diff --git a/policycoreutils-gui.patch b/policycoreutils-gui.patch index 69b76da..0e36f28 100644 --- a/policycoreutils-gui.patch +++ b/policycoreutils-gui.patch @@ -1,6 +1,6 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/booleansPage.py policycoreutils-2.0.46/gui/booleansPage.py --- nsapolicycoreutils/gui/booleansPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/booleansPage.py 2008-04-30 14:17:44.259087000 -0400 ++++ policycoreutils-2.0.46/gui/booleansPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,230 @@ +# +# booleansPage.py - GUI for Booleans page in system-config-securitylevel @@ -234,7 +234,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/booleansPage.py poli + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/fcontextPage.py policycoreutils-2.0.46/gui/fcontextPage.py --- nsapolicycoreutils/gui/fcontextPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/fcontextPage.py 2008-04-30 14:17:44.266080000 -0400 ++++ policycoreutils-2.0.46/gui/fcontextPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,217 @@ +## fcontextPage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -455,7 +455,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/fcontextPage.py poli + self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls)) diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.glade policycoreutils-2.0.46/gui/lockdown.glade --- nsapolicycoreutils/gui/lockdown.glade 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/lockdown.glade 2008-04-30 14:32:03.895127000 -0400 ++++ policycoreutils-2.0.46/gui/lockdown.glade 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,2065 @@ + + @@ -2524,7 +2524,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.glade polic + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.glade.bak policycoreutils-2.0.46/gui/lockdown.glade.bak --- nsapolicycoreutils/gui/lockdown.glade.bak 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/lockdown.glade.bak 2008-04-30 14:32:03.912110000 -0400 ++++ policycoreutils-2.0.46/gui/lockdown.glade.bak 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,2065 @@ + + @@ -4593,7 +4593,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.glade.bak p + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.gladep policycoreutils-2.0.46/gui/lockdown.gladep --- nsapolicycoreutils/gui/lockdown.gladep 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/lockdown.gladep 2008-04-30 14:32:03.915108000 -0400 ++++ policycoreutils-2.0.46/gui/lockdown.gladep 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,7 @@ + + @@ -4604,7 +4604,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.gladep poli + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.gladep.bak policycoreutils-2.0.46/gui/lockdown.gladep.bak --- nsapolicycoreutils/gui/lockdown.gladep.bak 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/lockdown.gladep.bak 2008-04-30 14:32:03.918105000 -0400 ++++ policycoreutils-2.0.46/gui/lockdown.gladep.bak 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,7 @@ + + @@ -4615,7 +4615,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.gladep.bak + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.py policycoreutils-2.0.46/gui/lockdown.py --- nsapolicycoreutils/gui/lockdown.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/lockdown.py 2008-04-30 14:32:03.922100000 -0400 ++++ policycoreutils-2.0.46/gui/lockdown.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,333 @@ +#!/usr/bin/python +# @@ -4952,7 +4952,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/lockdown.py policyco + app.stand_alone() diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/loginsPage.py policycoreutils-2.0.46/gui/loginsPage.py --- nsapolicycoreutils/gui/loginsPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/loginsPage.py 2008-04-30 14:17:44.273073000 -0400 ++++ policycoreutils-2.0.46/gui/loginsPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,185 @@ +## loginsPage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -5141,7 +5141,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/loginsPage.py policy + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/Makefile policycoreutils-2.0.46/gui/Makefile --- nsapolicycoreutils/gui/Makefile 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/Makefile 2008-04-30 14:17:44.278068000 -0400 ++++ policycoreutils-2.0.46/gui/Makefile 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,34 @@ +# Installation directories. +PREFIX ?= ${DESTDIR}/usr @@ -5179,7 +5179,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/Makefile policycoreu +relabel: diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/mappingsPage.py policycoreutils-2.0.46/gui/mappingsPage.py --- nsapolicycoreutils/gui/mappingsPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/mappingsPage.py 2008-04-30 14:17:44.284062000 -0400 ++++ policycoreutils-2.0.46/gui/mappingsPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,56 @@ +## mappingsPage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -5239,7 +5239,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/mappingsPage.py poli + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/modulesPage.py policycoreutils-2.0.46/gui/modulesPage.py --- nsapolicycoreutils/gui/modulesPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/modulesPage.py 2008-04-30 14:17:44.291055000 -0400 ++++ policycoreutils-2.0.46/gui/modulesPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,195 @@ +## modulesPage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -5436,55 +5436,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/modulesPage.py polic + + + -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen1.glade policycoreutils-2.0.46/gui/polgen1.glade ---- nsapolicycoreutils/gui/polgen1.glade 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen1.glade 2008-04-30 14:31:13.851413000 -0400 -@@ -0,0 +1,42 @@ -+ -+ -+ -+ -+ -+ GDK_POINTER_MOTION_MASK | GDK_POINTER_MOTION_HINT_MASK | GDK_BUTTON_PRESS_MASK | GDK_BUTTON_RELEASE_MASK -+ SELinux Policy Generation Druid -+ -+ -+ True -+ GDK_POINTER_MOTION_MASK | GDK_POINTER_MOTION_HINT_MASK | GDK_BUTTON_PRESS_MASK | GDK_BUTTON_RELEASE_MASK -+ This tool can be used to generate a policy framework, to confine an application or users using SELinux. -+ -+The tool generates: -+Type Enforcement File (te) -+Interface file (if) -+File Context File (fc) -+Shell script (sh) - used to compile the policy. -+ -+ -+ GTK_ASSISTANT_PAGE_INTRO -+ -+ -+ -+ -+ True -+ GDK_POINTER_MOTION_MASK | GDK_POINTER_MOTION_HINT_MASK | GDK_BUTTON_PRESS_MASK | GDK_BUTTON_RELEASE_MASK -+ Content page -+ -+ -+ -+ -+ True -+ GDK_POINTER_MOTION_MASK | GDK_POINTER_MOTION_HINT_MASK | GDK_BUTTON_PRESS_MASK | GDK_BUTTON_RELEASE_MASK -+ Confirm page -+ -+ -+ GTK_ASSISTANT_PAGE_CONFIRM -+ -+ -+ -+ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.glade policycoreutils-2.0.46/gui/polgen.glade --- nsapolicycoreutils/gui/polgen.glade 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen.glade 2008-04-30 14:31:14.864555000 -0400 ++++ policycoreutils-2.0.46/gui/polgen.glade 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,3284 @@ + + @@ -8770,3319 +8724,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.glade policyc + + + -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.glade.bak policycoreutils-2.0.46/gui/polgen.glade.bak ---- nsapolicycoreutils/gui/polgen.glade.bak 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen.glade.bak 2008-04-30 14:31:14.902517000 -0400 -@@ -0,0 +1,3284 @@ -+ -+ -+ -+ -+ -+ -+ -+ 5 -+ GTK_FILE_CHOOSER_ACTION_OPEN -+ True -+ True -+ True -+ False -+ GTK_WINDOW_TOPLEVEL -+ GTK_WIN_POS_MOUSE -+ False -+ True -+ False -+ True -+ False -+ False -+ GDK_WINDOW_TYPE_HINT_DIALOG -+ GDK_GRAVITY_NORTH_WEST -+ True -+ False -+ -+ -+ -+ True -+ False -+ 24 -+ -+ -+ -+ True -+ GTK_BUTTONBOX_END -+ -+ -+ -+ True -+ True -+ True -+ gtk-cancel -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -6 -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ True -+ gtk-add -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -5 -+ -+ -+ -+ -+ 0 -+ False -+ True -+ GTK_PACK_END -+ -+ -+ -+ -+ -+ -+ -+ 5 -+ False -+ Polgen -+ Red Hat 2007 -+ GPL -+ False -+ www.redhat.com -+ Daniel Walsh <dwalsh@redhat.com> -+ translator-credits -+ -+ -+ -+ 12 -+ True -+ SELinux Policy Generation Tool -+ GTK_WINDOW_TOPLEVEL -+ GTK_WIN_POS_NONE -+ False -+ True -+ False -+ True -+ False -+ False -+ GDK_WINDOW_TYPE_HINT_NORMAL -+ GDK_GRAVITY_NORTH_WEST -+ True -+ False -+ -+ -+ -+ True -+ False -+ 18 -+ -+ -+ -+ True -+ False -+ False -+ GTK_POS_TOP -+ False -+ False -+ -+ -+ -+ True -+ GNOME_EDGE_START -+ SELinux Policy Generation Tool -+ This tool can be used to generate a policy framework, to confine applications or users using SELinux. -+ -+The tool generates: -+Type enforcement file (te) -+Interface file (if) -+File context file (fc) -+Shell script (sh) - used to compile and install the policy. -+ -+ -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ label25 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select type of the application/user role to be confined -+ -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>Applications</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ Standard Init Daemon are daemons started on boot via init scripts. Usually requires a script in /etc/rc.d/init.d -+ True -+ Standard Init Daemon -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Internet Services Daemon are daemons started by xinetd -+ True -+ Internet Services Daemon (inetd) -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Web Applications/Script (CGI) CGI scripts started by the web server (apache) -+ True -+ Web Application/Script (CGI) -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ User Application are any application that you would like to confine that is started by a user -+ True -+ User Application -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>Login Users</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ Modify an existing login user record. -+ True -+ Existing User Roles -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ This user will login to a machine only via a terminal or remote login. By default this user will have no setuid, no networking, no su, no sudo. -+ True -+ Minimal Terminal User Role -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ This user can login to a machine via X or terminal. By default this user will have no setuid, no networking, no sudo, no su -+ True -+ Minimal X Windows User Role -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ User with full networking, no setuid applications without transition, no sudo, no su. -+ True -+ User Role -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ User with full networking, no setuid applications without transition, no su, can sudo to Root Administration Roles -+ True -+ Admin User Role -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>Root Users</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ Select Root Administrator User Role, if this user will be used to administer the machine while running as root. This user will not be able to login to the system directly. -+ True -+ Root Admin User Role -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ init_radiobutton -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label26 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Enter name of application or user role to be confined -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ 3 -+ 3 -+ False -+ 6 -+ 12 -+ -+ -+ -+ True -+ Name -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ 1 -+ 0 -+ 1 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ Enter complete path for executable to be confined. -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 1 -+ 2 -+ 1 -+ 2 -+ -+ -+ -+ -+ -+ -+ True -+ True -+ ... -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ 2 -+ 3 -+ 1 -+ 2 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ Enter unique name for the confined application or user role. -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 