client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te | 1 + rel-eng/packages/oracle-selinux | 2 +- selinux/oracle-selinux/oracle-selinux.spec | 7 ++++++- selinux/oracle-selinux/oracle.if | 6 +++++- selinux/oracle-selinux/oracle.te | 6 +++++- 5 files changed, 18 insertions(+), 4 deletions(-)
New commits: commit 0204632c6b64271a45828acd3700522569d8299c Author: Jan Pazdziora jpazdziora@redhat.com Date: Mon Jul 27 16:41:58 2009 +0200
Automatic commit of package [oracle-selinux] minor release [0.1-23.10].
diff --git a/rel-eng/packages/oracle-selinux b/rel-eng/packages/oracle-selinux index 69cb95f..a331e43 100644 --- a/rel-eng/packages/oracle-selinux +++ b/rel-eng/packages/oracle-selinux @@ -1 +1 @@ -0.1-23.9 selinux/oracle-selinux/ +0.1-23.10 selinux/oracle-selinux/ diff --git a/selinux/oracle-selinux/oracle-selinux.spec b/selinux/oracle-selinux/oracle-selinux.spec index d3cfc23..ec31aa0 100644 --- a/selinux/oracle-selinux/oracle-selinux.spec +++ b/selinux/oracle-selinux/oracle-selinux.spec @@ -20,7 +20,7 @@
Name: oracle-selinux Version: 0.1 -Release: 23.9%{?obtag}%{?dist}%{?repo} +Release: 23.10%{?obtag}%{?dist}%{?repo} Summary: SELinux policy module supporting Oracle Group: System Environment/Base License: GPLv2+ @@ -205,6 +205,11 @@ fi %attr(0755,root,root) %{_sbindir}/oracle-nofcontext-selinux-enable
%changelog +* Mon Jul 27 2009 Jan Pazdziora 0.1-23.10 +- 512718 - on Fedora 11, corenet_udp_bind_lo_node is no longer available +- 512718 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and + corenet_udp_bind_all_nodes + * Thu Jun 18 2009 Jan Pazdziora jpazdziora@redhat.com 0.1-23.9 - 505606 - Require at least selinux-policy 2.4.6-80 - do semodule -l first to see if we have the store
commit c51b3af5db804d6e90e3f2e98370f386b820fae5 Author: Jan Pazdziora jpazdziora@redhat.com Date: Mon Jul 27 16:27:24 2009 +0200
512718 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and corenet_udp_bind_all_nodes.
diff --git a/selinux/oracle-selinux/oracle.if b/selinux/oracle-selinux/oracle.if index b0602cd..ff9a4aa 100644 --- a/selinux/oracle-selinux/oracle.if +++ b/selinux/oracle-selinux/oracle.if @@ -397,6 +397,7 @@ interface(`oracle_script',` type lo_node_t; ') allow $1 lo_node_t:udp_socket node_bind; + corenet_udp_bind_all_nodes($1) corenet_udp_bind_generic_node($1)
# execute bin files diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te index 43f21fc..e1e5b06 100644 --- a/selinux/oracle-selinux/oracle.te +++ b/selinux/oracle-selinux/oracle.te @@ -106,6 +106,7 @@ gen_require(` type lo_node_t; ') allow oracle_db_t lo_node_t:udp_socket node_bind; +corenet_udp_bind_all_nodes(oracle_db_t) corenet_udp_bind_generic_node(oracle_db_t)
###
commit b0b3e6a95082078850e8d92064ddbc6f500a0b12 Author: Jan Pazdziora jpazdziora@redhat.com Date: Mon Jul 27 15:36:56 2009 +0200
512718 - on Fedora 11, corenet_udp_bind_lo_node is no longer available.
diff --git a/selinux/oracle-selinux/oracle.if b/selinux/oracle-selinux/oracle.if index 8160223..b0602cd 100644 --- a/selinux/oracle-selinux/oracle.if +++ b/selinux/oracle-selinux/oracle.if @@ -393,7 +393,10 @@ interface(`oracle_script',`
# connect to oracle port on any node corenet_tcp_connect_oracle_port($1) - corenet_udp_bind_lo_node($1) + gen_require(` + type lo_node_t; + ') + allow $1 lo_node_t:udp_socket node_bind; corenet_udp_bind_generic_node($1)
# execute bin files diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te index f0c35de..43f21fc 100644 --- a/selinux/oracle-selinux/oracle.te +++ b/selinux/oracle-selinux/oracle.te @@ -102,7 +102,10 @@ corenet_udp_sendrecv_all_if(oracle_tnslsnr_t) corenet_tcp_sendrecv_all_nodes(oracle_tnslsnr_t) corenet_udp_sendrecv_all_nodes(oracle_tnslsnr_t) corenet_tcp_connect_generic_port(oracle_tnslsnr_t) -corenet_udp_bind_lo_node(oracle_db_t) +gen_require(` + type lo_node_t; +') +allow oracle_db_t lo_node_t:udp_socket node_bind; corenet_udp_bind_generic_node(oracle_db_t)
###
commit e667b45096c084f732e3f9fa71d4a2c1f7a90d74 Author: Jan Pazdziora jpazdziora@redhat.com Date: Mon Jul 27 16:23:54 2009 +0200
512732 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and corenet_udp_bind_all_nodes.
diff --git a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te index 573f5a9..fc620f5 100644 --- a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te +++ b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te @@ -57,6 +57,7 @@ gen_require(` type lo_node_t; ') allow osa_dispatcher_t lo_node_t:udp_socket node_bind; +corenet_udp_bind_all_nodes(osa_dispatcher_t) corenet_udp_bind_generic_node(osa_dispatcher_t)
sysnet_dns_name_resolve(osa_dispatcher_t)
spacewalk-commits@lists.fedorahosted.org