From 6f5a3bc6a79042a3ded316b80bc11021401b66fc Mon Sep 17 00:00:00 2001
From: Daniel J Walsh <dwalsh@fedoraproject.org>
Date: Dec 08 2005 21:56:50 +0000
Subject: - Update to upstream

- Turn off boolean allow_execstack

---

diff --git a/.cvsignore b/.cvsignore
index 8cd1879..f8e1dc7 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -15,3 +15,4 @@ noarch
 nsadiff
 nsaserefpolicy
 serefpolicy-2.1.0.tgz
+serefpolicy-2.1.1.tgz
diff --git a/booleans-targeted.conf b/booleans-targeted.conf
index f35a0db..7b6dd0f 100644
--- a/booleans-targeted.conf
+++ b/booleans-targeted.conf
@@ -8,7 +8,7 @@ allow_execmod = true
 
 # Allow making the stack executable via mprotect.Also requires allow_execmem.
 # 
-allow_execstack = true
+allow_execstack = false
 
 # Allow ftp servers to modify public filesused for public file transfer services.
 # 
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 2c026c5..fc92d90 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -8,12 +8,12 @@
 %define CHECKPOLICYVER 1.27.17-7
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 2.1.0
-Release: 3
+Version: 2.1.1
+Release: 1
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
-patch: policy-20051114.patch
+patch: policy-20051208.patch
 Source1: modules-%{polname1}.conf
 Source2: booleans-%{polname1}.conf
 Source3: seusers-%{polname1}
@@ -236,6 +236,10 @@ SELinux Reference policy %{polname3} base module.
 
 
 %changelog
+* Thu Dec  8 2005 Dan Walsh <dwalsh@redhat.com> 2.1.1-1
+- Update to upstream
+- Turn off boolean allow_execstack
+
 * Thu Dec  8 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-3
 - Change setrans-mls to use new libsetrans
 - Add default_context rule for xdm
diff --git a/sources b/sources
index 08e3ffb..76806c5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-430d1255d08765f88cc356089311a390  serefpolicy-2.1.0.tgz
+616555f125d058a5b53683a8a5059247  serefpolicy-2.1.1.tgz