1 -+ 3 -+ 0 -+ 1 -+ -+ -+ -+ -+ -+ -+ True -+ Executable -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ 1 -+ 1 -+ 2 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ Init script -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ 1 -+ 2 -+ 3 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ Enter complete path to init script used to start the confined application. -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 1 -+ 2 -+ 2 -+ 3 -+ -+ -+ -+ -+ -+ -+ True -+ True -+ ... -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ 2 -+ 3 -+ 2 -+ 3 -+ fill -+ -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label28 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select user roles that you want to customize -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Select the user roles that will transiton to this applications domains. -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label28 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select additional domains to which this user role will transition -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Select the applications domains that you would like this user role to transition to. -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label30 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select user roles that will transition to this domain -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Select the user roles that will transiton to this applications domains. -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label31 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select additional domains that this user role will administer -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Select the domains that you would like this user administer. -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label32 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select additional roles for this user -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Select the domains that you would like this user administer. -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label33 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Enter network ports that application/user role listens to -+ -+ -+ -+ 18 -+ True -+ False -+ 18 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>TCP Ports</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ Allows confined application/user role to bind to any udp port -+ True -+ All -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Allow application/user role to call bindresvport with 0. Binding to port 600-1024 -+ True -+ 600-1024 -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Enter a comma separated list of udp ports or ranges of ports that application/user role binds to. Example: 612, 650-660 -+ True -+ Unreserved Ports (>1024) -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ Select Ports -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 5 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Allows application/user role to bind to any udp ports > 1024 -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>UDP Ports</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ Allows confined application/user role to bind to any udp port -+ True -+ All -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Allow application/user role to call bindresvport with 0. Binding to port 600-1024 -+ True -+ 600-1024 -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Enter a comma separated list of udp ports or ranges of ports that application/user role binds to. Example: 612, 650-660 -+ True -+ Unreserved Ports (>1024) -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ Select Ports -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 5 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Allows application/user role to bind to any udp ports > 1024 -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label34 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Enter network ports that application/user role connects to -+ -+ -+ -+ 18 -+ True -+ False -+ 18 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>TCP Ports</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ True -+ All -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Select Ports -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 5 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Enter a comma separated list of tcp ports or ranges of ports that application/user role connects to. Example: 612, 650-660 -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ <b>UDP Ports</b> -+ False -+ True -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 0 -+ -+ -+ -+ True -+ -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ True -+ All -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 10 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Select Ports -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 5 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Enter a comma separated list of udp ports or ranges of ports that application/user role connects to. Example: 612, 650-660 -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label35 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select common application traits -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ Writes syslog messages -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Create/Manipulate temporary files in /tmp -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Uses Pam for authentication -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Uses nsswitch or getpw* calls -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Uses dbus -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Sends audit messages -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Interacts with the terminal -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ Sends email -+ True -+ GTK_RELIEF_NORMAL -+ True -+ False -+ False -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label51 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select files/directories that the application manages -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ True -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ -+ -+ -+ True -+ False -+ 2 -+ -+ -+ -+ True -+ gtk-add -+ 4 -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Add File -+ True -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ True -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ -+ -+ -+ True -+ False -+ 2 -+ -+ -+ -+ True -+ gtk-add -+ 4 -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Add Directory -+ True -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ gtk-delete -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 4 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Add Files/Directories that application will need to "Write" to. Pid Files, Log Files, /var/lib Files ... -+ True -+ False -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label43 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select booleans that the application uses -+ -+ -+ -+ 18 -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ True -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ 0 -+ -+ -+ -+ True -+ False -+ 2 -+ -+ -+ -+ True -+ gtk-add -+ 4 -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ Add Boolean -+ True -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ gtk-delete -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 4 -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ True -+ GTK_POLICY_AUTOMATIC -+ GTK_POLICY_AUTOMATIC -+ GTK_SHADOW_IN -+ GTK_CORNER_TOP_LEFT -+ -+ -+ -+ True -+ Add/Remove booleans used for this confined application/user -+ True -+ True -+ False -+ False -+ True -+ False -+ False -+ False -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label44 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ Select directory to generate policy in -+ -+ -+ -+ 18 -+ True -+ False -+ 5 -+ -+ -+ -+ True -+ False -+ 12 -+ -+ -+ -+ True -+ Policy Directory -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 5 -+ False -+ False -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ True -+ ... -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ 0 -+ False -+ False -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label46 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ GNOME_EDGE_FINISH -+ Generated Policy Files -+ This tool will generate the following: -+Type Enforcement(te), File Context(fc), Interface(if), Shell Script(sh) -+Execute shell script as root to compile/install and relabel files/directories. -+Use semanage or useradd to map Linux login users to user roles. -+Put the machine in permissive mode (setenforce 0). -+Login as the user and test this user role. -+Use audit2allow -R to generate additional rules for the te file. -+ -+ -+ -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ label45 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ -+ True -+ GNOME_EDGE_FINISH -+ Generated Policy Files -+ This tool will generate the following: -+Type Enforcement(te), File Context(fc), Interface(if), Shell Script(sh) -+ -+Execute shell script to compile/install and relabel files/directories. -+Put the machine in permissive mode (setenforce 0). -+Run/restart the application to generate avc messages. -+Use audit2allow -R to generate additional rules for the te file. -+ -+ -+ -+ False -+ True -+ -+ -+ -+ -+ -+ True -+ label47 -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0.5 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ tab -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ True -+ GTK_BUTTONBOX_END -+ 6 -+ -+ -+ -+ True -+ True -+ True -+ gtk-cancel -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ gtk-go-back -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ gtk-go-forward -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -+ -+ -+ -+ -+ 0 -+ False -+ True -+ -+ -+ -+ -+ -+ -+ -+ 12 -+ Add Booleans Dialog -+ GTK_WINDOW_TOPLEVEL -+ GTK_WIN_POS_MOUSE -+ False -+ 400 -+ True -+ False -+ True -+ False -+ False -+ GDK_WINDOW_TYPE_HINT_DIALOG -+ GDK_GRAVITY_NORTH_WEST -+ True -+ False -+ False -+ -+ -+ -+ True -+ False -+ 6 -+ -+ -+ -+ True -+ GTK_BUTTONBOX_END -+ -+ -+ -+ True -+ True -+ True -+ gtk-cancel -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -6 -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ gtk-add -+ True -+ GTK_RELIEF_NORMAL -+ True -+ -5 -+ -+ -+ -+ -+ 0 -+ False -+ True -+ GTK_PACK_END -+ -+ -+ -+ -+ -+ True -+ 2 -+ 2 -+ False -+ 6 -+ 12 -+ -+ -+ -+ True -+ Boolean Name -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ 1 -+ 0 -+ 1 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ Description -+ False -+ False -+ GTK_JUSTIFY_LEFT -+ False -+ False -+ 0 -+ 0.5 -+ 0 -+ 0 -+ PANGO_ELLIPSIZE_NONE -+ -1 -+ False -+ 0 -+ -+ -+ 0 -+ 1 -+ 1 -+ 2 -+ fill -+ -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 1 -+ 2 -+ 0 -+ 1 -+ -+ -+ -+ -+ -+ -+ True -+ True -+ True -+ True -+ 0 -+ -+ True -+ • -+ False -+ -+ -+ 1 -+ 2 -+ 1 -+ 2 -+ -+ -+ -+ -+ -+ 0 -+ True -+ True -+ -+ -+ -+ -+ -+ -+ -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.gladep policycoreutils-2.0.46/gui/polgen.gladep ---- nsapolicycoreutils/gui/polgen.gladep 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen.gladep 2008-04-30 14:31:14.905516000 -0400 -@@ -0,0 +1,7 @@ -+ -+ -+ -+ -+ -+ -+ -diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.gladep.bak policycoreutils-2.0.46/gui/polgen.gladep.bak ---- nsapolicycoreutils/gui/polgen.gladep.bak 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen.gladep.bak 2008-04-30 14:31:14.908512000 -0400 -@@ -0,0 +1,7 @@ -+ -+ -+ -+ -+ -+ -+ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgengui.py policycoreutils-2.0.46/gui/polgengui.py --- nsapolicycoreutils/gui/polgengui.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgengui.py 2008-04-30 14:31:15.500074000 -0400 ++++ policycoreutils-2.0.46/gui/polgengui.py 2008-05-07 07:14:54.000000000 -0400 @@ -0,0 +1,623 @@ +#!