rel-eng/packages/spacewalk-selinux | 2 +- selinux/spacewalk-selinux/spacewalk-selinux.spec | 5 ++++- selinux/spacewalk-selinux/spacewalk.te | 8 ++++++++ 3 files changed, 13 insertions(+), 2 deletions(-)
New commits: commit 8a34be96b42965215b6f3336bab8df0d72288397 Author: Jan Pazdziora jpazdziora@redhat.com Date: Thu Mar 1 09:33:58 2012 +0100
Automatic commit of package [spacewalk-selinux] release [1.7.2-1].
diff --git a/rel-eng/packages/spacewalk-selinux b/rel-eng/packages/spacewalk-selinux index e2f27e7..1edcfd4 100644 --- a/rel-eng/packages/spacewalk-selinux +++ b/rel-eng/packages/spacewalk-selinux @@ -1 +1 @@ -1.7.1-1 selinux/spacewalk-selinux/ +1.7.2-1 selinux/spacewalk-selinux/ diff --git a/selinux/spacewalk-selinux/spacewalk-selinux.spec b/selinux/spacewalk-selinux/spacewalk-selinux.spec index 0db99da..a0e1862 100644 --- a/selinux/spacewalk-selinux/spacewalk-selinux.spec +++ b/selinux/spacewalk-selinux/spacewalk-selinux.spec @@ -7,7 +7,7 @@ %define modulename spacewalk
Name: spacewalk-selinux -Version: 1.7.1 +Version: 1.7.2 Release: 1%{?dist} Summary: SELinux policy module supporting Spacewalk Server
@@ -113,6 +113,9 @@ fi %attr(0755,root,root) %{_sbindir}/%{name}-enable
%changelog +* Thu Mar 01 2012 Jan Pazdziora 1.7.2-1 +- Allow PostgreSQL to use dblink. + * Tue Feb 14 2012 Tomas Lestach tlestach@redhat.com 1.7.1-1 - rename rhn-installation.log to rhn_installation.log (tlestach@redhat.com) - Bumping package versions for 1.7. (mzazrivec@redhat.com)
commit d74c2075f0547e90a59cf36b31eaf074232062bb Author: Jan Pazdziora jpazdziora@redhat.com Date: Thu Mar 1 08:46:03 2012 +0100
Allow PostgreSQL to use dblink.
diff --git a/selinux/spacewalk-selinux/spacewalk.te b/selinux/spacewalk-selinux/spacewalk.te index ed1932b..908958c 100644 --- a/selinux/spacewalk-selinux/spacewalk.te +++ b/selinux/spacewalk-selinux/spacewalk.te @@ -94,3 +94,11 @@ optional_policy(` # rpm_dontaudit_search_db(httpd_t) is not available on RHELs dontaudit httpd_t rpm_var_lib_t:dir list_dir_perms; dontaudit httpd_t rpm_var_lib_t:file read_file_perms; + +# Allow PostgreSQL to use dblink +optional_policy(` + gen_require(` + type postgresql_t; + ') + allow postgresql_t self:unix_stream_socket { connectto }; +')