diff --git a/booleans-targeted.conf b/booleans-targeted.conf index 3fd153c..413c8e8 100644 --- a/booleans-targeted.conf +++ b/booleans-targeted.conf @@ -1,5 +1,5 @@ # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. -# +nnn# allow_execmem = false # Allow making a modified private filemapping executable (text relocation). @@ -214,3 +214,6 @@ user_ttyfile_stat = false # write_untrusted_content = false +# Allow all domains to talk to ttys +# +allow_domains_use_tty = false diff --git a/selinux-policy.spec b/selinux-policy.spec index 2970fdb..71dd2fd 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -16,7 +16,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 2.3.13 -Release: 4 +Release: 5 License: GPL Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -348,6 +348,10 @@ semodule -b base.pp -r bootloader -r clock -r dpkg -r fstools -r hotplug -r init %endif %changelog +* Wed Sep 13 2006 Dan Walsh 2.3.13-5 +- Add tty access to all domains boolean +- Fix gnome-pty-helper context for ia64 + * Mon Sep 11 2006 Dan Walsh 2.3.13-4 - Fixed typealias of firstboot_rw_t