From a27cfc8cb211e3ebb64e3446d82b2d560128d7b0 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: May 12 2008 18:11:54 +0000 Subject: Update from laptop --- diff --git a/policy-20071130.patch b/policy-20071130.patch index 2b4edba..e621324 100644 --- a/policy-20071130.patch +++ b/policy-20071130.patch @@ -30283,8 +30283,8 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.f +/usr/bin/qemu-kvm -- gen_context(system_u:object_r:qemu_exec_t,s0) diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.if serefpolicy-3.3.1/policy/modules/system/qemu.if --- nsaserefpolicy/policy/modules/system/qemu.if 1969-12-31 19:00:00.000000000 -0500 -+++ serefpolicy-3.3.1/policy/modules/system/qemu.if 2008-05-09 09:37:51.000000000 -0400 -@@ -0,0 +1,305 @@ ++++ serefpolicy-3.3.1/policy/modules/system/qemu.if 2008-05-09 11:09:28.000000000 -0400 +@@ -0,0 +1,312 @@ + +## policy for qemu + @@ -30523,6 +30523,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.i + type $1_tmp_t; + files_tmp_file($1_tmp_t) + ++ type $1_tmpfs_t; ++ files_tmpfs_file($1_tmpfs_t) ++ + domain_use_interactive_fds($1_t) + + allow $1_t self:capability { dac_read_search dac_override }; @@ -30559,7 +30562,11 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/qemu.i + + fs_list_inotifyfs($1_t) + fs_rw_anon_inodefs_files($1_t) -+ fs_rw_tmpfs_files($1_t) ++ ++ manage_dirs_pattern($1_t,$1_tmpfs_t,$1_tmpfs_t) ++ manage_files_pattern($1_t,$1_tmpfs_t,$1_tmpfs_t) ++ manage_lnk_files_pattern($1_t,$1_tmpfs_t,$1_tmpfs_t) ++ fs_tmpfs_filetrans($1_t,$1_tmpfs_t,{ dir file lnk_file }) + + storage_raw_write_removable_device($1_t) + storage_raw_read_removable_device($1_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index 317b85f..a4aa932 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.3.1 -Release: 49%{?dist} +Release: 50%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -385,6 +385,9 @@ exit 0 %endif %changelog +* Mon May 12 2008 Dan Walsh 3.3.1-50 +- Add sys_nice for audispd + * Fri May 9 2008 Dan Walsh 3.3.1-49 - Fixes for policykit - Allow dovecot getattr all filesystem directories