diff --git a/policy-20070703.patch b/policy-20070703.patch index 7a40466..85a449d 100644 --- a/policy-20070703.patch +++ b/policy-20070703.patch @@ -5941,7 +5941,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/files. # diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesystem.if serefpolicy-3.0.8/policy/modules/kernel/filesystem.if --- nsaserefpolicy/policy/modules/kernel/filesystem.if 2008-06-12 23:37:56.000000000 -0400 -+++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.if 2008-06-22 06:45:05.000000000 -0400 ++++ serefpolicy-3.0.8/policy/modules/kernel/filesystem.if 2008-08-05 09:21:37.000000000 -0400 @@ -271,45 +271,6 @@ ######################################## @@ -6023,7 +6023,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ## ## ## -@@ -1249,6 +1229,106 @@ +@@ -1249,6 +1229,126 @@ ######################################## ## @@ -6127,10 +6127,30 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy + +######################################## +## ++## Search directories ++## on a FUSEFS filesystem. ++## ++## ++## ++## Domain allowed access. ++## ++## ++## ++# ++interface(`fs_search_fusefs_dirs',` ++ gen_require(` ++ type fusefs_t; ++ ') ++ ++ allow $1 fusefs_t:dir search_dir_perms; ++') ++ ++######################################## ++## ## Search inotifyfs filesystem. ## ## -@@ -1625,7 +1705,7 @@ +@@ -1625,7 +1725,7 @@ type nfs_t; ') @@ -6139,7 +6159,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ') ######################################## -@@ -2139,6 +2219,7 @@ +@@ -2139,6 +2239,7 @@ rw_files_pattern($1,nfsd_fs_t,nfsd_fs_t) ') @@ -6147,7 +6167,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ######################################## ## ## Mount a RAM filesystem. -@@ -2214,6 +2295,24 @@ +@@ -2214,6 +2315,24 @@ ######################################## ## @@ -6172,7 +6192,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ## Search directories on a ramfs ## ## -@@ -2276,7 +2375,7 @@ +@@ -2276,7 +2395,7 @@ ## Domain allowed access. ## ## @@ -6181,7 +6201,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy interface(`fs_dontaudit_read_ramfs_files',` gen_require(` type ramfs_t; -@@ -2885,6 +2984,7 @@ +@@ -2885,6 +3004,7 @@ type tmpfs_t; ') @@ -6189,7 +6209,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy dontaudit $1 tmpfs_t:file rw_file_perms; ') -@@ -3206,6 +3306,7 @@ +@@ -3206,6 +3326,7 @@ ') allow $1 filesystem_type:filesystem getattr; @@ -6197,7 +6217,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ') ######################################## -@@ -3322,6 +3423,24 @@ +@@ -3322,6 +3443,24 @@ ######################################## ## @@ -6222,7 +6242,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/filesy ## List all directories with a filesystem type. ## ## -@@ -3533,3 +3652,62 @@ +@@ -3533,3 +3672,62 @@ relabelfrom_blk_files_pattern($1,noxattrfs,noxattrfs) relabelfrom_chr_files_pattern($1,noxattrfs,noxattrfs) ') diff --git a/selinux-policy.spec b/selinux-policy.spec index a624161..993a66a 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.0.8 -Release: 112%{?dist} +Release: 113%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -381,6 +381,10 @@ exit 0 %endif %changelog +* Tue Aug 5 2008 Dan Walsh 3.0.8-113 +- dontaudit semanage config_tty +- Allow samba to share fusefs + * Thu Jul 24 2008 Dan Walsh 3.0.8-112 - Change dhclient to be able to red networkmanager_var_run