diff --git a/policy-20090521.patch b/policy-20090521.patch index 1a1b0d4..48eb904 100644 --- a/policy-20090521.patch +++ b/policy-20090521.patch @@ -2603,8 +2603,8 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol dev_read_urand(fetchmail_t) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/fprintd.te serefpolicy-3.6.12/policy/modules/services/fprintd.te --- nsaserefpolicy/policy/modules/services/fprintd.te 2009-06-25 10:19:44.000000000 +0200 -+++ serefpolicy-3.6.12/policy/modules/services/fprintd.te 2009-06-25 10:21:01.000000000 +0200 -@@ -22,12 +22,15 @@ ++++ serefpolicy-3.6.12/policy/modules/services/fprintd.te 2009-08-13 18:07:07.000000000 +0200 +@@ -22,12 +22,17 @@ corecmd_search_bin(fprintd_t) @@ -2612,6 +2612,8 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol dev_rw_generic_usb_dev(fprintd_t) dev_read_sysfs(fprintd_t) ++fs_getattr_all_fs(fprintd_t) ++ files_read_etc_files(fprintd_t) files_read_usr_files(fprintd_t) @@ -2620,7 +2622,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol auth_use_nsswitch(fprintd_t) miscfiles_read_localization(fprintd_t) -@@ -40,9 +43,10 @@ +@@ -40,9 +45,10 @@ ') optional_policy(` @@ -5055,7 +5057,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/udev.te serefpolicy-3.6.12/policy/modules/system/udev.te --- nsaserefpolicy/policy/modules/system/udev.te 2009-06-25 10:19:44.000000000 +0200 -+++ serefpolicy-3.6.12/policy/modules/system/udev.te 2009-07-30 17:17:23.000000000 +0200 ++++ serefpolicy-3.6.12/policy/modules/system/udev.te 2009-08-13 18:24:35.000000000 +0200 @@ -67,6 +67,7 @@ manage_dirs_pattern(udev_t,udev_var_run_t,udev_var_run_t) @@ -5083,6 +5085,17 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol brctl_domtrans(udev_t) ') +@@ -258,6 +264,10 @@ + ') + + optional_policy(` ++ unconfined_signal(udev_t) ++') ++ ++optional_policy(` + kernel_write_xen_state(udev_t) + kernel_read_xen_state(udev_t) + xen_manage_log(udev_t) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdomain.if serefpolicy-3.6.12/policy/modules/system/userdomain.if --- nsaserefpolicy/policy/modules/system/userdomain.if 2009-06-25 10:19:44.000000000 +0200 +++ serefpolicy-3.6.12/policy/modules/system/userdomain.if 2009-08-13 09:03:28.000000000 +0200 diff --git a/selinux-policy.spec b/selinux-policy.spec index 3d7cbcb..509136f 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.6.12 -Release: 76%{?dist} +Release: 77%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -475,6 +475,9 @@ exit 0 %endif %changelog +* Thu Aug 13 2009 Miroslav Grepl 3.6.12-77 +- Allow fprintd_t to getattr of all persistent filesystems + * Thu Aug 13 2009 Miroslav Grepl 3.6.12-76 - Allow hald_t to list net_conf_t directory