diff --git a/policy-20090521.patch b/policy-20090521.patch index a330457..82a11bc 100644 --- a/policy-20090521.patch +++ b/policy-20090521.patch @@ -227,6 +227,18 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol /usr/X11R6/lib(64)?/X11/xkb/xkbcomp -- gen_context(system_u:object_r:bin_t,s0) +diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/corenetwork.te.in serefpolicy-3.6.12/policy/modules/kernel/corenetwork.te.in +--- nsaserefpolicy/policy/modules/kernel/corenetwork.te.in 2009-05-21 08:27:59.000000000 -0400 ++++ serefpolicy-3.6.12/policy/modules/kernel/corenetwork.te.in 2009-06-19 07:01:37.000000000 -0400 +@@ -134,7 +134,7 @@ + network_port(ldap, tcp,389,s0, udp,389,s0, tcp,636,s0, udp,636,s0, tcp,3268,s0) + type lrrd_port_t, port_type; dnl network_port(lrrd_port_t) # no defined portcon + network_port(lmtp, tcp,24,s0, udp,24,s0) +-network_port(mail, tcp,2000,s0) ++network_port(mail, tcp,2000,s0, tcp,3905,s0) + network_port(memcache, tcp,11211,s0, udp,11211,s0) + network_port(mmcc, tcp,5050,s0, udp,5050,s0) + network_port(monopd, tcp,1234,s0) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.fc serefpolicy-3.6.12/policy/modules/kernel/devices.fc --- nsaserefpolicy/policy/modules/kernel/devices.fc 2009-05-21 08:27:59.000000000 -0400 +++ serefpolicy-3.6.12/policy/modules/kernel/devices.fc 2009-06-08 09:12:26.000000000 -0400 @@ -752,6 +764,20 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol dev_rw_generic_usb_dev(devicekit_power_t) dev_rw_netcontrol(devicekit_power_t) dev_rw_sysfs(devicekit_power_t) +diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/dnsmasq.te serefpolicy-3.6.12/policy/modules/services/dnsmasq.te +--- nsaserefpolicy/policy/modules/services/dnsmasq.te 2009-05-21 08:27:59.000000000 -0400 ++++ serefpolicy-3.6.12/policy/modules/services/dnsmasq.te 2009-06-19 07:12:28.000000000 -0400 +@@ -87,6 +88,10 @@ + ') + + optional_policy(` ++ dbus_system_bus_client(dnsmasq_t) ++') ++ ++optional_policy(` + tftp_read_content(dnsmasq_t) + ') + diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/fprintd.te serefpolicy-3.6.12/policy/modules/services/fprintd.te --- nsaserefpolicy/policy/modules/services/fprintd.te 2009-05-21 08:27:59.000000000 -0400 +++ serefpolicy-3.6.12/policy/modules/services/fprintd.te 2009-06-17 09:18:27.000000000 -0400 diff --git a/selinux-policy.spec b/selinux-policy.spec index 62d1859..b377441 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.6.12 -Release: 53%{?dist} +Release: 54%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -475,8 +475,12 @@ exit 0 %endif %changelog +* Fri Jun 19 2009 Dan Walsh 3.6.12-54 +- Add boolean to allow svirt to use usb devices + * Tue Jun 15 2009 Dan Walsh 3.6.12-53 - Allow ftp to create xferlog_t files in an xferlog_t directory +- Fix svirt separation on chr_file, and blk_file * Mon Jun 15 2009 Dan Walsh 3.6.12-52 - Allow kpropd to create krb5_lock_t files in krb5_conf_t directory