diff --git a/policy_contrib-rawhide.patch b/policy_contrib-rawhide.patch index 8e5df662..0bafcb39 100644 --- a/policy_contrib-rawhide.patch +++ b/policy_contrib-rawhide.patch @@ -47944,10 +47944,10 @@ index 0000000..48ea717 +') diff --git a/realmd.te b/realmd.te new file mode 100644 -index 0000000..314e17e +index 0000000..3f5f701 --- /dev/null +++ b/realmd.te -@@ -0,0 +1,44 @@ +@@ -0,0 +1,45 @@ +policy_module(realmd, 1.0.0) + +######################################## @@ -47958,6 +47958,7 @@ index 0000000..314e17e +type realmd_t; +type realmd_exec_t; +application_domain(realmd_t, realmd_exec_t) ++role system_r types realmd_t; + +######################################## +# @@ -52467,19 +52468,20 @@ index 905883f..564240d 100644 + can_exec(smbd_t, samba_unconfined_script_exec_t) ') diff --git a/sambagui.te b/sambagui.te -index 1898dbd..43fcb73 100644 +index 1898dbd..eec2a5a 100644 --- a/sambagui.te +++ b/sambagui.te -@@ -7,7 +7,7 @@ policy_module(sambagui, 1.1.0) +@@ -7,7 +7,8 @@ policy_module(sambagui, 1.1.0) type sambagui_t; type sambagui_exec_t; -dbus_system_domain(sambagui_t, sambagui_exec_t) +application_domain(sambagui_t, sambagui_exec_t) ++role system_r types sambagui_t; ######################################## # -@@ -27,21 +27,30 @@ corecmd_exec_bin(sambagui_t) +@@ -27,21 +28,30 @@ corecmd_exec_bin(sambagui_t) dev_dontaudit_read_urand(sambagui_t) @@ -52511,7 +52513,7 @@ index 1898dbd..43fcb73 100644 nscd_dontaudit_search_pid(sambagui_t) ') -@@ -56,6 +65,7 @@ optional_policy(` +@@ -56,6 +66,7 @@ optional_policy(` samba_manage_var_files(sambagui_t) samba_read_secrets(sambagui_t) samba_initrc_domtrans(sambagui_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index e35ab78b..4d986fed 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.11.1 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -491,6 +491,9 @@ SELinux Reference policy mls base module. %endif %changelog +* Tue Aug 7 2012 Miroslav Grepl 3.11.1-3 +- Add role rules for realmd, sambagui + * Tue Aug 7 2012 Miroslav Grepl 3.11.1-2 - Add new type selinux_login_config_t for /etc/selinux//logins/ - Additional fixes for seutil_manage_module_store()