client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te | 1 +
rel-eng/packages/oracle-selinux | 2 +-
selinux/oracle-selinux/oracle-selinux.spec | 7 ++++++-
selinux/oracle-selinux/oracle.if | 6 +++++-
selinux/oracle-selinux/oracle.te | 6 +++++-
5 files changed, 18 insertions(+), 4 deletions(-)
New commits:
commit 0204632c6b64271a45828acd3700522569d8299c
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Jul 27 16:41:58 2009 +0200
Automatic commit of package [oracle-selinux] minor release [0.1-23.10].
diff --git a/rel-eng/packages/oracle-selinux b/rel-eng/packages/oracle-selinux
index 69cb95f..a331e43 100644
--- a/rel-eng/packages/oracle-selinux
+++ b/rel-eng/packages/oracle-selinux
@@ -1 +1 @@
-0.1-23.9 selinux/oracle-selinux/
+0.1-23.10 selinux/oracle-selinux/
diff --git a/selinux/oracle-selinux/oracle-selinux.spec
b/selinux/oracle-selinux/oracle-selinux.spec
index d3cfc23..ec31aa0 100644
--- a/selinux/oracle-selinux/oracle-selinux.spec
+++ b/selinux/oracle-selinux/oracle-selinux.spec
@@ -20,7 +20,7 @@
Name: oracle-selinux
Version: 0.1
-Release: 23.9%{?obtag}%{?dist}%{?repo}
+Release: 23.10%{?obtag}%{?dist}%{?repo}
Summary: SELinux policy module supporting Oracle
Group: System Environment/Base
License: GPLv2+
@@ -205,6 +205,11 @@ fi
%attr(0755,root,root) %{_sbindir}/oracle-nofcontext-selinux-enable
%changelog
+* Mon Jul 27 2009 Jan Pazdziora 0.1-23.10
+- 512718 - on Fedora 11, corenet_udp_bind_lo_node is no longer available
+- 512718 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and
+ corenet_udp_bind_all_nodes
+
* Thu Jun 18 2009 Jan Pazdziora <jpazdziora(a)redhat.com> 0.1-23.9
- 505606 - Require at least selinux-policy 2.4.6-80
- do semodule -l first to see if we have the store
commit c51b3af5db804d6e90e3f2e98370f386b820fae5
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Jul 27 16:27:24 2009 +0200
512718 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and
corenet_udp_bind_all_nodes.
diff --git a/selinux/oracle-selinux/oracle.if b/selinux/oracle-selinux/oracle.if
index b0602cd..ff9a4aa 100644
--- a/selinux/oracle-selinux/oracle.if
+++ b/selinux/oracle-selinux/oracle.if
@@ -397,6 +397,7 @@ interface(`oracle_script',`
type lo_node_t;
')
allow $1 lo_node_t:udp_socket node_bind;
+ corenet_udp_bind_all_nodes($1)
corenet_udp_bind_generic_node($1)
# execute bin files
diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te
index 43f21fc..e1e5b06 100644
--- a/selinux/oracle-selinux/oracle.te
+++ b/selinux/oracle-selinux/oracle.te
@@ -106,6 +106,7 @@ gen_require(`
type lo_node_t;
')
allow oracle_db_t lo_node_t:udp_socket node_bind;
+corenet_udp_bind_all_nodes(oracle_db_t)
corenet_udp_bind_generic_node(oracle_db_t)
###
commit b0b3e6a95082078850e8d92064ddbc6f500a0b12
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Jul 27 15:36:56 2009 +0200
512718 - on Fedora 11, corenet_udp_bind_lo_node is no longer available.
diff --git a/selinux/oracle-selinux/oracle.if b/selinux/oracle-selinux/oracle.if
index 8160223..b0602cd 100644
--- a/selinux/oracle-selinux/oracle.if
+++ b/selinux/oracle-selinux/oracle.if
@@ -393,7 +393,10 @@ interface(`oracle_script',`
# connect to oracle port on any node
corenet_tcp_connect_oracle_port($1)
- corenet_udp_bind_lo_node($1)
+ gen_require(`
+ type lo_node_t;
+ ')
+ allow $1 lo_node_t:udp_socket node_bind;
corenet_udp_bind_generic_node($1)
# execute bin files
diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te
index f0c35de..43f21fc 100644
--- a/selinux/oracle-selinux/oracle.te
+++ b/selinux/oracle-selinux/oracle.te
@@ -102,7 +102,10 @@ corenet_udp_sendrecv_all_if(oracle_tnslsnr_t)
corenet_tcp_sendrecv_all_nodes(oracle_tnslsnr_t)
corenet_udp_sendrecv_all_nodes(oracle_tnslsnr_t)
corenet_tcp_connect_generic_port(oracle_tnslsnr_t)
-corenet_udp_bind_lo_node(oracle_db_t)
+gen_require(`
+ type lo_node_t;
+')
+allow oracle_db_t lo_node_t:udp_socket node_bind;
corenet_udp_bind_generic_node(oracle_db_t)
###
commit e667b45096c084f732e3f9fa71d4a2c1f7a90d74
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Jul 27 16:23:54 2009 +0200
512732 - on Fedora 12, it will be just and corenet_udp_bind_generic_node and
corenet_udp_bind_all_nodes.
diff --git a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
index 573f5a9..fc620f5 100644
--- a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
+++ b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te
@@ -57,6 +57,7 @@ gen_require(`
type lo_node_t;
')
allow osa_dispatcher_t lo_node_t:udp_socket node_bind;
+corenet_udp_bind_all_nodes(osa_dispatcher_t)
corenet_udp_bind_generic_node(osa_dispatcher_t)
sysnet_dns_name_resolve(osa_dispatcher_t)
Show replies by date