/usr/bin/python -E +# @@ -12275,7 +8919,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgengui.py policyc + iter = self.role_store.append() + self.role_store.set_value(iter, 0, i[:-2]) + -+ self.types = commands.getoutput("/usr/bin/seinfo -t").split()[2:] ++ self.types = polgen.get_all_types() + + self.transition_treeview = self.xml.get_widget("transition_treeview") + self.transition_store = gtk.ListStore(gobject.TYPE_STRING) @@ -12707,10 +9351,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgengui.py policyc + + app = childWindow() + app.stand_alone() -Binary files nsapolicycoreutils/gui/polgengui.pyo and policycoreutils-2.0.46/gui/polgengui.pyo differ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.py policycoreutils-2.0.46/gui/polgen.py --- nsapolicycoreutils/gui/polgen.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/polgen.py 2008-04-30 14:31:16.327369000 -0400 ++++ policycoreutils-2.0.46/gui/polgen.py 2008-05-07 07:16:26.000000000 -0400 @@ -0,0 +1,923 @@ +#!/usr/bin/python +# @@ -12787,7 +9430,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.py policycore + +def get_all_roles(): + roles = [] -+ roles = commands.getoutput("/usr/bin/seinfo -r").split()[2:] ++ roles = commands.getoutput("/usr/bin/seinfo -r 2> /dev/tty").split()[2:] + roles.remove("object_r") + roles.sort() + return roles @@ -12795,7 +9438,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.py policycore +def get_all_types(): + all_types = [] + try: -+ rc, output=commands.getstatusoutput("/usr/bin/seinfo --type") ++ rc, output=commands.getstatusoutput("/usr/bin/seinfo --type 2> /dev/tty") + if rc == 0: + l = output.split() + for i in l: @@ -12808,7 +9451,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.py policycore +def get_all_modules(): + try: + all_modules = [] -+ rc, output=commands.getstatusoutput("semodule -l") ++ rc, output=commands.getstatusoutput("semodule -l 2> /dev/tty") + if rc == 0: + l = output.split("\n") + for i in l: @@ -13635,10 +10278,9 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/polgen.py policycore + sys.exit(0) + + -Binary files nsapolicycoreutils/gui/polgen.pyo and policycoreutils-2.0.46/gui/polgen.pyo differ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/portsPage.py policycoreutils-2.0.46/gui/portsPage.py --- nsapolicycoreutils/gui/portsPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/portsPage.py 2008-04-30 14:17:44.379966000 -0400 ++++ policycoreutils-2.0.46/gui/portsPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,258 @@ +## portsPage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -13900,7 +10542,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/portsPage.py policyc + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/selinux.tbl policycoreutils-2.0.46/gui/selinux.tbl --- nsapolicycoreutils/gui/selinux.tbl 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/selinux.tbl 2008-04-30 14:17:44.388957000 -0400 ++++ policycoreutils-2.0.46/gui/selinux.tbl 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,234 @@ +acct_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for acct daemon") +allow_daemons_dump_core _("Admin") _("Allow all daemons to write corefiles to /") @@ -14138,7 +10780,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/selinux.tbl policyco + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/semanagePage.py policycoreutils-2.0.46/gui/semanagePage.py --- nsapolicycoreutils/gui/semanagePage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/semanagePage.py 2008-04-30 14:17:44.396949000 -0400 ++++ policycoreutils-2.0.46/gui/semanagePage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,170 @@ +## semanagePage.py - show selinux mappings +## Copyright (C) 2006 Red Hat, Inc. @@ -14312,7 +10954,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/semanagePage.py poli + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/statusPage.py policycoreutils-2.0.46/gui/statusPage.py --- nsapolicycoreutils/gui/statusPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/statusPage.py 2008-04-30 14:17:44.403942000 -0400 ++++ policycoreutils-2.0.46/gui/statusPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,227 @@ +## statusPage.py - show selinux status +## Copyright (C) 2006 Red Hat, Inc. @@ -14543,7 +11185,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/statusPage.py policy + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/system-config-selinux.glade policycoreutils-2.0.46/gui/system-config-selinux.glade --- nsapolicycoreutils/gui/system-config-selinux.glade 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/system-config-selinux.glade 2008-04-30 14:17:44.424921000 -0400 ++++ policycoreutils-2.0.46/gui/system-config-selinux.glade 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,3203 @@ + + @@ -17750,7 +14392,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/system-config-selinu + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/system-config-selinux.py policycoreutils-2.0.46/gui/system-config-selinux.py --- nsapolicycoreutils/gui/system-config-selinux.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/system-config-selinux.py 2008-04-30 14:17:44.433912000 -0400 ++++ policycoreutils-2.0.46/gui/system-config-selinux.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,175 @@ +#!/usr/bin/python +# @@ -17929,7 +14571,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/system-config-selinu + app.stand_alone() diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/boolean.py policycoreutils-2.0.46/gui/templates/boolean.py --- nsapolicycoreutils/gui/templates/boolean.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/boolean.py 2008-04-30 14:17:44.440905000 -0400 ++++ policycoreutils-2.0.46/gui/templates/boolean.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,40 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -17973,7 +14615,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/boolean.py + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/etc_rw.py policycoreutils-2.0.46/gui/templates/etc_rw.py --- nsapolicycoreutils/gui/templates/etc_rw.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/etc_rw.py 2008-04-30 14:17:44.447898000 -0400 ++++ policycoreutils-2.0.46/gui/templates/etc_rw.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,129 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18106,7 +14748,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/etc_rw.py +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/executable.py policycoreutils-2.0.46/gui/templates/executable.py --- nsapolicycoreutils/gui/templates/executable.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/executable.py 2008-04-30 14:17:44.463882000 -0400 ++++ policycoreutils-2.0.46/gui/templates/executable.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,328 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18438,7 +15080,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/executable + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/__init__.py policycoreutils-2.0.46/gui/templates/__init__.py --- nsapolicycoreutils/gui/templates/__init__.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/__init__.py 2008-04-30 14:17:44.470875000 -0400 ++++ policycoreutils-2.0.46/gui/templates/__init__.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,18 @@ +# +# Copyright (C) 2007 Red Hat, Inc. @@ -18460,7 +15102,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/__init__.p + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/network.py policycoreutils-2.0.46/gui/templates/network.py --- nsapolicycoreutils/gui/templates/network.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/network.py 2008-04-30 14:17:44.476869000 -0400 ++++ policycoreutils-2.0.46/gui/templates/network.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,80 @@ +te_port_types=""" +type TEMPLATETYPE_port_t; @@ -18544,7 +15186,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/network.py + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/rw.py policycoreutils-2.0.46/gui/templates/rw.py --- nsapolicycoreutils/gui/templates/rw.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/rw.py 2008-04-30 14:17:44.482864000 -0400 ++++ policycoreutils-2.0.46/gui/templates/rw.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,128 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18676,7 +15318,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/rw.py poli +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/script.py policycoreutils-2.0.46/gui/templates/script.py --- nsapolicycoreutils/gui/templates/script.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/script.py 2008-04-30 14:31:37.930058000 -0400 ++++ policycoreutils-2.0.46/gui/templates/script.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,105 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18785,7 +15427,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/script.py +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/semodule.py policycoreutils-2.0.46/gui/templates/semodule.py --- nsapolicycoreutils/gui/templates/semodule.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/semodule.py 2008-04-30 14:17:44.496849000 -0400 ++++ policycoreutils-2.0.46/gui/templates/semodule.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,41 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18830,7 +15472,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/semodule.p + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/tmp.py policycoreutils-2.0.46/gui/templates/tmp.py --- nsapolicycoreutils/gui/templates/tmp.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/tmp.py 2008-04-30 14:17:44.503842000 -0400 ++++ policycoreutils-2.0.46/gui/templates/tmp.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,97 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -18931,7 +15573,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/tmp.py pol + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/user.py policycoreutils-2.0.46/gui/templates/user.py --- nsapolicycoreutils/gui/templates/user.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/user.py 2008-04-30 14:17:44.511833000 -0400 ++++ policycoreutils-2.0.46/gui/templates/user.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,182 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -19117,7 +15759,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/user.py po +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_lib.py policycoreutils-2.0.46/gui/templates/var_lib.py --- nsapolicycoreutils/gui/templates/var_lib.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/var_lib.py 2008-04-30 14:17:44.519825000 -0400 ++++ policycoreutils-2.0.46/gui/templates/var_lib.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,158 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -19279,7 +15921,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_lib.py +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_log.py policycoreutils-2.0.46/gui/templates/var_log.py --- nsapolicycoreutils/gui/templates/var_log.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/var_log.py 2008-04-30 14:17:44.526821000 -0400 ++++ policycoreutils-2.0.46/gui/templates/var_log.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,110 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -19393,7 +16035,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_log.py +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_run.py policycoreutils-2.0.46/gui/templates/var_run.py --- nsapolicycoreutils/gui/templates/var_run.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/var_run.py 2008-04-30 14:17:44.534811000 -0400 ++++ policycoreutils-2.0.46/gui/templates/var_run.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,118 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -19515,7 +16157,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_run.py + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_spool.py policycoreutils-2.0.46/gui/templates/var_spool.py --- nsapolicycoreutils/gui/templates/var_spool.