From bcd871853f5b8bbf677192893b69a5fbc3fd10a8 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Oct 14 2009 13:29:12 +0000 Subject: - Fix labeling for privoxy config files --- diff --git a/policy-F12.patch b/policy-F12.patch index 0c65e8e..c6f4ad6 100644 --- a/policy-F12.patch +++ b/policy-F12.patch @@ -9106,8 +9106,8 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/abrt.if serefpolicy-3.6.32/policy/modules/services/abrt.if --- nsaserefpolicy/policy/modules/services/abrt.if 2009-09-16 09:09:20.000000000 -0400 -+++ serefpolicy-3.6.32/policy/modules/services/abrt.if 2009-09-30 16:12:48.000000000 -0400 -@@ -75,6 +75,27 @@ ++++ serefpolicy-3.6.32/policy/modules/services/abrt.if 2009-10-14 08:42:20.000000000 -0400 +@@ -75,6 +75,46 @@ read_files_pattern($1, abrt_var_log_t, abrt_var_log_t) ') @@ -9132,6 +9132,25 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol + allow abrt_t $1:dbus send_msg; +') + ++######################################## ++## ++## Send and receive messages from ++## abrt over dbus. ++## ++## ++## ++## Domain allowed access. ++## ++## ++# ++interface(`abrt_cache_manage',` ++ gen_require(` ++ type abrt_var_cache_t; ++ ') ++ ++ manage_files_pattern($1, abrt_var_cache_t, abrt_var_cache_t) ++') ++ ##################################### ## ## All of the rules required to administrate @@ -30089,7 +30108,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol +') diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/xen.te serefpolicy-3.6.32/policy/modules/system/xen.te --- nsaserefpolicy/policy/modules/system/xen.te 2009-08-14 16:14:31.000000000 -0400 -+++ serefpolicy-3.6.32/policy/modules/system/xen.te 2009-10-13 16:47:27.000000000 -0400 ++++ serefpolicy-3.6.32/policy/modules/system/xen.te 2009-10-14 08:25:08.000000000 -0400 @@ -6,6 +6,13 @@ # Declarations # @@ -30281,7 +30300,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol # allow xm_t self:capability { dac_override ipc_lock sys_tty_config }; -+allow xm_t self:process { getshed signal }; ++allow xm_t self:process { getsched signal }; # internal communication is often done using fifo and unix sockets. allow xm_t self:fifo_file rw_fifo_file_perms;