From 0f8e573932880785a777a8ca10f892d0054b4318 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@fedoraproject.org>
Date: May 11 2010 14:17:03 +0000
Subject: - Allow cups-pdf to search automount filesystem


---

diff --git a/policy-20090521.patch b/policy-20090521.patch
index 7901bec..36002ab 100644
--- a/policy-20090521.patch
+++ b/policy-20090521.patch
@@ -2756,7 +2756,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
  
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cups.te serefpolicy-3.6.12/policy/modules/services/cups.te
 --- nsaserefpolicy/policy/modules/services/cups.te	2010-01-19 12:51:12.032607717 +0100
-+++ serefpolicy-3.6.12/policy/modules/services/cups.te	2010-01-19 12:51:30.764608868 +0100
++++ serefpolicy-3.6.12/policy/modules/services/cups.te	2010-05-11 15:36:02.204873792 +0200
 @@ -59,12 +59,13 @@
  init_daemon_domain(hplip_t, hplip_exec_t)
  # For CUPS to run as a backend
@@ -2822,16 +2822,17 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
  
  # for python
  corecmd_exec_bin(hplip_t)
-@@ -733,6 +742,8 @@
+@@ -733,6 +742,9 @@
  files_read_etc_files(cups_pdf_t)
  files_read_usr_files(cups_pdf_t)
  
 +fs_rw_anon_inodefs_files(cups_pdf_t)  
++fs_search_auto_mountpoints(cups_pdf_t)
 +
  kernel_read_system_state(cups_pdf_t)
  
  auth_use_nsswitch(cups_pdf_t)
-@@ -746,6 +757,7 @@
+@@ -746,6 +758,7 @@
  manage_dirs_pattern(cups_pdf_t, cups_pdf_tmp_t, cups_pdf_tmp_t)
  files_tmp_filetrans(cups_pdf_t, cups_pdf_tmp_t, { file dir })
  
@@ -2839,7 +2840,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
  userdom_home_filetrans_user_home_dir(cups_pdf_t)
  userdom_manage_user_home_content_dirs(cups_pdf_t)
  userdom_manage_user_home_content_files(cups_pdf_t)
-@@ -765,3 +777,10 @@
+@@ -765,3 +778,10 @@
  manage_files_pattern(cups_pdf_t, cupsd_log_t, cupsd_log_t)
  miscfiles_read_fonts(cups_pdf_t)
  
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4aaf4b3..2514315 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -20,7 +20,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.6.12
-Release: 98%{?dist}
+Release: 99%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -442,6 +442,9 @@ exit 0
 %endif
 
 %changelog
+* Tue May 11 2010 Miroslav Grepl <mgrepl@redhat.com> 3.6.12-99
+- Allow cups-pdf to search automount filesystem
+
 * Tue Apr 27 2010 Miroslav Grepl <mgrepl@redhat.com> 3.6.12-98
 - Fixes for lirc policy