diff --git a/booleans-targeted.conf b/booleans-targeted.conf index 8197af1..769689c 100644 --- a/booleans-targeted.conf +++ b/booleans-targeted.conf @@ -10,10 +10,26 @@ allow_execmod = false # allow_execstack = false +# Allow ftpd to read cifs directories. +# +allow_ftpd_use_cifs = false + +# Allow ftpd to read nfs directories. +# +allow_ftpd_use_nfs = false + # Allow ftp servers to modify public filesused for public file transfer services. # allow_ftpd_anon_write = false +# Allow ftpd to read cifs directories. +# +allow_ftpd_use_cifs = false + +# Allow ftpd to read nfs directories. +# +allow_ftpd_use_nfs = false + # Allow gssd to read temp directory. # allow_gssd_read_tmp = true @@ -162,10 +178,6 @@ allow_ssh_keysign = false # allow_user_mysql_connect = false -# Allow system cron jobs to relabel filesystemfor restoring file contexts. -# -cron_can_relabel = false - # Allow pppd to be run for a regular user # pppd_for_user = false diff --git a/selinux-policy.spec b/selinux-policy.spec index a817d33..014cc9f 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -49,10 +49,11 @@ SELinux Base package %doc %{_usr}/share/doc/%{name}-%{version} %dir %{_usr}/share/selinux %dir %{_sysconfdir}/selinux -%dir %{_usr}/share/selinux/devel -%dir %{_usr}/share/selinux/devel/include %ghost %config(noreplace) %{_sysconfdir}/selinux/config %ghost %{_sysconfdir}/sysconfig/selinux + +%dir %{_usr}/share/selinux/devel +%dir %{_usr}/share/selinux/devel/include %{_usr}/share/selinux/devel/include/* %{_usr}/share/selinux/devel/Makefile %{_usr}/share/selinux/devel/policygentool