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/templates/var_spool.py 2008-04-30 14:17:44.554791000 -0400 ++++ policycoreutils-2.0.46/gui/templates/var_spool.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,129 @@ +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information @@ -19648,7 +16290,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/templates/var_spool. +""" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/translationsPage.py policycoreutils-2.0.46/gui/translationsPage.py --- nsapolicycoreutils/gui/translationsPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/translationsPage.py 2008-04-30 14:17:44.574771000 -0400 ++++ policycoreutils-2.0.46/gui/translationsPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,118 @@ +## translationsPage.py - show selinux translations +## Copyright (C) 2006 Red Hat, Inc. @@ -19770,7 +16412,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/translationsPage.py + self.store.set_value(iter, 1, translation) diff --exclude-from=exclude -N -u -r nsapolicycoreutils/gui/usersPage.py policycoreutils-2.0.46/gui/usersPage.py --- nsapolicycoreutils/gui/usersPage.py 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/gui/usersPage.py 2008-04-30 14:17:44.582763000 -0400 ++++ policycoreutils-2.0.46/gui/usersPage.py 2008-05-06 14:31:45.000000000 -0400 @@ -0,0 +1,150 @@ +## usersPage.py - show selinux mappings +## Copyright (C) 2006,2007,2008 Red Hat, Inc. diff --git a/policycoreutils-po.patch b/policycoreutils-po.patch index c8a6f42..2a321a2 100644 --- a/policycoreutils-po.patch +++ b/policycoreutils-po.patch @@ -1,6 +1,6 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/af.po policycoreutils-2.0.46/po/af.po --- nsapolicycoreutils/po/af.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/af.po 2008-04-30 14:40:41.783079000 -0400 ++++ policycoreutils-2.0.46/po/af.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -3842,7 +3842,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/af.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/am.po policycoreutils-2.0.46/po/am.po --- nsapolicycoreutils/po/am.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/am.po 2008-04-30 14:40:41.794070000 -0400 ++++ policycoreutils-2.0.46/po/am.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -7684,7 +7684,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/am.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ar.po policycoreutils-2.0.46/po/ar.po --- nsapolicycoreutils/po/ar.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/ar.po 2008-04-30 14:40:41.806058000 -0400 ++++ policycoreutils-2.0.46/po/ar.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -11526,7 +11526,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ar.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/as.po policycoreutils-2.0.46/po/as.po --- nsapolicycoreutils/po/as.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/as.po 2008-04-30 14:40:41.824037000 -0400 ++++ policycoreutils-2.0.46/po/as.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3573 @@ # translation of as.po to Assamese # This file is distributed under the same license as the PACKAGE package. @@ -15822,7 +15822,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/as.po policycoreutils +#~ msgstr "স্তৰ" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/autom4te.cache/requests policycoreutils-2.0.46/po/autom4te.cache/requests --- nsapolicycoreutils/po/autom4te.cache/requests 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/po/autom4te.cache/requests 2008-04-30 14:17:41.500380000 -0400 ++++ policycoreutils-2.0.46/po/autom4te.cache/requests 2008-04-30 09:16:46.000000000 -0400 @@ -0,0 +1,63 @@ +# This file was generated. +# It contains the lists of macros which have been traced. @@ -15889,7 +15889,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/autom4te.cache/reques + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/be.po policycoreutils-2.0.46/po/be.po --- nsapolicycoreutils/po/be.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/be.po 2008-04-30 14:40:41.835026000 -0400 ++++ policycoreutils-2.0.46/po/be.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -19731,7 +19731,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/be.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bg.po policycoreutils-2.0.46/po/bg.po --- nsapolicycoreutils/po/bg.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/bg.po 2008-04-30 14:40:41.856007000 -0400 ++++ policycoreutils-2.0.46/po/bg.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3876 @@ -# SOME DESCRIPTIVE TITLE. -# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER @@ -24356,7 +24356,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bg.po policycoreutils +#~ msgstr "Следва да сте root за да стартирате %s." diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bn_IN.po policycoreutils-2.0.46/po/bn_IN.po --- nsapolicycoreutils/po/bn_IN.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/bn_IN.po 2008-04-30 14:40:41.874989000 -0400 ++++ policycoreutils-2.0.46/po/bn_IN.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1079 +1,3273 @@ -# translation of bn_IN.po to Bengali India -# translation of bn_IN.po to Bangla (INDIA) @@ -28287,7 +28287,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bn_IN.po policycoreut + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bn.po policycoreutils-2.0.46/po/bn.po --- nsapolicycoreutils/po/bn.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/bn.po 2008-04-30 14:40:41.889972000 -0400 ++++ policycoreutils-2.0.46/po/bn.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -32129,7 +32129,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bn.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bs.po policycoreutils-2.0.46/po/bs.po --- nsapolicycoreutils/po/bs.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/bs.po 2008-04-30 14:40:41.903956000 -0400 ++++ policycoreutils-2.0.46/po/bs.po 2008-04-30 12:16:05.000000000 -0400 @@ -4,7 +4,7 @@ msgstr "" "Project-Id-Version: bs\n" @@ -36318,7 +36318,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/bs.po policycoreutils +#~ msgstr "Opciona greška: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ca.po policycoreutils-2.0.46/po/ca.po --- nsapolicycoreutils/po/ca.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ca.po 2008-04-30 14:40:41.929932000 -0400 ++++ policycoreutils-2.0.46/po/ca.po 2008-04-30 12:16:05.000000000 -0400 @@ -22,7 +22,7 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -40456,7 +40456,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ca.po policycoreutils +#~ msgstr "Error en les opcions: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/cs.po policycoreutils-2.0.46/po/cs.po --- nsapolicycoreutils/po/cs.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/cs.po 2008-04-30 14:40:41.961902000 -0400 ++++ policycoreutils-2.0.46/po/cs.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,8960 @@ -# SOME DESCRIPTIVE TITLE. -# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER @@ -50035,7 +50035,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/cs.po policycoreutils +#~ msgstr "Uložit na _disketu" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/.cvsignore policycoreutils-2.0.46/po/.cvsignore --- nsapolicycoreutils/po/.cvsignore 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/po/.cvsignore 2008-04-30 14:17:41.831052000 -0400 ++++ policycoreutils-2.0.46/po/.cvsignore 2008-04-30 09:16:46.000000000 -0400 @@ -0,0 +1,16 @@ +*.gmo +*.mo @@ -50055,7 +50055,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/.cvsignore policycore +stamp-it diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/cy.po policycoreutils-2.0.46/po/cy.po --- nsapolicycoreutils/po/cy.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/cy.po 2008-04-30 14:40:41.974886000 -0400 ++++ policycoreutils-2.0.46/po/cy.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -53897,7 +53897,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/cy.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/da.po policycoreutils-2.0.46/po/da.po --- nsapolicycoreutils/po/da.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/da.po 2008-04-30 14:40:41.985876000 -0400 ++++ policycoreutils-2.0.46/po/da.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1042 +1,3325 @@ +# translation of da.po to # Danish messages for policycoreutils. @@ -57874,7 +57874,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/da.po policycoreutils +#~ msgstr "Flagfejl: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/de.po policycoreutils-2.0.46/po/de.po --- nsapolicycoreutils/po/de.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/de.po 2008-04-30 14:40:42.002860000 -0400 ++++ policycoreutils-2.0.46/po/de.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1067 +1,3413 @@ -# translation of de.po to +# translation of policycoreutils.HEAD.de.po to @@ -61946,7 +61946,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/de.po policycoreutils -msgstr "Options Fehler: %s" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/el.po policycoreutils-2.0.46/po/el.po --- nsapolicycoreutils/po/el.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/el.po 2008-04-30 14:40:42.016845000 -0400 ++++ policycoreutils-2.0.46/po/el.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: el\n" @@ -66096,7 +66096,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/el.po policycoreutils +#~ msgstr "Σφάλμα πιστοποίησης: %s" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/en_GB.po policycoreutils-2.0.46/po/en_GB.po --- nsapolicycoreutils/po/en_GB.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/en_GB.po 2008-04-30 14:40:42.028834000 -0400 ++++ policycoreutils-2.0.46/po/en_GB.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3318 @@ -# SOME DESCRIPTIVE TITLE. -# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER @@ -70031,7 +70031,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/en_GB.po policycoreut +#~ msgstr "Options Error: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/es.po policycoreutils-2.0.46/po/es.po --- nsapolicycoreutils/po/es.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/es.po 2008-04-30 14:40:42.048812000 -0400 ++++ policycoreutils-2.0.46/po/es.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1043 +1,3338 @@ -# Domingo E. Becker , 2006. +# translation of policycoreutils.HEAD.es.po to Spanish @@ -74015,7 +74015,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/es.po policycoreutils -msgstr "Error Opciones:�%s�" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/et.po policycoreutils-2.0.46/po/et.po --- nsapolicycoreutils/po/et.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/et.po 2008-04-30 14:40:42.064796000 -0400 ++++ policycoreutils-2.0.46/po/et.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1010 +1,3241 @@ -#: ../load_policy/load_policy.c:22 -#, c-format @@ -77845,7 +77845,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/et.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/eu_ES.po policycoreutils-2.0.46/po/eu_ES.po --- nsapolicycoreutils/po/eu_ES.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/eu_ES.po 2008-04-30 14:40:42.076784000 -0400 ++++ policycoreutils-2.0.46/po/eu_ES.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -81687,7 +81687,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/eu_ES.po policycoreut msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fa.po policycoreutils-2.0.46/po/fa.po --- nsapolicycoreutils/po/fa.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/fa.po 2008-04-30 14:40:42.087774000 -0400 ++++ policycoreutils-2.0.46/po/fa.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -85529,7 +85529,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fa.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fi.po policycoreutils-2.0.46/po/fi.po --- nsapolicycoreutils/po/fi.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/fi.po 2008-04-30 14:40:42.099761000 -0400 ++++ policycoreutils-2.0.46/po/fi.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -89371,7 +89371,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fi.