diff --git a/policy-20070703.patch b/policy-20070703.patch index 9c52657..bf97602 100644 --- a/policy-20070703.patch +++ b/policy-20070703.patch @@ -15080,7 +15080,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc. ## diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc.te serefpolicy-3.0.8/policy/modules/services/rpc.te --- nsaserefpolicy/policy/modules/services/rpc.te 2007-10-22 13:21:39.000000000 -0400 -+++ serefpolicy-3.0.8/policy/modules/services/rpc.te 2008-04-04 16:11:03.000000000 -0400 ++++ serefpolicy-3.0.8/policy/modules/services/rpc.te 2008-04-17 13:41:16.000000000 -0400 @@ -59,10 +59,14 @@ manage_files_pattern(rpcd_t,rpcd_var_run_t,rpcd_var_run_t) files_pid_filetrans(rpcd_t,rpcd_var_run_t,file) @@ -15136,7 +15136,15 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc. corenet_tcp_bind_all_rpc_ports(nfsd_t) corenet_udp_bind_all_rpc_ports(nfsd_t) -@@ -123,6 +143,7 @@ +@@ -102,6 +122,7 @@ + fs_search_nfsd_fs(nfsd_t) + fs_getattr_all_fs(nfsd_t) + fs_rw_nfsd_fs(nfsd_t) ++fs_search_all(nfsd_t) + + term_use_controlling_term(nfsd_t) + +@@ -123,6 +144,7 @@ tunable_policy(`nfs_export_all_rw',` fs_read_noxattr_fs_files(nfsd_t) auth_manage_all_files_except_shadow(nfsd_t) @@ -15144,7 +15152,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc. ') tunable_policy(`nfs_export_all_ro',` -@@ -143,6 +164,9 @@ +@@ -143,6 +165,9 @@ manage_files_pattern(gssd_t,gssd_tmp_t,gssd_tmp_t) files_tmp_filetrans(gssd_t, gssd_tmp_t, { file dir }) @@ -15154,7 +15162,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rpc. kernel_read_network_state(gssd_t) kernel_read_network_state_symlinks(gssd_t) kernel_search_network_sysctl(gssd_t) -@@ -158,6 +182,9 @@ +@@ -158,6 +183,9 @@ miscfiles_read_certs(gssd_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index c193d04..334b847 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.0.8 -Release: 100%{?dist} +Release: 101%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -381,6 +381,9 @@ exit 0 %endif %changelog +* Thu Apr 17 2008 Dan Walsh 3.0.8-101 +- Allow nfs to look at all filesystem directories + * Tue Apr 15 2008 Dan Walsh 3.0.8-100 - Dontaudit validating context when using kerberos libraries - Allow postfix_virtual write access to postfix_private sockets