rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Remove all mcs overrides and replace with t1 != mcs_constrained_ty

Browse Source 
- Add attribute_role for iptables
- mcs_process_set_categories needs to be called for type
- Implement additional role_attribute statements
- Sodo domain is attempting to get the additributes of proc_kcore_t
- Unbound uses port 8953
- Allow svirt_t images to compromise_kernel when using pci-passthrou
- Add label for dns lib files
- Bluetooth aquires a dbus name
- Remove redundant files_read_usr_file calling
- Remove redundant files_read_etc_file calling
- Fix mozilla_run_plugin()
- Add role_attribute support for more domains
This commit is contained in:
Miroslav Grepl 2013-01-10 17:31:42 +01:00
parent fa970c32f1
commit f851aec1c4
3 changed files with 2457 additions and 1780 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

556
policy-rawhide-base.patch
View File

File diff suppressed because it is too large Load Diff

3634
policy-rawhide-contrib.patch
View File

File diff suppressed because it is too large Load Diff

19
selinux-policy.spec
View File

@ -14,12 +14,12 @@
%define BUILD_MLS 1 %define BUILD_MLS 1
%endif %endif
%define POLICYVER 29 %define POLICYVER 29
%define POLICYCOREUTILSVER 2.1.13-53 %define POLICYCOREUTILSVER 2.1.13-54
%define CHECKPOLICYVER 2.1.11-3 %define CHECKPOLICYVER 2.1.11-3
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.12.1 Version: 3.12.1
Release: 1%{?dist} Release: 2%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -524,6 +524,21 @@ SELinux Reference policy mls base module.
%endif %endif
%changelog %changelog
* Thu Jan 10 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-2
- Remove all mcs overrides and replace with t1 != mcs_constrained_types
- Add attribute_role for iptables
- mcs_process_set_categories needs to be called for type
- Implement additional role_attribute statements
- Sodo domain is attempting to get the additributes of proc_kcore_t
- Unbound uses port 8953
- Allow svirt_t images to compromise_kernel when using pci-passthrough
- Add label for dns lib files
- Bluetooth aquires a dbus name
- Remove redundant files_read_usr_file calling
- Remove redundant files_read_etc_file calling
- Fix mozilla_run_plugin()
- Add role_attribute support for more domains
* Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1 * Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1
- Mass merge with upstream - Mass merge with upstream