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fr.po policycoreutils-2.0.46/po/fr.po --- nsapolicycoreutils/po/fr.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/fr.po 2008-04-30 14:40:42.117743000 -0400 ++++ policycoreutils-2.0.46/po/fr.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1066 +1,3396 @@ -# translation of fr.po to Français +# translation of policycoreutils.HEAD.fr_modifié(1).po to french @@ -93597,7 +93597,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/fr.po policycoreutils -msgstr "Options invalides: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/gl.po policycoreutils-2.0.46/po/gl.po --- nsapolicycoreutils/po/gl.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/gl.po 2008-04-30 14:40:42.130730000 -0400 ++++ policycoreutils-2.0.46/po/gl.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1010 +1,3241 @@ -#: ../load_policy/load_policy.c:22 -#, c-format @@ -97427,7 +97427,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/gl.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/gu.po policycoreutils-2.0.46/po/gu.po --- nsapolicycoreutils/po/gu.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/gu.po 2008-04-30 14:40:42.150710000 -0400 ++++ policycoreutils-2.0.46/po/gu.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1042 +1,3341 @@ -# translation of gu.po to Gujarati +# translation of policycoreutils.HEAD.gu.po to Gujarati @@ -101393,7 +101393,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/gu.po policycoreutils -msgstr "વિકલ્પો ભૂલ: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/he.po policycoreutils-2.0.46/po/he.po --- nsapolicycoreutils/po/he.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/he.po 2008-04-30 14:40:42.163697000 -0400 ++++ policycoreutils-2.0.46/po/he.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -105235,7 +105235,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/he.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hi.po policycoreutils-2.0.46/po/hi.po --- nsapolicycoreutils/po/hi.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/hi.po 2008-04-30 14:40:42.185675000 -0400 ++++ policycoreutils-2.0.46/po/hi.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1043 +1,3318 @@ -# translation of hi.po to Hindi +# translation of policycoreutils.HEAD.hi.po to Hindi @@ -109179,7 +109179,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hi.po policycoreutils diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hr.po policycoreutils-2.0.46/po/hr.po --- nsapolicycoreutils/po/hr.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/hr.po 2008-04-30 14:40:42.201659000 -0400 ++++ policycoreutils-2.0.46/po/hr.po 2008-04-30 12:16:05.000000000 -0400 @@ -2,8 +2,8 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -113829,7 +113829,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hr.po policycoreutils +#~ msgstr "Pogreška opcija: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hu.po policycoreutils-2.0.46/po/hu.po --- nsapolicycoreutils/po/hu.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/hu.po 2008-04-30 14:40:42.214646000 -0400 ++++ policycoreutils-2.0.46/po/hu.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1052 +1,3330 @@ -# translation of policycoreutils to Hungarian -# This file is distributed under the same license as the PACKAGE package. @@ -117966,7 +117966,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hu.po policycoreutils +#~ msgstr "Hiba az opciókban: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hy.po policycoreutils-2.0.46/po/hy.po --- nsapolicycoreutils/po/hy.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/hy.po 2008-04-30 14:40:42.228632000 -0400 ++++ policycoreutils-2.0.46/po/hy.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -121808,7 +121808,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/hy.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/id.po policycoreutils-2.0.46/po/id.po --- nsapolicycoreutils/po/id.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/id.po 2008-04-30 14:40:42.240620000 -0400 ++++ policycoreutils-2.0.46/po/id.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1010 +1,3241 @@ -#: ../load_policy/load_policy.c:22 -#, c-format @@ -125638,7 +125638,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/id.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/is.po policycoreutils-2.0.46/po/is.po --- nsapolicycoreutils/po/is.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/is.po 2008-04-30 14:40:42.252608000 -0400 ++++ policycoreutils-2.0.46/po/is.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -129480,7 +129480,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/is.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/it.po policycoreutils-2.0.46/po/it.po --- nsapolicycoreutils/po/it.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/it.po 2008-04-30 14:40:42.268592000 -0400 ++++ policycoreutils-2.0.46/po/it.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1052 +1,3342 @@ -# translation of it.po to # translation of it.po to @@ -133455,7 +133455,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/it.po policycoreutils -msgstr "Errore opzioni: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ja.po policycoreutils-2.0.46/po/ja.po --- nsapolicycoreutils/po/ja.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ja.po 2008-04-30 14:40:42.284576000 -0400 ++++ policycoreutils-2.0.46/po/ja.po 2008-04-30 12:16:05.000000000 -0400 @@ -3,1040 +3,3362 @@ # translation of ja.po to # This file is distributed under the same license as the PACKAGE package. @@ -137450,7 +137450,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ja.po policycoreutils diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ka.po policycoreutils-2.0.46/po/ka.po --- nsapolicycoreutils/po/ka.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ka.po 2008-04-30 14:40:42.297564000 -0400 ++++ policycoreutils-2.0.46/po/ka.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -141292,7 +141292,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ka.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/kn.po policycoreutils-2.0.46/po/kn.po --- nsapolicycoreutils/po/kn.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/kn.po 2008-04-30 14:40:42.319565000 -0400 ++++ policycoreutils-2.0.46/po/kn.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3321 @@ -# SOME DESCRIPTIVE TITLE. +# translation of policycoreutils.HEAD.kn.po to Kannada @@ -145254,7 +145254,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/kn.po policycoreutils -msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ko.po policycoreutils-2.0.46/po/ko.po --- nsapolicycoreutils/po/ko.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/ko.po 2008-04-30 14:40:42.331565000 -0400 ++++ policycoreutils-2.0.46/po/ko.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1053 +1,3312 @@ # translation of ko.po to Korean +# Eunju Kim , 2006, 2007. @@ -149376,7 +149376,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ko.po policycoreutils +#~ "MCS 레벨" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ku.po policycoreutils-2.0.46/po/ku.po --- nsapolicycoreutils/po/ku.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ku.po 2008-04-30 14:40:42.346565000 -0400 ++++ policycoreutils-2.0.46/po/ku.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -153218,7 +153218,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ku.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lo.po policycoreutils-2.0.46/po/lo.po --- nsapolicycoreutils/po/lo.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/lo.po 2008-04-30 14:40:42.357566000 -0400 ++++ policycoreutils-2.0.46/po/lo.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -157060,7 +157060,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lo.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lt.po policycoreutils-2.0.46/po/lt.po --- nsapolicycoreutils/po/lt.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/lt.po 2008-04-30 14:40:42.368565000 -0400 ++++ policycoreutils-2.0.46/po/lt.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -160902,7 +160902,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lt.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lv.po policycoreutils-2.0.46/po/lv.po --- nsapolicycoreutils/po/lv.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/lv.po 2008-04-30 14:40:42.380565000 -0400 ++++ policycoreutils-2.0.46/po/lv.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -164744,7 +164744,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/lv.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/Makefile policycoreutils-2.0.46/po/Makefile --- nsapolicycoreutils/po/Makefile 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/Makefile 2008-04-30 14:40:42.384565000 -0400 ++++ policycoreutils-2.0.46/po/Makefile 2008-04-30 12:16:05.000000000 -0400 @@ -23,20 +23,61 @@ POFILES = $(wildcard *.po) MOFILES = $(patsubst %.po,%.mo,$(POFILES)) @@ -164826,7 +164826,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/Makefile policycoreut l=`basename $$n .mo`; \ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/mk.po policycoreutils-2.0.46/po/mk.po --- nsapolicycoreutils/po/mk.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/mk.po 2008-04-30 14:40:42.407565000 -0400 ++++ policycoreutils-2.0.46/po/mk.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3331 @@ -# SOME DESCRIPTIVE TITLE. +# translation of mk.po to Macedonian @@ -168773,7 +168773,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/mk.po policycoreutils +#~ msgstr "Грешка во опциите: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ml.po policycoreutils-2.0.46/po/ml.po --- nsapolicycoreutils/po/ml.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ml.po 2008-04-30 14:40:42.433565000 -0400 ++++ policycoreutils-2.0.46/po/ml.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1041 +1,3345 @@ -# translation of ml.po to Malayalam +# translation of ml.po to @@ -172744,7 +172744,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ml.po policycoreutils diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/mr.po policycoreutils-2.0.46/po/mr.po --- nsapolicycoreutils/po/mr.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/mr.po 2008-04-30 14:40:42.455561000 -0400 ++++ policycoreutils-2.0.46/po/mr.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1041 +1,3316 @@ -# translation of mr.po to Marathi +# translation of policycoreutils.HEAD.mr.po to marathi @@ -176687,7 +176687,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/mr.po policycoreutils diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ms.po policycoreutils-2.0.46/po/ms.po --- nsapolicycoreutils/po/ms.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/ms.po 2008-04-30 14:40:42.469547000 -0400 ++++ policycoreutils-2.0.46/po/ms.po 2008-04-30 12:16:05.000000000 -0400 @@ -5,1128 +5,3311 @@ # msgid "" @@ -180868,7 +180868,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ms.po policycoreutils +#~ msgstr "Ralat Pilihan: %s" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/my.po policycoreutils-2.0.46/po/my.po --- nsapolicycoreutils/po/my.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/my.po 2008-04-30 14:40:42.481535000 -0400 ++++ policycoreutils-2.0.46/po/my.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -184710,7 +184710,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/my.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nb.po policycoreutils-2.0.46/po/nb.po --- nsapolicycoreutils/po/nb.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/nb.po 2008-04-30 14:40:42.493523000 -0400 ++++ policycoreutils-2.0.46/po/nb.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1027 +1,3279 @@ # Norwegian bokmål translation of policycoreutils. # Copyright (C) 2006 Red Hat, Inc. @@ -188584,7 +188584,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nb.po policycoreutils +#~ msgstr "Zebra" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nl.po policycoreutils-2.0.46/po/nl.po --- nsapolicycoreutils/po/nl.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/nl.po 2008-04-30 14:40:42.505511000 -0400 ++++ policycoreutils-2.0.46/po/nl.