rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Browse Source 
- dovecot-auth_t needs ipc_lock
- gpm needs to use the user terminal
- Allow system_mail_t to append ~/dead.letter
- Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
- Add pid file to vnstatd
- Allow mount to communicate with gfs_controld
- Dontaudit hal leaks in setfiles
This commit is contained in:
Dan Walsh 2010-10-12 16:10:57 -04:00
parent dd20c25744
commit f0a56ee31d
2 changed files with 288 additions and 174 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

451
policy-F14.patch
View File

File diff suppressed because it is too large Load Diff

11
selinux-policy.spec
View File

@ -21,7 +21,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.9.6
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@ -470,6 +470,15 @@ exit 0
%endif
%changelog
* Tue Oct 12 2010 Dan Walsh <dwalsh@redhat.com> 3.9.6-3
-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
- dovecot-auth_t needs ipc_lock
- gpm needs to use the user terminal
- Allow system_mail_t to append ~/dead.letter
- Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
- Add pid file to vnstatd
- Allow mount to communicate with gfs_controld
- Dontaudit hal leaks in setfiles
* Fri Oct 8 2010 Dan Walsh <dwalsh@redhat.com> 3.9.6-2
- Lots of fixes for systemd