diff --git a/policy-20070703.patch b/policy-20070703.patch index 4033445..ff8d232 100644 --- a/policy-20070703.patch +++ b/policy-20070703.patch @@ -4383,7 +4383,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy + diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesystem.te serefpolicy-3.0.8/policy/modules/kernel/filesystem.te --- nsaserefpolicy/policy/modules/kernel/filesystem.te 2007-10-22 13:21:41.000000000 -0400 -+++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.te 2007-10-25 19:46:18.000000000 -0400 ++++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.te 2007-10-25 19:50:39.000000000 -0400 @@ -21,6 +21,7 @@ # Use xattrs for the following filesystem types. @@ -5823,19 +5823,18 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/auto +') diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/automount.te serefpolicy-3.0.8/policy/modules/services/automount.te --- nsaserefpolicy/policy/modules/services/automount.te 2007-10-22 13:21:39.000000000 -0400 -+++ serefpolicy-3.0.8/policy/modules/services/automount.te 2007-10-25 15:32:20.000000000 -0400 -@@ -51,8 +51,8 @@ - files_home_filetrans(automount_t,automount_tmp_t,dir) ++++ serefpolicy-3.0.8/policy/modules/services/automount.te 2007-10-25 19:51:43.000000000 -0400 +@@ -52,7 +52,8 @@ files_root_filetrans(automount_t,automount_tmp_t,dir) --manage_files_pattern(automount_t,automount_var_run_t,automount_var_run_t) + manage_files_pattern(automount_t,automount_var_run_t,automount_var_run_t) -files_pid_filetrans(automount_t,automount_var_run_t,file) +manage_sock_files_pattern(automount_t,automount_var_run_t,automount_var_run_t) +files_pid_filetrans(automount_t,automount_var_run_t,{ file sock_file }) kernel_read_kernel_sysctls(automount_t) kernel_read_irq_sysctls(automount_t) -@@ -69,6 +69,7 @@ +@@ -69,6 +70,7 @@ files_mounton_all_mountpoints(automount_t) files_mount_all_file_type_fs(automount_t) files_unmount_all_file_type_fs(automount_t) @@ -5843,7 +5842,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/auto fs_mount_all_fs(automount_t) fs_unmount_all_fs(automount_t) -@@ -99,6 +100,7 @@ +@@ -99,6 +101,7 @@ dev_read_sysfs(automount_t) # for SSP @@ -5851,7 +5850,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/auto dev_read_urand(automount_t) domain_use_interactive_fds(automount_t) -@@ -125,6 +127,8 @@ +@@ -125,6 +128,8 @@ fs_mount_autofs(automount_t) fs_manage_autofs_symlinks(automount_t) @@ -5860,7 +5859,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/auto term_dontaudit_getattr_pty_dirs(automount_t) libs_use_ld_so(automount_t) -@@ -147,10 +151,6 @@ +@@ -147,10 +152,6 @@ userdom_dontaudit_search_sysadm_home_dirs(automount_t) optional_policy(` @@ -5871,7 +5870,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/auto bind_search_cache(automount_t) ') -@@ -173,6 +173,11 @@ +@@ -173,6 +174,11 @@ ') optional_policy(` diff --git a/selinux-policy.spec b/selinux-policy.spec index 405c6e4..7f4e420 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.0.8 -Release: 34%{?dist} +Release: 35%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -373,6 +373,9 @@ exit 0 %endif %changelog +* Thu Oct 25 2007 Dan Walsh 3.0.8-35 +- Add ecryptfs definition + * Thu Oct 25 2007 Dan Walsh 3.0.8-34 - Allow automounter to create a sock file in /var/run/autofs - Fix corecmd_search_sbin to be corecmd_search_bin