diff --git a/policy-20090521.patch b/policy-20090521.patch index 35b1831..e9d8a49 100644 --- a/policy-20090521.patch +++ b/policy-20090521.patch @@ -2469,7 +2469,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/clamav.te serefpolicy-3.6.12/policy/modules/services/clamav.te --- nsaserefpolicy/policy/modules/services/clamav.te 2009-06-25 10:19:44.000000000 +0200 -+++ serefpolicy-3.6.12/policy/modules/services/clamav.te 2009-07-13 11:33:25.000000000 +0200 ++++ serefpolicy-3.6.12/policy/modules/services/clamav.te 2009-12-09 15:28:27.000000000 +0100 @@ -106,6 +106,8 @@ corenet_tcp_bind_generic_port(clamd_t) corenet_tcp_connect_generic_port(clamd_t) @@ -2488,6 +2488,15 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol dev_read_rand(freshclam_t) dev_read_urand(freshclam_t) +@@ -187,6 +191,8 @@ + files_read_etc_files(freshclam_t) + files_read_etc_runtime_files(freshclam_t) + ++logging_send_syslog_msg(freshclam_t) ++ + miscfiles_read_localization(freshclam_t) + + sysnet_dns_name_resolve(freshclam_t) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cobbler.fc serefpolicy-3.6.12/policy/modules/services/cobbler.fc --- nsaserefpolicy/policy/modules/services/cobbler.fc 1970-01-01 01:00:00.000000000 +0100 +++ serefpolicy-3.6.12/policy/modules/services/cobbler.fc 2009-09-30 09:41:34.000000000 +0200 @@ -3570,6 +3579,30 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol dev_list_sysfs(mysqld_safe_t) +diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/networkmanager.fc serefpolicy-3.6.12/policy/modules/services/networkmanager.fc +--- nsaserefpolicy/policy/modules/services/networkmanager.fc 2009-06-25 10:19:44.000000000 +0200 ++++ serefpolicy-3.6.12/policy/modules/services/networkmanager.fc 2009-12-09 16:25:03.000000000 +0100 +@@ -12,6 +12,7 @@ + /usr/sbin/nm-system-settings -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) + + /var/lib/wicd(/.*)? gen_context(system_u:object_r:NetworkManager_var_lib_t, s0) ++/var/lib/NetworkManager(/.*)? gen_context(system_u:object_r:NetworkManager_var_lib_t, s0) + /etc/NetworkManager/system-connections(/.*)? gen_context(system_u:object_r:NetworkManager_var_lib_t, s0) + + /var/log/wicd(/.*)? gen_context(system_u:object_r:NetworkManager_log_t,s0) +diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/networkmanager.te serefpolicy-3.6.12/policy/modules/services/networkmanager.te +--- nsaserefpolicy/policy/modules/services/networkmanager.te 2009-06-25 10:19:44.000000000 +0200 ++++ serefpolicy-3.6.12/policy/modules/services/networkmanager.te 2009-12-09 16:22:09.000000000 +0100 +@@ -57,7 +57,9 @@ + manage_sock_files_pattern(NetworkManager_t, NetworkManager_tmp_t, NetworkManager_tmp_t) + files_tmp_filetrans(NetworkManager_t, NetworkManager_tmp_t, sock_file) + ++manage_dirs_pattern(NetworkManager_t, NetworkManager_var_lib_t, NetworkManager_var_lib_t) + manage_files_pattern(NetworkManager_t, NetworkManager_var_lib_t, NetworkManager_var_lib_t) ++files_var_lib_filetrans(NetworkManager_t, NetworkManager_var_lib_t, dir) + + manage_dirs_pattern(NetworkManager_t, NetworkManager_var_run_t, NetworkManager_var_run_t) + manage_files_pattern(NetworkManager_t, NetworkManager_var_run_t, NetworkManager_var_run_t) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/nis.te serefpolicy-3.6.12/policy/modules/services/nis.te --- nsaserefpolicy/policy/modules/services/nis.te 2009-06-25 10:19:44.000000000 +0200 +++ serefpolicy-3.6.12/policy/modules/services/nis.te 2009-06-26 15:48:39.000000000 +0200 diff --git a/selinux-policy.spec b/selinux-policy.spec index 315add4..e41a760 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.6.12 -Release: 91%{?dist} +Release: 92%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -442,6 +442,9 @@ exit 0 %endif %changelog +* Wed Dec 9 2009 Miroslav Grepl 3.6.12-92 +- Add labeling for /var/lib/NetworkManager directory + * Fri Nov 20 2009 Miroslav Grepl 3.6.12-91 - Allow apmd to transition to vbetool domain