From 4d8575a0971193e45a8b3d6189cbb2e6066ae3be Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Jan 27 2010 17:22:10 +0000 Subject: - Add label for /sbin/mke4fs --- diff --git a/policy-20100106.patch b/policy-20100106.patch index fade903..852f195 100644 --- a/policy-20100106.patch +++ b/policy-20100106.patch @@ -2048,6 +2048,17 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol ') optional_policy(` +diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/fstools.fc serefpolicy-3.6.32/policy/modules/system/fstools.fc +--- nsaserefpolicy/policy/modules/system/fstools.fc 2010-01-18 18:24:22.930540014 +0100 ++++ serefpolicy-3.6.32/policy/modules/system/fstools.fc 2010-01-27 18:13:10.349614395 +0100 +@@ -18,6 +18,7 @@ + /sbin/make_reiser4 -- gen_context(system_u:object_r:fsadm_exec_t,s0) + /sbin/mkdosfs -- gen_context(system_u:object_r:fsadm_exec_t,s0) + /sbin/mke2fs -- gen_context(system_u:object_r:fsadm_exec_t,s0) ++/sbin/mke4fs -- gen_context(system_u:object_r:fsadm_exec_t,s0) + /sbin/mkfs.* -- gen_context(system_u:object_r:fsadm_exec_t,s0) + /sbin/mkraid -- gen_context(system_u:object_r:fsadm_exec_t,s0) + /sbin/mkreiserfs -- gen_context(system_u:object_r:fsadm_exec_t,s0) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/hotplug.te serefpolicy-3.6.32/policy/modules/system/hotplug.te --- nsaserefpolicy/policy/modules/system/hotplug.te 2009-09-16 16:01:19.000000000 +0200 +++ serefpolicy-3.6.32/policy/modules/system/hotplug.te 2010-01-18 18:27:02.780542727 +0100 @@ -2276,12 +2287,12 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/sysnetwork.te serefpolicy-3.6.32/policy/modules/system/sysnetwork.te --- nsaserefpolicy/policy/modules/system/sysnetwork.te 2010-01-18 18:24:22.971530073 +0100 -+++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 17:25:30.275614148 +0100 ++++ serefpolicy-3.6.32/policy/modules/system/sysnetwork.te 2010-01-27 18:16:01.598614667 +0100 @@ -87,6 +87,7 @@ kernel_read_system_state(dhcpc_t) kernel_read_network_state(dhcpc_t) -+kernel_read_net_sysctls(dhcpc_t) ++kernel_read_search_sysctls(dhcpc_t) kernel_read_kernel_sysctls(dhcpc_t) kernel_request_load_module(dhcpc_t) kernel_use_fds(dhcpc_t)