- Add asterisk policy back in

.cvsignore

@@ -192,3 +192,4 @@ serefpolicy-3.6.31.tgz
 serefpolicy-3.6.32.tgz
 serefpolicy-3.6.33.tgz
 serefpolicy-3.7.1.tgz
+serefpolicy-3.7.2.tgz

booleans-targeted.conf

@@ -24,7 +24,7 @@ allow_ftpd_anon_write = false
 
 # Allow gssd to read temp directory.
 # 
-allow_gssd_read_tmp = true
+allow_gssd_read_tmp = false
 
 # Allow Apache to modify public filesused for public file transfer services.
 # 
@@ -72,7 +72,7 @@ httpd_can_network_connect_db = false
 
 #
 # allow httpd to send dbus messages to avahi
-httpd_dbus_avahi = true
+httpd_dbus_avahi = false
 
 #
 # allow httpd to network relay
@@ -144,7 +144,7 @@ squid_connect_any = false
 
 # Support NFS home directories
 # 
-use_nfs_home_dirs = true
+use_nfs_home_dirs = false
 
 # Support SAMBA home directories
 # 

modules-minimum.conf

@@ -39,6 +39,13 @@ ada = module
 # 
 cpufreqselector = module
 
+# Layer: apps
+# Module: chrome
+#
+# chrome sandbox
+# 
+chrome = module
+
 # Layer: modules
 # Module: awstats
 #
@@ -124,6 +131,13 @@ audioentropy = module
 # 
 authlogin = base
 
+# Layer: services
+# Module: asterisk
+#
+# Asterisk IP telephony server
+# 
+asterisk = module
+
 # Layer: services
 # Module: automount
 #
@@ -721,6 +735,13 @@ jabber = module
 # 
 java = module
 
+# Layer: apps
+# Module: execmem
+#
+# execmem executable
+# 
+execmem = module
+
 # Layer: system
 # Module: kdump
 #
@@ -1007,6 +1028,13 @@ nscd = base
 # 
 ntp = module
 
+# Layer: services
+# Module: nut
+# 
+# nut - Network UPS Tools
+#
+nut = module
+
 # Layer: services
 # Module: nx
 #
@@ -1220,6 +1248,13 @@ aisexec = module
 # 
 rgmanager = module
 
+# Layer: services
+# Module: clogd
+#
+# clogd - clustered mirror log server
+# 
+clogd = module
+ 
 # Layer: services
 # Module: rhgb
 #
@@ -1378,6 +1413,13 @@ seunshare = module
 # 
 shorewall = base
 
+# Layer: apps
+# Module: sectoolm
+#
+# Policy for sectool-mechanism
+# 
+sectoolm = module
+
 # Layer: system
 # Module: setrans
 # Required in base
@@ -1646,6 +1688,13 @@ timidity = off
 # 
 tftp = module
 
+# Layer: services
+# Module: tuned
+#
+# Dynamic adaptive system tuning daemon
+#
+tuned = module
+
 # Layer: services
 # Module: uucp
 #

modules-targeted.conf

@@ -39,6 +39,13 @@ ada = module
 # 
 cpufreqselector = module
 
+# Layer: apps
+# Module: chrome
+#
+# chrome sandbox
+# 
+chrome = module
+
 # Layer: modules
 # Module: awstats
 #
@@ -124,6 +131,13 @@ audioentropy = module
 # 
 authlogin = base
 
+# Layer: services
+# Module: asterisk
+#
+# Asterisk IP telephony server
+# 
+asterisk = module
+
 # Layer: services
 # Module: automount
 #
@@ -721,6 +735,13 @@ jabber = module
 # 
 java = module
 
+# Layer: apps
+# Module: execmem
+#
+# execmem executable
+# 
+execmem = module
+
 # Layer: system
 # Module: kdump
 #
@@ -1007,6 +1028,13 @@ nscd = base
 # 
 ntp = module
 
+# Layer: services
+# Module: nut
+# 
+# nut - Network UPS Tools
+#
+nut = module
+
 # Layer: services
 # Module: nx
 #
@@ -1220,6 +1248,13 @@ aisexec = module
 # 
 rgmanager = module
 
+# Layer: services
+# Module: clogd
+#
+# clogd - clustered mirror log server
+# 
+clogd = module
+ 
 # Layer: services
 # Module: rhgb
 #
@@ -1378,6 +1413,13 @@ seunshare = module
 # 
 shorewall = base
 
+# Layer: apps
+# Module: sectoolm
+#
+# Policy for sectool-mechanism
+# 
+sectoolm = module
+
 # Layer: system
 # Module: setrans
 # Required in base
@@ -1646,6 +1688,13 @@ timidity = off
 # 
 tftp = module
 
+# Layer: services
+# Module: tuned
+#
+# Dynamic adaptive system tuning daemon
+#
+tuned = module
+
 # Layer: services
 # Module: uucp
 #

selinux-policy.spec

@@ -19,7 +19,7 @@
 %define CHECKPOLICYVER 2.0.16-3
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 3.7.1
+Version: 3.7.2
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Base

sources

@@ -1,2 +1,2 @@
 3651679c4b12a31d2ba5f4305bba5540  config.tgz
-e6bfc4fb384c2ff376951bd9fc6e1411  serefpolicy-3.7.1.tgz
+7caf1e23a7c13a97f49d83c82b042c27  serefpolicy-3.7.2.tgz