diff --git a/policy-20070501.patch b/policy-20070501.patch index 77479b4..c013ecb 100644 --- a/policy-20070501.patch +++ b/policy-20070501.patch @@ -3373,7 +3373,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cron # fcron wants an instant update of a crontab change for the administrator diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cron.te serefpolicy-2.6.4/policy/modules/services/cron.te --- nsaserefpolicy/policy/modules/services/cron.te 2007-05-07 14:50:57.000000000 -0400 -+++ serefpolicy-2.6.4/policy/modules/services/cron.te 2007-06-19 13:05:07.000000000 -0400 ++++ serefpolicy-2.6.4/policy/modules/services/cron.te 2007-06-19 13:37:21.000000000 -0400 @@ -42,6 +42,9 @@ type cron_log_t; logging_log_file(cron_log_t) @@ -3564,6 +3564,20 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cron mrtg_append_create_logs(system_crond_t) ') +@@ -471,6 +479,13 @@ + sysstat_manage_log(system_crond_t) + ') + ++ optional_policy(` ++ unconfined_dbus_send(crond_t) ++ unconfined_domain(crond_t) ++ unconfined_domain(system_crond_t) ++ userdom_priveleged_home_dir_manager(system_crond_t) ++ ') ++ + ifdef(`TODO',` + dontaudit userdomain system_crond_t:fd use; + diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cups.fc serefpolicy-2.6.4/policy/modules/services/cups.fc --- nsaserefpolicy/policy/modules/services/cups.fc 2007-05-07 14:50:57.000000000 -0400 +++ serefpolicy-2.6.4/policy/modules/services/cups.fc 2007-06-18 10:18:55.000000000 -0400 @@ -8056,7 +8070,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/locall ') diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/logging.if serefpolicy-2.6.4/policy/modules/system/logging.if --- nsaserefpolicy/policy/modules/system/logging.if 2007-05-07 14:51:01.000000000 -0400 -+++ serefpolicy-2.6.4/policy/modules/system/logging.if 2007-06-18 10:18:55.000000000 -0400 ++++ serefpolicy-2.6.4/policy/modules/system/logging.if 2007-06-19 13:33:17.000000000 -0400 @@ -223,6 +223,25 @@ ######################################## diff --git a/selinux-policy.spec b/selinux-policy.spec index 6cdaea1..bb0096a 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 2.6.4 -Release: 18%{?dist} +Release: 19%{?dist} License: GPL Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -360,6 +360,9 @@ semodule -b base.pp -r bootloader -r clock -r dpkg -r fstools -r hotplug -r init %endif %changelog +* Tue Jun 19 2007 Dan Walsh 2.6.4-19 +- Allow crond to domtrans to uncofined_t + * Tue Jun 19 2007 Dan Walsh 2.6.4-18 - Fix udev for xen again - Allow cron to set loginuid