diff --git a/modules-mls.conf b/modules-mls.conf index bf7e537..bf2eef3 100644 --- a/modules-mls.conf +++ b/modules-mls.conf @@ -511,6 +511,13 @@ gpg = module # gpsd = module +# Module: gssproxy +# +# A proxy for GSSAPI credential handling +# +# +gssproxy = module + # Layer: services # Module: gpm # diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf index e88980a..a0ed9aa 100644 --- a/modules-targeted-contrib.conf +++ b/modules-targeted-contrib.conf @@ -741,6 +741,13 @@ gpm = module # gpsd = module +# Module: gssproxy +# +# A proxy for GSSAPI credential handling +# +# +gssproxy = module + # Layer: role # Module: guest # diff --git a/permissivedomains.te b/permissivedomains.te index 925fc39..190e506 100644 --- a/permissivedomains.te +++ b/permissivedomains.te @@ -48,3 +48,10 @@ optional_policy(` permissive swift_t; ') +optional_policy(` + gen_require(` + type gssproxy_t; + ') + + permissive gssproxy_t; +') diff --git a/selinux-policy.spec b/selinux-policy.spec index 2be5adc..bd023ae 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -538,7 +538,7 @@ SELinux Reference policy mls base module. - Allow certwatch to read net_config_t when it executes apache - Allow readahead to create /run/systemd and then create its own directory with the correct label -* Fri May 10 2013 Miroslav Grepl 3.12.1-43 +* Mon May 13 2013 Miroslav Grepl 3.12.1-43 - Transition directories and files when in a user_tmp_t directory - Change certwatch to domtrans to apache instead of just execute - Allow virsh_t to read xen lib files