_read_urand(abrt_retrace_worker_t) @@ -1147,7 +1148,7 @@ index eb50f07..1c4fbd3 100644 ####################################### # -@@ -404,25 +559,60 @@ logging_read_generic_logs(abrt_dump_oops_t) +@@ -404,25 +560,60 @@ logging_read_generic_logs(abrt_dump_oops_t) # allow abrt_watch_log_t self:fifo_file rw_fifo_file_perms; @@ -1210,7 +1211,7 @@ index eb50f07..1c4fbd3 100644 ') ####################################### -@@ -430,10 +620,7 @@ tunable_policy(`abrt_upload_watch_anon_write',` +@@ -430,10 +621,7 @@ tunable_policy(`abrt_upload_watch_anon_write',` # Global local policy # @@ -75644,7 +75645,7 @@ index ded95ec..3cf7146 100644 + postfix_config_filetrans($1, postfix_prng_t, file, "prng_exch") ') diff --git a/postfix.te b/postfix.te -index 5cfb83e..b140dcb 100644 +index 5cfb83e..9cfa754 100644 --- a/postfix.te +++ b/postfix.te @@ -6,27 +6,23 @@ policy_module(postfix, 1.15.1) @@ -75822,9 +75823,8 @@ index 5cfb83e..b140dcb 100644 -######################################## -# -# Common postfix user domain local policy -+# Postfix master process local policy - # - +-# +- -allow postfix_user_domains self:capability dac_override; - -domain_use_interactive_fds(postfix_user_domains) @@ -75832,8 +75832,9 @@ index 5cfb83e..b140dcb 100644 -######################################## -# -# Master local policy --# -- ++# Postfix master process local policy + # + -allow postfix_master_t self:capability { chown dac_override kill fowner setgid setuid sys_tty_config }; +# chown is to set the correct ownership of queue dirs +allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config }; @@ -76206,7 +76207,7 @@ index 5cfb83e..b140dcb 100644 files_read_etc_runtime_files(postfix_map_t) files_dontaudit_search_var(postfix_map_t) -@@ -508,21 +422,22 @@ auth_use_nsswitch(postfix_map_t) +@@ -508,21 +422,24 @@ auth_use_nsswitch(postfix_map_t) logging_send_syslog_msg(postfix_map_t) @@ -76227,12 +76228,14 @@ index 5cfb83e..b140dcb 100644 +# Postfix pickup local policy # ++dontaudit postfix_pickup_t self:capability net_admin; ++ +allow postfix_pickup_t self:tcp_socket create_socket_perms; + stream_connect_pattern(postfix_pickup_t, postfix_private_t, postfix_private_t, postfix_master_t) rw_fifo_files_pattern(postfix_pickup_t, postfix_public_t, postfix_public_t) -@@ -532,21 +447,21 @@ allow postfix_pickup_t postfix_spool_t:dir list_dir_perms; +@@ -532,21 +449,21 @@ allow postfix_pickup_t postfix_spool_t:dir list_dir_perms; read_files_pattern(postfix_pickup_t, postfix_spool_t, postfix_spool_t) delete_files_pattern(postfix_pickup_t, postfix_spool_t, postfix_spool_t) @@ -76258,7 +76261,7 @@ index 5cfb83e..b140dcb 100644 write_fifo_files_pattern(postfix_pipe_t, postfix_public_t, postfix_public_t) -@@ -557,6 +472,10 @@ domtrans_pattern(postfix_pipe_t, postfix_postdrop_exec_t, postfix_postdrop_t) +@@ -557,6 +474,10 @@ domtrans_pattern(postfix_pipe_t, postfix_postdrop_exec_t, postfix_postdrop_t) corecmd_exec_bin(postfix_pipe_t) optional_policy(` @@ -76269,7 +76272,7 @@ index 5cfb83e..b140dcb 100644 dovecot_domtrans_deliver(postfix_pipe_t) ') -@@ -584,19 +503,28 @@ optional_policy(` +@@ -584,19 +505,28 @@ optional_policy(` ######################################## # @@ -76303,7 +76306,7 @@ index 5cfb83e..b140dcb 100644 term_dontaudit_use_all_ptys(postfix_postdrop_t) term_dontaudit_use_all_ttys(postfix_postdrop_t) -@@ -611,10 +539,7 @@ optional_policy(` +@@ -611,10 +541,7 @@ optional_policy(` cron_system_entry(postfix_postdrop_t, postfix_postdrop_exec_t) ') @@ -76315,7 +76318,7 @@ index 5cfb83e..b140dcb 100644 optional_policy(` fstools_read_pipes(postfix_postdrop_t) ') -@@ -629,17 +554,24 @@ optional_policy(` +@@ -629,17 +556,24 @@ optional_policy(` ####################################### # @@ -76343,7 +76346,7 @@ index 5cfb83e..b140dcb 100644 init_sigchld_script(postfix_postqueue_t) init_use_script_fds(postfix_postqueue_t) -@@ -655,69 +587,78 @@ optional_policy(` +@@ -655,69 +589,78 @@ optional_policy(` ######################################## # @@ -76440,7 +76443,7 @@ index 5cfb83e..b140dcb 100644 ') optional_policy(` -@@ -730,28 +671,32 @@ optional_policy(` +@@ -730,28 +673,32 @@ optional_policy(` ######################################## # @@ -76481,7 +76484,7 @@ index 5cfb83e..b140dcb 100644 optional_policy(` dovecot_stream_connect_auth(postfix_smtpd_t) -@@ -764,6 +709,7 @@ optional_policy(` +@@ -764,6 +711,7 @@ optional_policy(` optional_policy(` milter_stream_connect_all(postfix_smtpd_t) @@ -76489,7 +76492,7 @@ index 5cfb83e..b140dcb 100644 ') optional_policy(` -@@ -774,31 +720,101 @@ optional_policy(` +@@ -774,31 +722,101 @@ optional_policy(` sasl_connect(postfix_smtpd_t) ') diff --git a/selinux-policy.spec b/selinux-policy.spec index ed2482e6..c5775e85 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 250%{?dist} +Release: 251%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -682,6 +682,9 @@ exit 0 %endif %changelog +* Tue Apr 18 2017 Lukas Vrabec - 3.13.1-251 +- Fix abrt module to reflect all changes in abrt release + * Tue Apr 18 2017 Lukas Vrabec - 3.13.1-250 - Allow tlp_t domain to ioctl removable devices BZ(1436830) - Allow tlp_t domain domtrans into mount_t BZ(1442571)