diff --git a/policy-F16.patch b/policy-F16.patch index a9cd17e..a93eff4 100644 --- a/policy-F16.patch +++ b/policy-F16.patch @@ -59543,7 +59543,7 @@ index adea9f9..d5b2d93 100644 init_labeled_script_domtrans($1, fsdaemon_initrc_exec_t) diff --git a/policy/modules/services/smartmon.te b/policy/modules/services/smartmon.te -index 606a098..5e4d100 100644 +index 606a098..2a3ea76 100644 --- a/policy/modules/services/smartmon.te +++ b/policy/modules/services/smartmon.te @@ -35,7 +35,7 @@ ifdef(`enable_mls',` @@ -59555,7 +59555,7 @@ index 606a098..5e4d100 100644 dontaudit fsdaemon_t self:capability sys_tty_config; allow fsdaemon_t self:process { getcap setcap signal_perms }; allow fsdaemon_t self:fifo_file rw_fifo_file_perms; -@@ -73,19 +73,28 @@ files_read_etc_runtime_files(fsdaemon_t) +@@ -73,19 +73,29 @@ files_read_etc_runtime_files(fsdaemon_t) files_read_usr_files(fsdaemon_t) # for config files_read_etc_files(fsdaemon_t) @@ -59574,6 +59574,7 @@ index 606a098..5e4d100 100644 storage_raw_read_removable_device(fsdaemon_t) +storage_read_scsi_generic(fsdaemon_t) +storage_write_scsi_generic(fsdaemon_t) ++storage_dev_filetrans_named_fixed_disk(fsdaemon_t) term_dontaudit_search_ptys(fsdaemon_t) @@ -65127,10 +65128,10 @@ index 0000000..a554011 +') diff --git a/policy/modules/services/wdmd.te b/policy/modules/services/wdmd.te new file mode 100644 -index 0000000..307c99e +index 0000000..45918db --- /dev/null +++ b/policy/modules/services/wdmd.te -@@ -0,0 +1,51 @@ +@@ -0,0 +1,52 @@ +policy_module(wdmd,1.0.0) + +######################################## @@ -65152,7 +65153,8 @@ index 0000000..307c99e +# +# wdmd local policy +# -+allow wdmd_t self:capability { sys_nice ipc_lock }; ++ ++allow wdmd_t self:capability { chown sys_nice ipc_lock }; +allow wdmd_t self:process { setsched signal }; + +allow wdmd_t self:fifo_file rw_fifo_file_perms; diff --git a/selinux-policy.spec b/selinux-policy.spec index bcfba22..cf5aa30 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.10.0 -Release: 82%{?dist} +Release: 83%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -466,6 +466,10 @@ SELinux Reference policy mls base module. %endif %changelog +* Mon Apr 16 2012 Miroslav Grepl 3.10.0-83 +- Allow wdmd chown +- Add storage_dev_filetrans_named_fixed_disk() for fsdaemon + * Fri Apr 6 2012 Miroslav Grepl 3.10.0-82 - zfs now supports xattrs - allow mozilla_plugin_t to read user_home_t socket