From a9d960b0640eaab518433fbe128b114396c85873 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: May 14 2014 19:53:42 +0000 Subject: * Wed May 14 2014 Miroslav Grepl 3.12.1-74.27 - Add missing dyntransition for sandbox_x_domain --- diff --git a/policy-f19-contrib.patch b/policy-f19-contrib.patch index 79ba43c..daa3ee0 100644 --- a/policy-f19-contrib.patch +++ b/policy-f19-contrib.patch @@ -78264,10 +78264,10 @@ index 0000000..6caef63 +/usr/share/sandbox/start -- gen_context(system_u:object_r:sandbox_exec_t,s0) diff --git a/sandboxX.if b/sandboxX.if new file mode 100644 -index 0000000..5da5bff +index 0000000..75bb4c4 --- /dev/null +++ b/sandboxX.if -@@ -0,0 +1,392 @@ +@@ -0,0 +1,393 @@ + +## policy for sandboxX + @@ -78296,6 +78296,7 @@ index 0000000..5da5bff + ') + + allow $1 sandbox_x_domain:process { signal_perms transition }; ++ allow $1 sandbox_x_domain:process dyntransition; + dontaudit $1 sandbox_x_domain:process { noatsecure siginh rlimitinh }; + allow sandbox_x_domain $1:process { sigchld signull }; + allow { sandbox_x_domain sandbox_xserver_t } $1:fd use; diff --git a/selinux-policy.spec b/selinux-policy.spec index f2f6ca7..29c7233 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.12.1 -Release: 74.26%{?dist} +Release: 74.27%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -542,7 +542,10 @@ SELinux Reference policy mls base module. %endif %changelog -* Wed May 02 2014 Miroslav Grepl 3.12.1-74.26 +* Wed May 14 2014 Miroslav Grepl 3.12.1-74.27 +- Add missing dyntransition for sandbox_x_domain + +* Fri May 19 2014 Miroslav Grepl 3.12.1-74.26 - Update sandbox_transition() to call sandbox_dyntrasition(). * Fri May 02 2014 Lukas Vrabec 3.12.1-74.25