From 29360aadb12850ed3121d2ef4f22af4e3a824c4e Mon Sep 17 00:00:00 2001
From: Daniel J Walsh <dwalsh@fedoraproject.org>
Date: Dec 13 2007 15:59:13 +0000
Subject: - Fix labeling on /var/spool/cups


---

diff --git a/policy-20070501.patch b/policy-20070501.patch
index 364daef..8c31f84 100644
--- a/policy-20070501.patch
+++ b/policy-20070501.patch
@@ -6868,7 +6868,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/exim
 --- nsaserefpolicy/policy/modules/services/exim.fc	1969-12-31 19:00:00.000000000 -0500
 +++ serefpolicy-2.6.4/policy/modules/services/exim.fc	2007-10-05 09:28:27.000000000 -0400
 @@ -0,0 +1,16 @@
-+# $Id: policy-20070501.patch,v 1.82 2007/12/12 18:17:48 dwalsh Exp $
++# $Id: policy-20070501.patch,v 1.83 2007/12/13 15:59:13 dwalsh Exp $
 +# Draft SELinux refpolicy module for the Exim MTA
 +# 
 +# Devin Carraway <selinux/at/devin.com>
@@ -7049,7 +7049,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/exim
 --- nsaserefpolicy/policy/modules/services/exim.te	1969-12-31 19:00:00.000000000 -0500
 +++ serefpolicy-2.6.4/policy/modules/services/exim.te	2007-10-30 16:46:45.000000000 -0400
 @@ -0,0 +1,231 @@
-+# $Id: policy-20070501.patch,v 1.82 2007/12/12 18:17:48 dwalsh Exp $
++# $Id: policy-20070501.patch,v 1.83 2007/12/13 15:59:13 dwalsh Exp $
 +# Draft SELinux refpolicy module for the Exim MTA
 +# 
 +# Devin Carraway <selinux/at/devin.com>
@@ -7847,6 +7847,14 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/ktal
 -	nscd_socket_use(ktalkd_t)
 -')
 +term_search_ptys(ktalkd_t)
+diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/lpd.fc serefpolicy-2.6.4/policy/modules/services/lpd.fc
+--- nsaserefpolicy/policy/modules/services/lpd.fc	2007-05-07 14:51:01.000000000 -0400
++++ serefpolicy-2.6.4/policy/modules/services/lpd.fc	2007-12-13 10:53:42.000000000 -0500
+@@ -29,3 +29,4 @@
+ #
+ /var/spool/lpd(/.*)?		gen_context(system_u:object_r:print_spool_t,s0)
+ /var/run/lprng(/.*)?		gen_context(system_u:object_r:lpd_var_run_t,s0)
++/var/spool/cups(/.*)?		gen_context(system_u:object_r:print_spool_t,mls_systemhigh)
 diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/lpd.if serefpolicy-2.6.4/policy/modules/services/lpd.if
 --- nsaserefpolicy/policy/modules/services/lpd.if	2007-05-07 14:50:57.000000000 -0400
 +++ serefpolicy-2.6.4/policy/modules/services/lpd.if	2007-08-07 09:42:35.000000000 -0400
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 5868d63..32ffba3 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 2.6.4
-Release: 62%{?dist}
+Release: 63%{?dist}
 License: GPL
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -363,6 +363,9 @@ semodule -b base.pp -r bootloader -r clock -r dpkg -r fstools -r hotplug -r init
 %endif
 
 %changelog
+* Thu Dec 13 2007 Dan Walsh <dwalsh@redhat.com> 2.6.4-63
+- Fix labeling on /var/spool/cups
+
 * Wed Dec 12 2007 Dan Walsh <dwalsh@redhat.com> 2.6.4-62
 - Fix labeling on * /usr/lib64/cups/backend/hp.*
 - Upgrade to Fedora 8 cups policy