SOURCES: policy-apache.patch, policy-login.patch, policy-postfix.p...

qboosh qboosh at pld-linux.org
Fri Sep 23 11:26:07 CEST 2005


Author: qboosh                       Date: Fri Sep 23 09:26:07 2005 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- updated for 1.26

---- Files affected:
SOURCES:
   policy-apache.patch (1.4 -> 1.5) , policy-login.patch (1.1 -> 1.2) , policy-postfix.patch (1.9 -> 1.10) 

---- Diffs:

================================================================
Index: SOURCES/policy-apache.patch
diff -u SOURCES/policy-apache.patch:1.4 SOURCES/policy-apache.patch:1.5
--- SOURCES/policy-apache.patch:1.4	Sat Jan  8 18:41:47 2005
+++ SOURCES/policy-apache.patch	Fri Sep 23 11:26:01 2005
@@ -1,6 +1,6 @@
---- policy-1.20/file_contexts/program/apache.fc.orig	2004-12-10 20:57:35.000000000 +0100
-+++ policy-1.20/file_contexts/program/apache.fc	2005-01-08 18:21:30.792381280 +0100
-@@ -8,6 +8,7 @@
+--- policy-1.26/file_contexts/program/apache.fc.orig	2005-07-18 22:13:38.000000000 +0200
++++ policy-1.26/file_contexts/program/apache.fc	2005-09-23 10:08:00.196995520 +0200
+@@ -9,6 +9,7 @@
  /var/cache/httpd(/.*)?		system_u:object_r:httpd_cache_t
  /etc/httpd		-d	system_u:object_r:httpd_config_t
  /etc/httpd/conf.*		system_u:object_r:httpd_config_t
@@ -8,16 +8,16 @@
  /etc/httpd/logs			system_u:object_r:httpd_log_t
  /etc/httpd/modules		system_u:object_r:httpd_modules_t
  /etc/apache(2)?(/.*)?		system_u:object_r:httpd_config_t
-@@ -15,7 +16,7 @@
+@@ -16,7 +17,7 @@
  /usr/lib(64)?/apache(/.*)?		system_u:object_r:httpd_modules_t
  /usr/lib(64)?/apache2/modules(/.*)?	system_u:object_r:httpd_modules_t
  /usr/lib(64)?/httpd(/.*)?		system_u:object_r:httpd_modules_t
--/usr/sbin/httpd		--	system_u:object_r:httpd_exec_t
+-/usr/sbin/httpd(\.worker)?	--	system_u:object_r:httpd_exec_t
 +/usr/sbin/httpd.*	--	system_u:object_r:httpd_exec_t
  /usr/sbin/apache(2)?	--	system_u:object_r:httpd_exec_t
  /usr/sbin/suexec	--	system_u:object_r:httpd_suexec_exec_t
  /usr/lib(64)?/cgi-bin/(nph-)?cgiwrap(d)? -- system_u:object_r:httpd_suexec_exec_t
-@@ -25,7 +26,7 @@
+@@ -26,7 +27,7 @@
  /var/log/cgiwrap\.log.*	--	system_u:object_r:httpd_log_t
  /var/cache/ssl.*\.sem	--	system_u:object_r:httpd_cache_t
  /var/cache/mod_ssl(/.*)?	system_u:object_r:httpd_cache_t

================================================================
Index: SOURCES/policy-login.patch
diff -u SOURCES/policy-login.patch:1.1 SOURCES/policy-login.patch:1.2
--- SOURCES/policy-login.patch:1.1	Thu Mar 11 12:19:20 2004
+++ SOURCES/policy-login.patch	Fri Sep 23 11:26:01 2005
@@ -1,11 +1,11 @@
---- policy-1.6/domains/program/login.te.orig	Tue Feb 17 19:36:50 2004
-+++ policy-1.6/domains/program/login.te	Tue Mar  2 15:30:27 2004
-@@ -93,7 +93,7 @@
+--- policy-1.26/domains/program/login.te.orig	2005-07-11 20:24:29.000000000 +0200
++++ policy-1.26/domains/program/login.te	2005-09-23 10:05:55.294983512 +0200
+@@ -111,7 +111,7 @@
  allow $1_login_t lastlog_t:file rw_file_perms;
  
  # Write to /var/log/btmp
--allow $1_login_t faillog_t:file { append read write };
-+allow $1_login_t faillog_t:file { append read write getattr };
+-allow $1_login_t faillog_t:file { lock append read write };
++allow $1_login_t faillog_t:file { lock append read write getattr };
  
  # Search for mail spool file.
  allow $1_login_t mail_spool_t:dir r_dir_perms;

================================================================
Index: SOURCES/policy-postfix.patch
diff -u SOURCES/policy-postfix.patch:1.9 SOURCES/policy-postfix.patch:1.10
--- SOURCES/policy-postfix.patch:1.9	Sat Jul  2 01:07:47 2005
+++ SOURCES/policy-postfix.patch	Fri Sep 23 11:26:01 2005
@@ -44,12 +44,12 @@
  /var/log/sendmail\.st		--	system_u:object_r:sendmail_log_t
  /var/log/mail(/.*)?			system_u:object_r:sendmail_log_t
  /var/run/sendmail\.pid		--	system_u:object_r:sendmail_var_run_t
---- policy-1.24/domains/program/unused/mta.te.orig	2005-05-23 21:20:02.000000000 +0200
-+++ policy-1.24/domains/program/unused/mta.te	2005-07-02 00:40:00.294528232 +0200
+--- policy-1.26/domains/program/unused/mta.te.orig	2005-08-10 08:48:42.000000000 +0200
++++ policy-1.26/domains/program/unused/mta.te	2005-09-23 10:04:23.130994568 +0200
 @@ -72,3 +72,6 @@
  
  allow system_mail_t etc_runtime_t:file { getattr read };
- allow system_mail_t { random_device_t urandom_device_t }:chr_file read;
+ allow system_mail_t { random_device_t urandom_device_t }:chr_file { getattr read };
 +
 +# etc_mail_t is the type of /etc/mail.
 +type etc_mail_t, file_type, sysadmfile, usercanread;
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SOURCES/policy-apache.patch?r1=1.4&r2=1.5&f=u
    http://cvs.pld-linux.org/SOURCES/policy-login.patch?r1=1.1&r2=1.2&f=u
    http://cvs.pld-linux.org/SOURCES/policy-postfix.patch?r1=1.9&r2=1.10&f=u




More information about the pld-cvs-commit mailing list