From 048b15b6ea28fd1d1504ac66dc0cf381b881df7c Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Jun 02 2010 15:48:41 +0000 Subject: * Wed Jun 2 2010 Dan Walsh 2.0.82-26 - Fix listing of booleans from audit2allow --- diff --git a/policycoreutils-sepolgen.patch b/policycoreutils-sepolgen.patch index 1ec2d5f..ba329e8 100644 --- a/policycoreutils-sepolgen.patch +++ b/policycoreutils-sepolgen.patch @@ -295,7 +295,7 @@ diff --exclude-from=exclude -N -u -r nsasepolgen/src/sepolgen/matching.py policy return iter(self.children) diff --exclude-from=exclude -N -u -r nsasepolgen/src/sepolgen/policygen.py policycoreutils-2.0.82/sepolgen-1.0.23/src/sepolgen/policygen.py --- nsasepolgen/src/sepolgen/policygen.py 2010-05-19 14:45:51.000000000 -0400 -+++ policycoreutils-2.0.82/sepolgen-1.0.23/src/sepolgen/policygen.py 2010-06-02 09:06:31.000000000 -0400 ++++ policycoreutils-2.0.82/sepolgen-1.0.23/src/sepolgen/policygen.py 2010-06-02 11:45:17.000000000 -0400 @@ -29,6 +29,8 @@ import access import interfaces @@ -328,7 +328,7 @@ diff --exclude-from=exclude -N -u -r nsasepolgen/src/sepolgen/policygen.py polic + + if av.type == audit2why.BOOLEAN: + if len(av.bools) > 1: -+ rule.comment += "#!!!! This avc can be allowed using one of the these booleans:\n# %s\n" % ", ".join(map(lambda x: av.bools[0][0], av.bools)) ++ rule.comment += "#!!!! This avc can be allowed using one of the these booleans:\n# %s\n" % ", ".join(map(lambda x: x[0], av.bools)) + else: + rule.comment += "#!!!! This avc can be allowed using the boolean '%s'\n" % av.bools[0][0] + diff --git a/policycoreutils.spec b/policycoreutils.spec index 27d355b..07ee6e4 100644 --- a/policycoreutils.spec +++ b/policycoreutils.spec @@ -7,7 +7,7 @@ Summary: SELinux policy core utilities Name: policycoreutils Version: 2.0.82 -Release: 25%{?dist} +Release: 26%{?dist} License: GPLv2+ Group: System Environment/Base Source: http://www.nsa.gov/selinux/archives/policycoreutils-%{version}.tgz @@ -313,6 +313,9 @@ fi exit 0 %changelog +* Wed Jun 2 2010 Dan Walsh 2.0.82-26 +- Fix listing of booleans from audit2allow + * Wed Jun 2 2010 Dan Walsh 2.0.82-25 - Fix audit2allow to output if the current policy has avc - Update translations