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,14 +1,14 @@ # translation of policycoreutils to Dutch # This file is distributed under the same license as the policycoreutils package. @@ -192740,7 +192740,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nl.po policycoreutils +#~ msgstr "Fout in opties: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nn.po policycoreutils-2.0.46/po/nn.po --- nsapolicycoreutils/po/nn.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/nn.po 2008-04-30 14:40:42.517499000 -0400 ++++ policycoreutils-2.0.46/po/nn.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -196582,7 +196582,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nn.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/no.po policycoreutils-2.0.46/po/no.po --- nsapolicycoreutils/po/no.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/no.po 2008-04-30 14:40:42.530486000 -0400 ++++ policycoreutils-2.0.46/po/no.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -200424,7 +200424,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/no.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nso.po policycoreutils-2.0.46/po/nso.po --- nsapolicycoreutils/po/nso.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/nso.po 2008-04-30 14:40:42.541475000 -0400 ++++ policycoreutils-2.0.46/po/nso.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -204266,7 +204266,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/nso.po policycoreutil msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/or.po policycoreutils-2.0.46/po/or.po --- nsapolicycoreutils/po/or.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/or.po 2008-04-30 14:40:42.555461000 -0400 ++++ policycoreutils-2.0.46/po/or.po 2008-04-30 12:16:05.000000000 -0400 @@ -7,7 +7,7 @@ msgstr "" "Project-Id-Version: or\n" @@ -208373,7 +208373,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/or.po policycoreutils +#~ msgstr "ପସନ୍ଦ ମାନଙ୍କ ର ତୃଟି: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pa.po policycoreutils-2.0.46/po/pa.po --- nsapolicycoreutils/po/pa.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/pa.po 2008-04-30 14:40:42.573443000 -0400 ++++ policycoreutils-2.0.46/po/pa.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1031 +1,3295 @@ # translation of pa.po to Punjabi -# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER @@ -212310,7 +212310,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pa.po policycoreutils -msgstr "ਚੋਣ ਗਲਤੀ:%s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pl.po policycoreutils-2.0.46/po/pl.po --- nsapolicycoreutils/po/pl.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/pl.po 2008-04-30 14:40:42.588428000 -0400 ++++ policycoreutils-2.0.46/po/pl.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1049 +1,3452 @@ # translation of pl.po to Polish -# Piotr Drąg , 2006. @@ -216391,7 +216391,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pl.po policycoreutils +msgstr "Użytkownik SELinuksa \"%s\" jest wymagany" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/policycoreutils.pot policycoreutils-2.0.46/po/policycoreutils.pot --- nsapolicycoreutils/po/policycoreutils.pot 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/policycoreutils.pot 2008-04-30 14:40:42.601415000 -0400 ++++ policycoreutils-2.0.46/po/policycoreutils.pot 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -220233,7 +220233,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/policycoreutils.pot p msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/policycoreutils.pot.old policycoreutils-2.0.46/po/policycoreutils.pot.old --- nsapolicycoreutils/po/policycoreutils.pot.old 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/po/policycoreutils.pot.old 2008-04-30 14:17:43.415775000 -0400 ++++ policycoreutils-2.0.46/po/policycoreutils.pot.old 2008-04-30 09:16:47.000000000 -0400 @@ -0,0 +1,1028 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER @@ -221265,7 +221265,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/policycoreutils.pot.o +msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/POTFILES policycoreutils-2.0.46/po/POTFILES --- nsapolicycoreutils/po/POTFILES 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/POTFILES 2008-04-30 14:40:42.605411000 -0400 ++++ policycoreutils-2.0.46/po/POTFILES 2008-04-30 12:16:05.000000000 -0400 @@ -1,10 +1,54 @@ - ../load_policy/load_policy.c \ - ../newrole/newrole.c \ @@ -221331,7 +221331,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/POTFILES policycoreut + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/POTFILES.in policycoreutils-2.0.46/po/POTFILES.in --- nsapolicycoreutils/po/POTFILES.in 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/POTFILES.in 2008-04-30 14:40:42.609407000 -0400 ++++ policycoreutils-2.0.46/po/POTFILES.in 2008-04-30 12:16:05.000000000 -0400 @@ -2,9 +2,7 @@ run_init/run_init.c semodule_link/semodule_link.c @@ -221393,7 +221393,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/POTFILES.in policycor secon/secon.c diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pt_BR.po policycoreutils-2.0.46/po/pt_BR.po --- nsapolicycoreutils/po/pt_BR.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/pt_BR.po 2008-04-30 14:40:42.628388000 -0400 ++++ policycoreutils-2.0.46/po/pt_BR.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1062 +1,3788 @@ # translation of pt_BR.po to Brazilian Portuguese -# translation of pt_BR.po to Brazilian Portuguese @@ -225838,7 +225838,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pt_BR.po policycoreut -msgstr "Erro de Opções: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pt.po policycoreutils-2.0.46/po/pt.po --- nsapolicycoreutils/po/pt.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/pt.po 2008-04-30 14:40:42.644372000 -0400 ++++ policycoreutils-2.0.46/po/pt.po 2008-04-30 12:16:05.000000000 -0400 @@ -2,8 +2,8 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -230418,7 +230418,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/pt.po policycoreutils +#~ msgstr "Erro nas Opções: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ro.po policycoreutils-2.0.46/po/ro.po --- nsapolicycoreutils/po/ro.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/ro.po 2008-04-30 14:40:42.658358000 -0400 ++++ policycoreutils-2.0.46/po/ro.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -234260,7 +234260,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ro.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ru.po policycoreutils-2.0.46/po/ru.po --- nsapolicycoreutils/po/ru.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ru.po 2008-04-30 14:40:42.671345000 -0400 ++++ policycoreutils-2.0.46/po/ru.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1038 +1,3271 @@ # translation of ru.po to Russian -# @@ -238218,7 +238218,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ru.po policycoreutils +#~ msgstr "п©б╥я▐Б■╛п©Б∙╕п©Б∙═п©Б∙╗п©Б∙÷ п©б╘п©Б∙÷я▐Б■─п©Б∙÷п©Б∙╙п©Б∙ёя▐Б■▄я▐Б■─п©Б∙╛п©Б∙║: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/si.po policycoreutils-2.0.46/po/si.po --- nsapolicycoreutils/po/si.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/si.po 2008-04-30 14:40:42.682334000 -0400 ++++ policycoreutils-2.0.46/po/si.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -242060,7 +242060,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/si.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sk.po policycoreutils-2.0.46/po/sk.po --- nsapolicycoreutils/po/sk.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/sk.po 2008-04-30 14:40:42.696319000 -0400 ++++ policycoreutils-2.0.46/po/sk.po 2008-04-30 12:16:05.000000000 -0400 @@ -7,8 +7,8 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -246173,7 +246173,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sk.po policycoreutils +#~ msgstr "Chyba volieb: %s" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sl.po policycoreutils-2.0.46/po/sl.po --- nsapolicycoreutils/po/sl.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/sl.po 2008-04-30 14:40:42.707309000 -0400 ++++ policycoreutils-2.0.46/po/sl.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -250015,7 +250015,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sl.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sq.po policycoreutils-2.0.46/po/sq.po --- nsapolicycoreutils/po/sq.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/sq.po 2008-04-30 14:40:42.718297000 -0400 ++++ policycoreutils-2.0.46/po/sq.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -253857,7 +253857,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sq.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr@latin.po policycoreutils-2.0.46/po/sr@latin.po --- nsapolicycoreutils/po/sr@latin.po 1969-12-31 19:00:00.000000000 -0500 -+++ policycoreutils-2.0.46/po/sr@latin.po 2008-04-30 14:40:42.731285000 -0400 ++++ policycoreutils-2.0.46/po/sr@latin.po 2008-04-30 12:16:05.000000000 -0400 @@ -0,0 +1,3383 @@ +# translation of policycoreutils.HEAD.sr.po to Serbian +# Serbian(Latin) translations for policycoreutils @@ -257244,7 +257244,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr@latin.po policycor +msgstr "SELinux korisnik „%s“ je neophodan" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr@Latn.po policycoreutils-2.0.46/po/sr@Latn.po --- nsapolicycoreutils/po/sr@Latn.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/sr@Latn.po 2008-04-30 14:17:43.797393000 -0400 ++++ policycoreutils-2.0.46/po/sr@Latn.po 2008-04-30 09:16:47.000000000 -0400 @@ -8,1110 +8,3384 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -261504,7 +261504,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr@Latn.po policycore +msgstr "SELinux korisnik „%s“ je neophodan" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr.po policycoreutils-2.0.46/po/sr.po --- nsapolicycoreutils/po/sr.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/sr.po 2008-04-30 14:40:42.752264000 -0400 ++++ policycoreutils-2.0.46/po/sr.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1117 +1,3381 @@ +# translation of policycoreutils.HEAD.sr.po to Serbian # Serbian translations for policycoreutils @@ -265592,7 +265592,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sr.po policycoreutils +msgstr "SELinux корисник „%s“ је неопходан" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sv.po policycoreutils-2.0.46/po/sv.po --- nsapolicycoreutils/po/sv.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/sv.po 2008-04-30 14:40:42.764255000 -0400 ++++ policycoreutils-2.0.46/po/sv.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1040 +1,3395 @@ # Swedish messages for policycoreutils. -# Copyright (C) Christian Rose , 2006. @@ -269790,7 +269790,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/sv.po policycoreutils +#~ msgstr "Flaggfel: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ta.po policycoreutils-2.0.46/po/ta.po --- nsapolicycoreutils/po/ta.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ta.po 2008-04-30 14:40:42.780237000 -0400 ++++ policycoreutils-2.0.46/po/ta.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1043 +1,3387 @@ # translation of ta.po to Tamil # This file is distributed under the same license as the PACKAGE package. @@ -273977,7 +273977,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ta.po policycoreutils +#~ "MCS நிலை" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/te.po policycoreutils-2.0.46/po/te.po --- nsapolicycoreutils/po/te.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/te.po 2008-04-30 14:40:42.799218000 -0400 ++++ policycoreutils-2.0.46/po/te.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1028 +1,3331 @@ -# SOME DESCRIPTIVE TITLE. +# translation of new_policycoreutils.HEAD.te.po to Telugu @@ -277941,7 +277941,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/te.po policycoreutils + diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/th.po policycoreutils-2.0.46/po/th.po --- nsapolicycoreutils/po/th.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/th.po 2008-04-30 14:40:42.809210000 -0400 ++++ policycoreutils-2.0.46/po/th.