From de1db8ee402aaabca0bf06af363c2fb0fdc254d2 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Jan 27 2010 17:37:09 +0000 Subject: - Add label for /sbin/mke4fs --- diff --git a/policy-20100106.patch b/policy-20100106.patch index f0e0de9..ae6f2bf 100644 --- a/policy-20100106.patch +++ b/policy-20100106.patch @@ -2287,12 +2287,12 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/sysnetwork.te serefpolicy-3.6.32/policy/modules/system/sysnetwork.te --- nsaserefpolicy/policy/modules/system/sysnetwork.te 2010-01-18 18:24:22.971530073 +0100 -+++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 18:27:21.416614024 +0100 ++++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 18:34:03.409614110 +0100 @@ -87,6 +87,7 @@ kernel_read_system_state(dhcpc_t) kernel_read_network_state(dhcpc_t) -+kernel_search_network_sysctls(dhcpc_t) ++kernel_search_network_sysctl(dhcpc_t) kernel_read_kernel_sysctls(dhcpc_t) kernel_request_load_module(dhcpc_t) kernel_use_fds(dhcpc_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index 084fb1e..b07deaf 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -459,11 +459,12 @@ exit 0 * Wed Jan 27 2010 Miroslav Grepl 3.6.32-78 - Allow to openvpn to read utmp - Allow xdm to read the video4linux devices -- Add labeling for /etc/openldap/slapd.d directory +- Add label for /etc/openldap/slapd.d directory - Allow tgtd to manage fixed disk device nodes - Allow chsh to execute nxserver - Allow abrt_helper to send system log messages -- Add labeling for /etc/zabbix/web directory +- Add label for /etc/zabbix/web directory +- Add label for /sbin/mke4fs * Mon Jan 25 2010 Miroslav Grepl 3.6.32-77 - Allow xenstored to manage files on on a XENFS filesystem