diff --git a/policy-F15.patch b/policy-F15.patch index ff1ccef..8788a0e 100644 --- a/policy-F15.patch +++ b/policy-F15.patch @@ -5749,7 +5749,7 @@ index f63c4c2..bf59895 100644 policykit_dbus_chat(kdumpgui_t) ') diff --git a/policy/modules/apps/livecd.if b/policy/modules/apps/livecd.if -index 12b772f..1088fe0 100644 +index 12b772f..301c3a6 100644 --- a/policy/modules/apps/livecd.if +++ b/policy/modules/apps/livecd.if @@ -41,6 +41,9 @@ interface(`livecd_run',` @@ -5758,7 +5758,7 @@ index 12b772f..1088fe0 100644 role $2 types livecd_t; + role_transition $2 livecd_exec_t system_r; + -+ seutil_run_setfiles_mac(livecd_t, $2) ++ seutil_run_setfiles_mac(livecd_t, system_r) optional_policy(` mount_run(livecd_t, $2) @@ -15561,6 +15561,18 @@ index 786449a..e8ebc76 100644 + mls_trusted_object($1) +') + +diff --git a/policy/modules/kernel/selinux.te b/policy/modules/kernel/selinux.te +index 01a472d..7aabcac 100644 +--- a/policy/modules/kernel/selinux.te ++++ b/policy/modules/kernel/selinux.te +@@ -18,6 +18,7 @@ attribute selinux_unconfined_type; + # + type security_t, boolean_type; + fs_type(security_t) ++files_mountpoint(security_t) + mls_trusted_object(security_t) + sid security gen_context(system_u:object_r:security_t,mls_systemhigh) + genfscon selinuxfs / gen_context(system_u:object_r:security_t,s0) diff --git a/policy/modules/kernel/storage.fc b/policy/modules/kernel/storage.fc index a9b8982..57c4a6a 100644 --- a/policy/modules/kernel/storage.fc diff --git a/selinux-policy.spec b/selinux-policy.spec index ea276e2..3501e81 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -21,7 +21,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.9.16 -Release: 52%{?dist} +Release: 53%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -471,6 +471,9 @@ exit 0 %endif %changelog +* Fri Mar 16 2012 Miroslav Grepl 3.9.16-53 +- More fixes to make livecd working + * Tue Mar 13 2012 Miroslav Grepl 3.9.16-52 - Fix livecd_run() interface - Add labeling for /var/spool/postfix/dev/log