[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-extras-commits
Subject:    rpms/selinux-policy/devel policy-20071130.patch, 1.86,
From:       Daniel J Walsh (dwalsh) <fedora-extras-commits () redhat ! com>
Date:       2008-02-29 22:33:29
Message-ID: 200802292233.m1TMXT35015734 () cvs-int ! fedora ! redhat ! com
[Download RAW message or body]

Author: dwalsh

Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15708

Modified Files:
	policy-20071130.patch selinux-policy.spec 
Log Message:
* Fri Feb 29 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-9
- More xselinux rules


policy-20071130.patch:

Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20071130.patch,v
retrieving revision 1.86
retrieving revision 1.87
diff -u -r1.86 -r1.87
--- policy-20071130.patch	29 Feb 2008 22:18:30 -0000	1.86
+++ policy-20071130.patch	29 Feb 2008 22:33:21 -0000	1.87
@@ -22901,7 +22901,7 @@
  /var/lib/pam_devperm/:0	--	gen_context(system_u:object_r:xdm_var_lib_t,s0)
 diff --exclude-from=exclude -N -u -r \
nsaserefpolicy/policy/modules/services/xserver.if \
                serefpolicy-3.3.1/policy/modules/services/xserver.if
 --- nsaserefpolicy/policy/modules/services/xserver.if	2007-12-04 11:02:50.000000000 \
                -0500
-+++ serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-02-29 \
17:16:49.000000000 -0500 ++++ \
serefpolicy-3.3.1/policy/modules/services/xserver.if	2008-02-29 17:24:22.000000000 \
-0500  @@ -15,6 +15,11 @@
  template(`xserver_common_domain_template',`
  	gen_require(`
@@ -23568,22 +23568,22 @@
 +	# can receive own events
 +	allow $3 $2_input_xevent_t:{ x_event x_synthetic_event } receive;
 +	allow $3 input_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_property_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_manage_xevent_t:{ x_event x_synthetic_event } receive;
 +	allow $1_t $2_manage_xevent_t:{ x_event x_synthetic_event } { send receive };
 +
 +	allow $3 $2_default_xevent_t:{ x_event x_synthetic_event } receive;
-+	allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } receive;
++	allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } {send receive };
 +	
 +	allow $3 $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
-+	allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send };
++	allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
 +	type_transition $2_t input_xevent_t:x_event $2_input_xevent_t;
 +	type_transition $2_t property_xevent_t:x_event $2_property_xevent_t;
 +	type_transition $2_t focus_xevent_t:x_event $2_focus_xevent_t;


Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.623
retrieving revision 1.624
diff -u -r1.623 -r1.624
--- selinux-policy.spec	29 Feb 2008 22:13:08 -0000	1.623
+++ selinux-policy.spec	29 Feb 2008 22:33:22 -0000	1.624
@@ -17,7 +17,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.3.1
-Release: 8%{?dist}
+Release: 9%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -388,6 +388,9 @@
 %endif
 
 %changelog
+* Fri Feb 29 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-9
+- More xselinux rules
+
 * Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> 3.3.1-8
 - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t
 

-- 
fedora-extras-commits mailing list
fedora-extras-commits@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-extras-commits


[prev in list] [next in list] [prev in thread] [next in thread]