diff --git a/policy-20071130.patch b/policy-20071130.patch index e4b8695..bbf99a6 100644 --- a/policy-20071130.patch +++ b/policy-20071130.patch @@ -9214,7 +9214,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apac +/etc/rc\.d/init\.d/httpd -- gen_context(system_u:object_r:httpd_script_exec_t,s0) diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apache.if serefpolicy-3.3.1/policy/modules/services/apache.if --- nsaserefpolicy/policy/modules/services/apache.if 2008-02-26 08:23:10.000000000 -0500 -+++ serefpolicy-3.3.1/policy/modules/services/apache.if 2008-05-30 12:18:18.585456000 -0400 ++++ serefpolicy-3.3.1/policy/modules/services/apache.if 2008-05-30 13:36:09.141095000 -0400 @@ -13,21 +13,16 @@ # template(`apache_content_template',` @@ -9685,7 +9685,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apac ') ######################################## -@@ -1088,3 +1055,169 @@ +@@ -1088,3 +1055,142 @@ allow httpd_t $1:process signal; ') @@ -9828,33 +9828,6 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apac +# allow httpd_setsebool_t httpd_bool_t:dir list_dir_perms; +# allow httpd_setsebool_t httpd_bool_t:file rw_file_perms; +') -+ -+######################################## -+## -+## Allow the specified domain to delete -+## apache system content rw files. -+## -+## -+## -+## Domain allowed access. -+## -+## -+## -+# -+# Note that httpd_sys_content_t is found in /var, /etc, /srv and /usr -+interface(`apache_delete_sys_content_rw',` -+ gen_require(` -+ type httpd_sys_content_rw_t; -+ ') -+ -+ files_search_tmp($1) -+ delete_dirs_pattern($1,httpd_sys_content_rw_t,httpd_sys_content_rw_t) -+ delete_files_pattern($1,httpd_sys_content_rw_t,httpd_sys_content_rw_t) -+ delete_lnk_files_pattern($1,httpd_sys_content_rw_t,httpd_sys_content_rw_t) -+ delete_fifo_files_pattern($1,httpd_sys_content_rw_t,httpd_sys_content_rw_t) -+ delete_sock_files_pattern($1,httpd_sys_content_rw_t,httpd_sys_content_rw_t) -+') -+ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/apache.te serefpolicy-3.3.1/policy/modules/services/apache.te --- nsaserefpolicy/policy/modules/services/apache.te 2008-02-26 08:23:10.000000000 -0500 +++ serefpolicy-3.3.1/policy/modules/services/apache.te 2008-05-28 09:06:13.000000000 -0400 diff --git a/selinux-policy.spec b/selinux-policy.spec index 874eee4..c77325e 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.3.1 -Release: 62%{?dist} +Release: 63%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -385,7 +385,7 @@ exit 0 %endif %changelog -* Fri May 30 2008 Dan Walsh 3.3.1-62 +* Fri May 30 2008 Dan Walsh 3.3.1-63 - Allow policykit_resolve to ptrace user processes * Fri May 30 2008 Dan Walsh 3.3.1-61