rel-eng/packages/spacewalk-selinux | 2 +-
selinux/spacewalk-selinux/spacewalk-selinux.spec | 5 ++++-
selinux/spacewalk-selinux/spacewalk.te | 8 ++++++++
3 files changed, 13 insertions(+), 2 deletions(-)
New commits:
commit 8a34be96b42965215b6f3336bab8df0d72288397
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Mar 1 09:33:58 2012 +0100
Automatic commit of package [spacewalk-selinux] release [1.7.2-1].
diff --git a/rel-eng/packages/spacewalk-selinux b/rel-eng/packages/spacewalk-selinux
index e2f27e7..1edcfd4 100644
--- a/rel-eng/packages/spacewalk-selinux
+++ b/rel-eng/packages/spacewalk-selinux
@@ -1 +1 @@
-1.7.1-1 selinux/spacewalk-selinux/
+1.7.2-1 selinux/spacewalk-selinux/
diff --git a/selinux/spacewalk-selinux/spacewalk-selinux.spec
b/selinux/spacewalk-selinux/spacewalk-selinux.spec
index 0db99da..a0e1862 100644
--- a/selinux/spacewalk-selinux/spacewalk-selinux.spec
+++ b/selinux/spacewalk-selinux/spacewalk-selinux.spec
@@ -7,7 +7,7 @@
%define modulename spacewalk
Name: spacewalk-selinux
-Version: 1.7.1
+Version: 1.7.2
Release: 1%{?dist}
Summary: SELinux policy module supporting Spacewalk Server
@@ -113,6 +113,9 @@ fi
%attr(0755,root,root) %{_sbindir}/%{name}-enable
%changelog
+* Thu Mar 01 2012 Jan Pazdziora 1.7.2-1
+- Allow PostgreSQL to use dblink.
+
* Tue Feb 14 2012 Tomas Lestach <tlestach(a)redhat.com> 1.7.1-1
- rename rhn-installation.log to rhn_installation.log (tlestach(a)redhat.com)
- Bumping package versions for 1.7. (mzazrivec(a)redhat.com)
commit d74c2075f0547e90a59cf36b31eaf074232062bb
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Mar 1 08:46:03 2012 +0100
Allow PostgreSQL to use dblink.
diff --git a/selinux/spacewalk-selinux/spacewalk.te
b/selinux/spacewalk-selinux/spacewalk.te
index ed1932b..908958c 100644
--- a/selinux/spacewalk-selinux/spacewalk.te
+++ b/selinux/spacewalk-selinux/spacewalk.te
@@ -94,3 +94,11 @@ optional_policy(`
# rpm_dontaudit_search_db(httpd_t) is not available on RHELs
dontaudit httpd_t rpm_var_lib_t:dir list_dir_perms;
dontaudit httpd_t rpm_var_lib_t:file read_file_perms;
+
+# Allow PostgreSQL to use dblink
+optional_policy(`
+ gen_require(`
+ type postgresql_t;
+ ')
+ allow postgresql_t self:unix_stream_socket { connectto };
+')
Show replies by date