diff --git a/policy-20080710.patch b/policy-20080710.patch index f00b633..355b762 100644 --- a/policy-20080710.patch +++ b/policy-20080710.patch @@ -34884,7 +34884,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount. + diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount.te serefpolicy-3.5.13/policy/modules/system/mount.te --- nsaserefpolicy/policy/modules/system/mount.te 2008-10-17 14:49:13.000000000 +0200 -+++ serefpolicy-3.5.13/policy/modules/system/mount.te 2009-03-23 11:00:12.000000000 +0100 ++++ serefpolicy-3.5.13/policy/modules/system/mount.te 2009-10-01 14:53:03.000000000 +0200 @@ -18,17 +18,21 @@ init_system_domain(mount_t,mount_exec_t) role system_r types mount_t; @@ -35012,16 +35012,17 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount. files_mounton_non_security(mount_t) ') -@@ -167,6 +192,8 @@ +@@ -167,6 +192,9 @@ fs_search_rpc(mount_t) rpc_stub(mount_t) + + rpc_domtrans_rpcd(mount_t) ++ ') optional_policy(` -@@ -174,6 +201,14 @@ +@@ -174,6 +202,14 @@ ') optional_policy(` @@ -35036,7 +35037,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount. ifdef(`hide_broken_symptoms',` # for a bug in the X server rhgb_dontaudit_rw_stream_sockets(mount_t) -@@ -181,6 +216,11 @@ +@@ -181,6 +217,11 @@ ') ') @@ -35048,7 +35049,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount. # for kernel package installation optional_policy(` rpm_rw_pipes(mount_t) -@@ -188,6 +228,7 @@ +@@ -188,6 +229,7 @@ optional_policy(` samba_domtrans_smbmount(mount_t) @@ -35056,10 +35057,13 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/mount. ') ######################################## -@@ -198,4 +239,26 @@ +@@ -198,4 +240,29 @@ optional_policy(` files_etc_filetrans_etc_runtime(unconfined_mount_t,file) unconfined_domain(unconfined_mount_t) ++ ++ rpc_domtrans_rpcd(unconfined_mount_t) ++ + optional_policy(` + hal_dbus_chat(unconfined_mount_t) +') diff --git a/selinux-policy.spec b/selinux-policy.spec index d142491..2bb6de9 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -20,7 +20,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.5.13 -Release: 72%{?dist} +Release: 73%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -462,6 +462,9 @@ exit 0 %endif %changelog +* Thu Oct 1 2009 Miroslav Grepl 3.5.13-73 +- Allow unconfined_mount_t to execute in rpcd domain + * Thu Sep 17 2009 Miroslav Grepl 3.5.13-72 - Allow spamd to read spamd_var_lib_t symlinks