Author: dwalsh
Update of /cvs/extras/rpms/selinux-policy/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15708
Modified Files:
policy-20071130.patch selinux-policy.spec
Log Message:
* Fri Feb 29 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-9
- More xselinux rules
policy-20071130.patch:
Index: policy-20071130.patch
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/policy-20071130.patch,v
retrieving revision 1.86
retrieving revision 1.87
diff -u -r1.86 -r1.87
--- policy-20071130.patch 29 Feb 2008 22:18:30 -0000 1.86
+++ policy-20071130.patch 29 Feb 2008 22:33:21 -0000 1.87
@@ -22901,7 +22901,7 @@
/var/lib/pam_devperm/:0 -- gen_context(system_u:object_r:xdm_var_lib_t,s0)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.if
serefpolicy-3.3.1/policy/modules/services/xserver.if
--- nsaserefpolicy/policy/modules/services/xserver.if 2007-12-04 11:02:50.000000000
-0500
-+++ serefpolicy-3.3.1/policy/modules/services/xserver.if 2008-02-29 17:16:49.000000000
-0500
++++ serefpolicy-3.3.1/policy/modules/services/xserver.if 2008-02-29 17:24:22.000000000
-0500
@@ -15,6 +15,11 @@
template(`xserver_common_domain_template',`
gen_require(`
@@ -23568,22 +23568,22 @@
+ # can receive own events
+ allow $3 $2_input_xevent_t:{ x_event x_synthetic_event } receive;
+ allow $3 input_xevent_t:{ x_event x_synthetic_event } receive;
-+ allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } receive;
++ allow $1_t $2_input_xevent_t:{ x_event x_synthetic_event } { send receive };
+
+ allow $3 $2_property_xevent_t:{ x_event x_synthetic_event } receive;
-+ allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } receive;
++ allow $1_t $2_property_xevent_t:{ x_event x_synthetic_event } { send receive };
+
+ allow $3 $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
-+ allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } receive;
++ allow $1_t $2_focus_xevent_t:{ x_event x_synthetic_event } { send receive };
+
+ allow $3 $2_manage_xevent_t:{ x_event x_synthetic_event } receive;
+ allow $1_t $2_manage_xevent_t:{ x_event x_synthetic_event } { send receive };
+
+ allow $3 $2_default_xevent_t:{ x_event x_synthetic_event } receive;
-+ allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } receive;
++ allow $1_t $2_default_xevent_t:{ x_event x_synthetic_event } {send receive };
+
+ allow $3 $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
-+ allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send };
++ allow $1_t $2_client_xevent_t:{ x_event x_synthetic_event } { send receive };
+ type_transition $2_t input_xevent_t:x_event $2_input_xevent_t;
+ type_transition $2_t property_xevent_t:x_event $2_property_xevent_t;
+ type_transition $2_t focus_xevent_t:x_event $2_focus_xevent_t;
Index: selinux-policy.spec
===================================================================
RCS file: /cvs/extras/rpms/selinux-policy/devel/selinux-policy.spec,v
retrieving revision 1.623
retrieving revision 1.624
diff -u -r1.623 -r1.624
--- selinux-policy.spec 29 Feb 2008 22:13:08 -0000 1.623
+++ selinux-policy.spec 29 Feb 2008 22:33:22 -0000 1.624
@@ -17,7 +17,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.3.1
-Release: 8%{?dist}
+Release: 9%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -388,6 +388,9 @@
%endif
%changelog
+* Fri Feb 29 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-9
+- More xselinux rules
+
* Thu Feb 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-8
- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t
Show replies by date