diff --git a/policy-20090521.patch b/policy-20090521.patch index 8dd99b0..397c731 100644 --- a/policy-20090521.patch +++ b/policy-20090521.patch @@ -1211,7 +1211,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol /dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.if serefpolicy-3.6.12/policy/modules/kernel/devices.if --- nsaserefpolicy/policy/modules/kernel/devices.if 2009-06-25 10:19:44.000000000 +0200 -+++ serefpolicy-3.6.12/policy/modules/kernel/devices.if 2009-06-25 10:21:01.000000000 +0200 ++++ serefpolicy-3.6.12/policy/modules/kernel/devices.if 2009-07-03 11:25:38.000000000 +0200 @@ -1727,6 +1727,133 @@ ######################################## @@ -1346,6 +1346,28 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol ## Read the lvm comtrol device. ## ## +@@ -3780,3 +3907,21 @@ + + typeattribute $1 devices_unconfined_type; + ') ++ ++###################################### ++## ++## Set the attributes of the tty device ++## ++## ++## ++## Domain allowed access. ++## ++## ++# ++interface(`dev_setattr_tty',` ++ gen_require(` ++ type devtty_t; ++ ') ++ ++ setattr_chr_files_pattern($1, devtty_t, devtty_t) ++') diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.te serefpolicy-3.6.12/policy/modules/kernel/devices.te --- nsaserefpolicy/policy/modules/kernel/devices.te 2009-06-25 10:19:44.000000000 +0200 +++ serefpolicy-3.6.12/policy/modules/kernel/devices.te 2009-06-25 10:21:01.000000000 +0200 diff --git a/selinux-policy.spec b/selinux-policy.spec index 26ddfa8..fe380be 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.6.12 -Release: 62%{?dist} +Release: 63%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -475,6 +475,9 @@ exit 0 %endif %changelog +* Fri Jul 3 2009 Miroslav Grepl 3.6.12-63 +- Allow ftpd to create shm + * Mon Jun 29 2009 Miroslav Grepl 3.6.12-62 - Allow sshd to manage gitosis var/lib files