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -281783,7 +281783,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/th.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/tr.po policycoreutils-2.0.46/po/tr.po --- nsapolicycoreutils/po/tr.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/tr.po 2008-04-30 14:40:42.820196000 -0400 ++++ policycoreutils-2.0.46/po/tr.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -285625,7 +285625,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/tr.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/uk.po policycoreutils-2.0.46/po/uk.po --- nsapolicycoreutils/po/uk.po 2007-07-16 14:20:42.000000000 -0400 -+++ policycoreutils-2.0.46/po/uk.po 2008-04-30 14:40:42.832186000 -0400 ++++ policycoreutils-2.0.46/po/uk.po 2008-04-30 12:16:05.000000000 -0400 @@ -7,7 +7,7 @@ msgstr "" "Project-Id-Version: policycoreutils\n" @@ -289740,7 +289740,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/uk.po policycoreutils +#~ msgstr "Помилка у аргументах: %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ur.po policycoreutils-2.0.46/po/ur.po --- nsapolicycoreutils/po/ur.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/ur.po 2008-04-30 14:40:42.843173000 -0400 ++++ policycoreutils-2.0.46/po/ur.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -293582,7 +293582,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/ur.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/vi.po policycoreutils-2.0.46/po/vi.po --- nsapolicycoreutils/po/vi.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/vi.po 2008-04-30 14:40:42.853163000 -0400 ++++ policycoreutils-2.0.46/po/vi.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" @@ -297424,7 +297424,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/vi.po policycoreutils msgstr "" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/zh_CN.po policycoreutils-2.0.46/po/zh_CN.po --- nsapolicycoreutils/po/zh_CN.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/zh_CN.po 2008-04-30 14:40:42.865153000 -0400 ++++ policycoreutils-2.0.46/po/zh_CN.po 2008-04-30 12:16:05.000000000 -0400 @@ -1,1045 +1,3271 @@ -# translation of zh_CN.po to -# translation of zh_CN.po to @@ -301332,7 +301332,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/zh_CN.po policycoreut -msgstr "选项错误： %s " diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/zh_TW.po policycoreutils-2.0.46/po/zh_TW.po --- nsapolicycoreutils/po/zh_TW.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/zh_TW.po 2008-04-30 14:40:42.877140000 -0400 ++++ policycoreutils-2.0.46/po/zh_TW.po 2008-04-30 12:16:05.000000000 -0400 @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: zh_TW\n" @@ -305439,7 +305439,7 @@ diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/zh_TW.po policycoreut +#~ msgstr "選項錯誤：%s" diff --exclude-from=exclude -N -u -r nsapolicycoreutils/po/zu.po policycoreutils-2.0.46/po/zu.po --- nsapolicycoreutils/po/zu.po 2007-07-16 14:20:43.000000000 -0400 -+++ policycoreutils-2.0.46/po/zu.po 2008-04-30 14:40:42.888127000 -0400 ++++ policycoreutils-2.0.46/po/zu.po 2008-04-30 12:16:05.000000000 -0400 @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: PACKAGE VERSION\n" diff --git a/policycoreutils-rhat.patch b/policycoreutils-rhat.patch index 1815cde..6a7d00e 100644 --- a/policycoreutils-rhat.patch +++ b/policycoreutils-rhat.patch @@ -1,406 +1,6 @@ -diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/audit2why/audit2why.8 policycoreutils-2.0.46/audit2why/audit2why.8 ---- nsapolicycoreutils/audit2why/audit2why.8 2006-11-16 17:14:26.000000000 -0500 -+++ policycoreutils-2.0.46/audit2why/audit2why.8 1969-12-31 19:00:00.000000000 -0500 -@@ -1,79 +0,0 @@ --.\" Hey, Emacs! This is an -*- nroff -*- source file. --.\" Copyright (c) 2005 Dan Walsh --.\" --.\" This is free documentation; you can redistribute it and/or --.\" modify it under the terms of the GNU General Public License as --.\" published by the Free Software Foundation; either version 2 of --.\" the License, or (at your option) any later version. --.\" --.\" The GNU General Public License's references to "object code" --.\" and "executables" are to be interpreted as the output of any --.\" document formatting or typesetting system, including --.\" intermediate and printed output. --.\" --.\" This manual is distributed in the hope that it will be useful, --.\" but WITHOUT ANY WARRANTY; without even the implied warranty of --.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the --.\" GNU General Public License for more details. --.\" --.\" You should have received a copy of the GNU General Public --.\" License along with this manual; if not, write to the Free --.\" Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, --.\" USA. --.\" --.\" --.TH AUDIT2WHY "8" "May 2005" "Security Enhanced Linux" NSA --.SH NAME --audit2why \- Translates SELinux audit messages into a description of why the access was denied --.SH SYNOPSIS --.B audit2why --.RI [ options "] " --.SH OPTIONS --.TP -- --.B "\-\-help" --Print a short usage message --.TP --.B "\-p " --Specify an alternate policy file. --.SH DESCRIPTION --.PP --This utility processes SELinux audit messages from standard --input and and reports which component of the policy caused each --permission denial based on the specified policy file if the -p option --was used or the active policy otherwise. There are three possible --causes: 1) a missing or disabled TE allow rule, 2) a constraint violation, --or 3) a missing role allow rule. In the first case, the TE allow --rule may exist in the policy but may be disabled due to boolean settings. --See --.BR booleans (8). --If the allow rule is not present at all, it can be generated via --.BR audit2allow (1). --In the second case, a constraint is being violated; see policy/constraints --or policy/mls to identify the particular constraint. Typically, this can --be resolved by adding a type attribute to the domain. In the third case, --a role transition was attempted but no allow rule existed for the role pair. --This can be resolved by adding an allow rule for the role pair to the policy. --.PP --.SH EXAMPLE --.nf --$ /usr/sbin/audit2why < /var/log/audit/audit.log -- --type=KERNEL msg=audit(1115316408.926:336418): avc: denied { getattr } for path=/home/sds dev=hda5 ino=1175041 scontext=root:secadm_r:secadm_t:s0-s9:c0.c127 tcontext=user_u:object_r:user_home_dir_t:s0 tclass=dir -- Was caused by: -- Missing or disabled TE allow rule. -- Allow rules may exist but be disabled by boolean settings; check boolean settings. -- You can see the necessary allow rules by running audit2allow with this audit message as input. -- --type=KERNEL msg=audit(1115320071.648:606858): avc: denied { append } for name=.bash_history dev=hda5 ino=1175047 scontext=user_u:user_r:user_t:s1-s9:c0.c127 tcontext=user_u:object_r:user_home_t:s0 tclass=file -- Was caused by: -- Constraint violation. -- Check policy/constraints. -- Typically, you just need to add a type attribute to the domain to satisfy the constraint. --.fi --.PP --.SH AUTHOR --This manual page was written by --.I Dan Walsh , --.B audit2why --utility was written by Stephen Smalley . -diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/audit2why/audit2why.c policycoreutils-2.0.46/audit2why/audit2why.c ---- nsapolicycoreutils/audit2why/audit2why.c 2006-11-16 17:14:26.000000000 -0500 -+++ policycoreutils-2.0.46/audit2why/audit2why.c 1969-12-31 19:00:00.000000000 -0500 -@@ -1,313 +0,0 @@ --#define _GNU_SOURCE --#include --#include --#include --#include --#include --#include --#include --#include --#include --#include -- --#define AVCPREFIX "avc: denied { " --#define SCONTEXT "scontext=" --#define TCONTEXT "tcontext=" --#define TCLASS "tclass=" -- --void usage(char *progname, int rc) --{ -- fprintf(stderr, "usage: %s [-p policy] < /var/log/audit/audit.log\n", -- progname); -- exit(rc); --} -- --int main(int argc, char **argv) --{ -- char path[PATH_MAX]; -- char *buffer = NULL, *bufcopy = NULL; -- unsigned int lineno = 0; -- size_t len = 0, bufcopy_len = 0; -- FILE *fp; -- int opt, rc, set_path = 0; -- char *p, *scon, *tcon, *tclassstr, *permstr; -- sepol_security_id_t ssid, tsid; -- sepol_security_class_t tclass; -- sepol_access_vector_t perm, av; -- struct sepol_av_decision avd; -- unsigned int reason; -- int vers = 0; -- sidtab_t sidtab; -- policydb_t policydb; -- struct policy_file pf; -- -- while ((opt = getopt(argc, argv, "p:?h")) > 0) { -- switch (opt) { -- case 'p': -- set_path = 1; -- strncpy(path, optarg, PATH_MAX); -- fp = fopen(path, "r"); -- if (!fp) { -- fprintf(stderr, "%s: unable to open %s: %s\n", -- argv[0], path, strerror(errno)); -- exit(1); -- } -- break; -- default: -- usage(argv[0], 0); -- } -- } -- -- if (argc - optind) -- usage(argv[0], 1); -- -- if (!set_path) { -- if (!is_selinux_enabled()) { -- fprintf(stderr, -- "%s: Must specify -p policy on non-SELinux systems\n", -- argv[0]); -- exit(1); -- } -- vers = security_policyvers(); -- if (vers < 0) { -- fprintf(stderr, -- "%s: Could not get policy version: %s\n", -- argv[0], strerror(errno)); -- exit(1); -- } -- snprintf(path, PATH_MAX, "%s.%d", -- selinux_binary_policy_path(), vers); -- fp = fopen(path, "r"); -- while (!fp && errno == ENOENT && --vers) { -- snprintf(path, PATH_MAX, "%s.%d", -- selinux_binary_policy_path(), vers); -- fp = fopen(path, "r"); -- } -- if (!fp) { -- snprintf(path, PATH_MAX, "%s.%d", -- selinux_binary_policy_path(), -- security_policyvers()); -- fprintf(stderr, "%s: unable to open %s: %s\n", -- argv[0], path, strerror(errno)); -- exit(1); -- } -- } -- -- /* Set up a policydb directly so that we can mutate it later -- for booleans and user settings. Otherwise we would just use -- sepol_set_policydb_from_file() here. */ -- pf.fp = fp; -- pf.type = PF_USE_STDIO; -- if (policydb_init(&policydb)) { -- fprintf(stderr, "%s: policydb_init failed: %s\n", -- argv[0], strerror(errno)); -- exit(1); -- } -- if (policydb_read(&policydb, &pf, 0)) { -- fprintf(stderr, "%s: invalid binary policy %s\n", -- argv[0], path); -- exit(1); -- } -- fclose(fp); -- sepol_set_policydb(&policydb); -- -- if (!set_path) { -- /* If they didn't specify a full path of a binary policy file, -- then also try loading any boolean settings and user -- definitions from the active locations. Otherwise, -- they can use genpolbools and genpolusers to build a -- binary policy file that includes any desired settings -- and then apply audit2why -p to the resulting file. -- Errors are non-fatal as such settings are optional. */ -- sepol_debug(0); -- (void)sepol_genbools_policydb(&policydb, -- selinux_booleans_path()); -- (void)sepol_genusers_policydb(&policydb, selinux_users_path()); -- } -- -- /* Initialize the sidtab for subsequent use by sepol_context_to_sid -- and sepol_compute_av_reason. */ -- rc = sepol_sidtab_init(&sidtab); -- if (rc < 0) { -- fprintf(stderr, "%s: unable to init sidtab\n", argv[0]); -- exit(1); -- } -- sepol_set_sidtab(&sidtab); -- -- /* Process the audit messages. */ -- while (getline(&buffer, &len, stdin) > 0) { -- size_t len2 = strlen(buffer); -- -- if (buffer[len2 - 1] == '\n') -- buffer[len2 - 1] = 0; -- lineno++; -- -- p = buffer; -- while (*p && strncmp(p, AVCPREFIX, sizeof(AVCPREFIX) - 1)) -- p++; -- if (!(*p)) -- continue; /* not an avc denial */ -- -- p += sizeof(AVCPREFIX) - 1; -- -- /* Save a copy of the original unmodified buffer. */ -- if (!bufcopy) { -- /* Initial allocation */ -- bufcopy_len = len; -- bufcopy = malloc(len); -- } else if (bufcopy_len < len) { -- /* Grow */ -- bufcopy_len = len; -- bufcopy = realloc(bufcopy, len); -- } -- if (!bufcopy) { -- fprintf(stderr, "%s: OOM on buffer copy\n", argv[0]); -- exit(2); -- } -- memcpy(bufcopy, buffer, len); -- -- /* Remember where the permission list begins, -- and terminate the list. */ -- permstr = p; -- while (*p && *p != '}') -- p++; -- if (!(*p)) { -- fprintf(stderr, -- "Missing closing bracket on line %u, skipping...