From 735959f4ba80fe27816b4b5b80840d003c9135be Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Dec 31 2007 21:47:52 +0000 Subject: - Fix specification for clamav and clamd log files --- diff --git a/policy-20070703.patch b/policy-20070703.patch index edd4688..5751638 100644 --- a/policy-20070703.patch +++ b/policy-20070703.patch @@ -10372,7 +10372,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/mysq +') diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/mysql.te serefpolicy-3.0.8/policy/modules/services/mysql.te --- nsaserefpolicy/policy/modules/services/mysql.te 2007-10-22 13:21:39.000000000 -0400 -+++ serefpolicy-3.0.8/policy/modules/services/mysql.te 2007-12-31 06:59:24.000000000 -0500 ++++ serefpolicy-3.0.8/policy/modules/services/mysql.te 2007-12-31 16:46:03.000000000 -0500 @@ -25,6 +25,9 @@ type mysqld_tmp_t; files_tmp_file(mysqld_tmp_t) @@ -10389,7 +10389,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/mysq allow mysqld_t self:process { setsched getsched setrlimit signal_perms rlimitinh }; -allow mysqld_t self:fifo_file { read write }; +allow mysqld_t self:fifo_file rw_fifo_file_perms; -+allow mysqld_t self:shm create_shm_file_perms; ++allow mysqld_t self:shm create_shm_perms; allow mysqld_t self:unix_stream_socket create_stream_socket_perms; allow mysqld_t self:tcp_socket create_stream_socket_perms; allow mysqld_t self:udp_socket create_socket_perms; diff --git a/selinux-policy.spec b/selinux-policy.spec index e4391cd..e42082a 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.0.8 -Release: 72%{?dist} +Release: 73%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -382,8 +382,12 @@ exit 0 %endif %changelog +* Mon Dec 31 2007 Dan Walsh 3.0.8-73 +- Fix specification for clamav and clamd log files + * Sat Dec 22 2007 Dan Walsh 3.0.8-72 - Fixes to make confined mozilla work better +- Allow procmail to transition to spamd * Fri Dec 21 2007 Dan Walsh 3.0.8-71 - add file context for nspluginwrapper