diff --git a/modules-minimum.conf b/modules-minimum.conf index abdf2ef..84f0848 100644 --- a/modules-minimum.conf +++ b/modules-minimum.conf @@ -543,6 +543,13 @@ gnomeclock = module hal = module # Layer: services +# Module: hddtemp +# +# hddtemp hard disk temperature tool running as a daemon +# +hddtemp = module + +# Layer: services # Module: polkit # # Hardware abstraction layer diff --git a/modules-targeted.conf b/modules-targeted.conf index 320c8ee..0747e96 100644 --- a/modules-targeted.conf +++ b/modules-targeted.conf @@ -557,6 +557,13 @@ gnomeclock = module hal = module # Layer: services +# Module: hddtemp +# +# hddtemp hard disk temperature tool running as a daemon +# +hddtemp = module + +# Layer: services # Module: polkit # # Hardware abstraction layer diff --git a/policy-20090521.patch b/policy-20090521.patch index bf42f10..1a1b0d4 100644 --- a/policy-20090521.patch +++ b/policy-20090521.patch @@ -1373,17 +1373,16 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol # VMWare need access to pcmcia devices for network diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/corecommands.fc serefpolicy-3.6.12/policy/modules/kernel/corecommands.fc --- nsaserefpolicy/policy/modules/kernel/corecommands.fc 2009-06-25 10:19:44.000000000 +0200 -+++ serefpolicy-3.6.12/policy/modules/kernel/corecommands.fc 2009-08-12 11:02:41.000000000 +0200 -@@ -7,6 +7,8 @@ ++++ serefpolicy-3.6.12/policy/modules/kernel/corecommands.fc 2009-08-13 17:13:38.000000000 +0200 +@@ -7,6 +7,7 @@ /bin/d?ash -- gen_context(system_u:object_r:shell_exec_t,s0) /bin/bash -- gen_context(system_u:object_r:shell_exec_t,s0) /bin/bash2 -- gen_context(system_u:object_r:shell_exec_t,s0) +/bin/fish -- gen_context(system_u:object_r:shell_exec_t,s0) -+/bin/nologin -- gen_context(system_u:object_r:shell_exec_t,s0) /bin/ksh.* -- gen_context(system_u:object_r:shell_exec_t,s0) /bin/sash -- gen_context(system_u:object_r:shell_exec_t,s0) /bin/tcsh -- gen_context(system_u:object_r:shell_exec_t,s0) -@@ -69,6 +71,8 @@ +@@ -69,6 +70,8 @@ /etc/ppp/ipv6-up\..* -- gen_context(system_u:object_r:bin_t,s0) /etc/ppp/ipv6-down\..* -- gen_context(system_u:object_r:bin_t,s0) @@ -1392,6 +1391,14 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol /etc/rc\.d/init\.d/functions -- gen_context(system_u:object_r:bin_t,s0) /etc/security/namespace.init -- gen_context(system_u:object_r:bin_t,s0) +@@ -119,6 +122,7 @@ + /sbin/.* gen_context(system_u:object_r:bin_t,s0) + /sbin/mkfs\.cramfs -- gen_context(system_u:object_r:bin_t,s0) + /sbin/insmod_ksymoops_clean -- gen_context(system_u:object_r:bin_t,s0) ++/sbin/nologin -- gen_context(system_u:object_r:shell_exec_t,s0) + + # + # /opt @@ -145,6 +149,7 @@ /usr/(.*/)?Bin(/.*)? gen_context(system_u:object_r:bin_t,s0) /usr/(.*/)?bin(/.*)? gen_context(system_u:object_r:bin_t,s0) diff --git a/selinux-policy.spec b/selinux-policy.spec index 5f1f4bd..3d7cbcb 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.6.12 -Release: 75%{?dist} +Release: 76%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -475,6 +475,9 @@ exit 0 %endif %changelog +* Thu Aug 13 2009 Miroslav Grepl 3.6.12-76 +- Allow hald_t to list net_conf_t directory + * Tue Aug 11 2009 Miroslav Grepl 3.6.12-75 - Allow polkit_auth_t to getattr of all persistent filesystems