\n", -- lineno); -- continue; -- } -- *p++ = 0; -- -- /* Get scontext and convert to SID. */ -- while (*p && strncmp(p, SCONTEXT, sizeof(SCONTEXT) - 1)) -- p++; -- if (!(*p)) { -- fprintf(stderr, "Missing %s on line %u, skipping...\n", -- SCONTEXT, lineno); -- continue; -- } -- p += sizeof(SCONTEXT) - 1; -- scon = p; -- while (*p && !isspace(*p)) -- p++; -- if (*p) -- *p++ = 0; -- rc = sepol_context_to_sid(scon, strlen(scon) + 1, &ssid); -- if (rc < 0) { -- fprintf(stderr, -- "Invalid %s%s on line %u, skipping...\n", -- SCONTEXT, scon, lineno); -- continue; -- } -- -- /* Get tcontext and convert to SID. */ -- while (*p && strncmp(p, TCONTEXT, sizeof(TCONTEXT) - 1)) -- p++; -- if (!(*p)) { -- fprintf(stderr, "Missing %s on line %u, skipping...\n", -- TCONTEXT, lineno); -- continue; -- } -- p += sizeof(TCONTEXT) - 1; -- tcon = p; -- while (*p && !isspace(*p)) -- p++; -- if (*p) -- *p++ = 0; -- rc = sepol_context_to_sid(tcon, strlen(tcon) + 1, &tsid); -- if (rc < 0) { -- fprintf(stderr, -- "Invalid %s%s on line %u, skipping...\n", -- TCONTEXT, tcon, lineno); -- continue; -- } -- -- /* Get tclass= and convert to value. */ -- while (*p && strncmp(p, TCLASS, sizeof(TCLASS) - 1)) -- p++; -- if (!(*p)) { -- fprintf(stderr, "Missing %s on line %u, skipping...\n", -- TCLASS, lineno); -- continue; -- } -- p += sizeof(TCLASS) - 1; -- tclassstr = p; -- while (*p && !isspace(*p)) -- p++; -- if (*p) -- *p = 0; -- tclass = string_to_security_class(tclassstr); -- if (!tclass) { -- fprintf(stderr, -- "Invalid %s%s on line %u, skipping...\n", -- TCLASS, tclassstr, lineno); -- continue; -- } -- -- /* Convert the permission list to an AV. */ -- p = permstr; -- av = 0; -- while (*p) { -- while (*p && !isspace(*p)) -- p++; -- if (*p) -- *p++ = 0; -- perm = string_to_av_perm(tclass, permstr); -- if (!perm) { -- fprintf(stderr, -- "Invalid permission %s on line %u, skipping...\n", -- permstr, lineno); -- continue; -- } -- av |= perm; -- permstr = p; -- } -- -- /* Reproduce the computation. */ -- rc = sepol_compute_av_reason(ssid, tsid, tclass, av, &avd, -- &reason); -- if (rc < 0) { -- fprintf(stderr, -- "Error during access vector computation on line %u, skipping...\n", -- lineno); -- continue; -- } -- -- printf("%s\n\tWas caused by:\n", bufcopy); -- -- if (!reason) { -- printf("\t\tUnknown - would be allowed by %s policy\n", -- set_path ? "specified" : "active"); -- printf -- ("\t\tPossible mismatch between this policy and the one under which the audit message was generated.\n"); -- printf -- ("\t\tPossible mismatch between current in-memory boolean settings vs. permanent ones.\n"); -- } -- -- if (reason & SEPOL_COMPUTEAV_TE) { -- printf("\t\tMissing or disabled TE allow rule.\n"); -- printf -- ("\t\tAllow rules may exist but be disabled by boolean settings; check boolean settings.\n"); -- printf -- ("\t\tYou can see the necessary allow rules by running audit2allow with this audit message as input.\n"); -- } -- -- if (reason & SEPOL_COMPUTEAV_CONS) { -- printf("\t\tConstraint violation.\n"); -- printf("\t\tCheck policy/constraints.\n"); -- printf -- ("\t\tTypically, you just need to add a type attribute to the domain to satisfy the constraint.\n"); -- } -- -- if (reason & SEPOL_COMPUTEAV_RBAC) { -- printf("\t\tMissing role allow rule.\n"); -- printf("\t\tAdd allow rule for the role pair.\n"); -- } -- -- printf("\n"); -- } -- free(buffer); -- free(bufcopy); -- exit(0); --} diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/Makefile policycoreutils-2.0.46/Makefile --- nsapolicycoreutils/Makefile 2007-12-19 06:02:52.000000000 -0500 -+++ policycoreutils-2.0.46/Makefile 2008-04-30 14:17:41.297583000 -0400 ++++ policycoreutils-2.0.46/Makefile 2008-05-06 14:31:44.000000000 -0400 @@ -1,4 +1,4 @@ -SUBDIRS = setfiles semanage load_policy newrole run_init secon audit2allow audit2why scripts sestatus semodule_package semodule semodule_link semodule_expand semodule_deps setsebool po +SUBDIRS = setfiles semanage load_policy newrole run_init secon audit2allow audit2why scripts sestatus semodule_package semodule semodule_link semodule_expand semodule_deps setsebool po gui @@ -409,7 +9,7 @@ diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/restorecond/restorecond.c policycoreutils-2.0.46/restorecond/restorecond.c --- nsapolicycoreutils/restorecond/restorecond.c 2007-07-16 14:20:41.000000000 -0400 -+++ policycoreutils-2.0.46/restorecond/restorecond.c 2008-04-30 14:17:41.305576000 -0400 ++++ policycoreutils-2.0.46/restorecond/restorecond.c 2008-05-06 14:31:44.000000000 -0400 @@ -210,9 +210,10 @@ } @@ -436,119 +36,21 @@ diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po } free(scontext); close(fd); -diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/scripts/genhomedircon.8 policycoreutils-2.0.46/scripts/genhomedircon.8 ---- nsapolicycoreutils/scripts/genhomedircon.8 2007-01-17 11:11:34.000000000 -0500 -+++ policycoreutils-2.0.46/scripts/genhomedircon.8 1969-12-31 19:00:00.000000000 -0500 -@@ -1,82 +0,0 @@ --.\" Hey, Emacs! This is an -*- nroff -*- source file. --.\" Copyright (c) 2005 Manoj Srivastava --.\" --.\" This is free documentation; you can redistribute it and/or --.\" modify it under the terms of the GNU General Public License as --.\" published by the Free Software Foundation; either version 2 of --.\" the License, or (at your option) any later version. --.\" --.\" The GNU General Public License's references to "object code" --.\" and "executables" are to be interpreted as the output of any --.\" document formatting or typesetting system, including --.\" intermediate and printed output. --.\" --.\" This manual is distributed in the hope that it will be useful, --.\" but WITHOUT ANY WARRANTY; without even the implied warranty of --.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the --.\" GNU General Public License for more details. --.\" --.\" You should have received a copy of the GNU General Public --.\" License along with this manual; if not, write to the Free --.\" Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, --.\" USA. --.\" --.\" --.TH GENHOMEDIRCON "8" "January 2005" "Security Enhanced Linux" "" --.SH NAME --genhomedircon \- generate SELinux file context configuration entries for user home directories --.SH SYNOPSIS --.B genhomedircon [ -d selinuxdir ] [-n | --nopasswd] [-t selinuxtype ] [-h] -- --.SH OPTIONS --.TP --.B "\-h" --Print a short usage message --.TP --.B "\-d selinuxdir (\-\-directory)" --Directory where selinux files are installed defaults to /etc/selinux --.TP --.B --\-n \-\-nopasswd --Indicates to the utility not to read homedirectories out of the password database. --.TP --\-t selinuxtype (\-\-type) --Indicates the selinux type of this install. Defaults to "targeted". --.SH DESCRIPTION --.PP --This utility is used to generate file context configuration entries for --user home directories based on their --.B prefix --entry in the the --.B semanage user record. --genhomedircon is run when building --the policy. It is also run automaticaly when ever the --.B semanage --utility modifies --.B user --or --.B login --records. --Specifically, we replace HOME_ROOT, HOME_DIR, and ROLE macros in the --.I /etc/selinux/<>/contexts/files/homedir_template --file with generic and user-specific values. HOME_ROOT and HOME_DIR is replaced with each distinct location where login users homedirectories are located. Defaults to /home. ROLE is replaced based on the prefix entry in the --.B user --record. --.PP --genhomedircon searches through all password entires for all "login" user home directories, (as opposed --to system users). Login users are those whose UID is greater than or equal --.I STARTING_UID --(default 500) and whose login shell is not "/sbin/nologin", or --"/bin/false". --.PP --.SH AUTHOR --This manual page was originally written by --.I Manoj Srivastava , --for the Debian GNU/Linux system, based on the comments and the code --in the utility, and then updated by Dan Walsh of Red Hat. The --.B genhomedircon --utility was originally written by --.I Dan Walsh of Red Hat --with some modifications by --.I Tresys Technology, LLC. -- -diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/semanage/semanage policycoreutils-2.0.46/semanage/semanage ---- nsapolicycoreutils/semanage/semanage 2008-04-08 09:37:20.000000000 -0400 -+++ policycoreutils-2.0.46/semanage/semanage 2008-04-30 14:18:15.329826000 -0400 -@@ -129,7 +129,7 @@ - setrans = "" - roles = "" - seuser = "" -- prefix = "" -+ prefix = "user" - heading=1 - value=0 - add = 0 -diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/semanage/semanage.8 policycoreutils-2.0.46/semanage/semanage.8 ---- nsapolicycoreutils/semanage/semanage.8 2008-04-22 16:18:44.000000000 -0400 -+++ policycoreutils-2.0.46/semanage/semanage.8 2008-04-30 14:20:11.178770000 -0400 -@@ -77,7 +74,7 @@ - MLS/MCS Security Range (MLS/MCS Systems only) - .TP - .I \-R, \-\-role --SELinux Roles. You must enclose multiple roles within quotes, separate by spaces. Or specify \-R multiple times. -+SELinux Roles. You must enclose multiple roles within quotes, separate by spaces. Or specify \-R multiple times. If you want to add just one role, you \-R +role with the modify qualifier will add a single role. - .TP - .I \-P, \-\-prefix - SELinux Prefix. Prefix added to home_dir_t and home_t for labeling users home directories. +diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/restorecond/restorecond.init policycoreutils-2.0.46/restorecond/restorecond.init +--- nsapolicycoreutils/restorecond/restorecond.init 2007-07-16 14:20:41.000000000 -0400 ++++ policycoreutils-2.0.46/restorecond/restorecond.init 2008-05-06 14:32:03.000000000 -0400 +@@ -2,7 +2,7 @@ + # + # restorecond: Daemon used to maintain path file context + # +-# chkconfig: 2345 12 87 ++# chkconfig: - 12 87 + # description: restorecond uses inotify to look for creation of new files \ + # listed in the /etc/selinux/restorecond.conf file, and restores the \ + # correct security context. diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/semanage/seobject.py policycoreutils-2.0.46/semanage/seobject.py ---- nsapolicycoreutils/semanage/seobject.py 2008-04-22 16:18:44.000000000 -0400 -+++ policycoreutils-2.0.46/semanage/seobject.py 2008-04-30 14:17:41.350530000 -0400 +--- nsapolicycoreutils/semanage/seobject.py 2008-05-06 14:33:04.000000000 -0400 ++++ policycoreutils-2.0.46/semanage/seobject.py 2008-05-06 14:31:44.000000000 -0400 @@ -464,7 +464,7 @@ def __init__(self, store = ""): semanageRecords.__init__(self, store) diff --git a/policycoreutils.spec b/policycoreutils.spec index cc16605..7c52dd7 100644 --- a/policycoreutils.spec +++ b/policycoreutils.spec @@ -112,6 +112,7 @@ Group: System Environment/Base Requires: policycoreutils = %{version}-%{release} Requires: gnome-python2, pygtk2, pygtk2-libglade, gnome-python2-canvas Requires: usermode, rhpl +Requires: setools-console Requires: python >= 2.4 BuildRequires: desktop-file-utils @@ -191,14 +192,16 @@ if [ "$1" -ge "1" ]; then fi %changelog -* Wed Apr 30 2008 Dan Walsh 2.0.47-1 -- Fix system-config-selinux -- Add first version of booleans lockdown -- Update translations -- Allow semanage to add a single role at a time + +* Wed May 7 2008 Dan Walsh 2.0.47-1 +- Make restorecond not start by default +- Fix polgengui to allow defining of confined roles. +- Add patches from Lubomir Rintel + * Add necessary runtime dependencies on setools-console for -gui + * separate stderr when run seinfo commands - Update to upstream - * Update semanage man page for booleans from Dan Walsh. - * Add further error checking to seobject.py for setting booleans. + * Update semanage man page for booleans from Dan Walsh. + * Add further error checking to seobject.py for setting booleans. * Fri Apr 18 2008 Matthias Clasen - 2.0.46-5 - Uninvasive (ie no string or widget changes) HIG approximations diff --git a/sources b/sources index 3dc47e1..c382154 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ 3fed5cd04ee67c0f86e3cc6825261819 sepolgen-1.0.11.tgz -79328e9f5ac0cbe7dea6bf9de8989b21 policycoreutils-2.0.47.tgz +14e21910c0bee70d2527a52eff6d8928 policycoreutils-2.0.47.tgz