rel-eng/packages/oracle-selinux | 2 +-
selinux/oracle-selinux/oracle-selinux.spec | 5 ++++-
selinux/oracle-selinux/oracle.te | 2 +-
3 files changed, 6 insertions(+), 3 deletions(-)
New commits:
commit 148b1b50d5af4d26b6bad86e130fef41b61187d0
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Nov 27 17:32:13 2009 +0100
Automatic commit of package [oracle-selinux] minor release [0.1-23.12].
diff --git a/rel-eng/packages/oracle-selinux b/rel-eng/packages/oracle-selinux
index 4ee2d27..8799b81 100644
--- a/rel-eng/packages/oracle-selinux
+++ b/rel-eng/packages/oracle-selinux
@@ -1 +1 @@
-0.1-23.11 selinux/oracle-selinux/
+0.1-23.12 selinux/oracle-selinux/
diff --git a/selinux/oracle-selinux/oracle-selinux.spec
b/selinux/oracle-selinux/oracle-selinux.spec
index afde67a..6c174be 100644
--- a/selinux/oracle-selinux/oracle-selinux.spec
+++ b/selinux/oracle-selinux/oracle-selinux.spec
@@ -20,7 +20,7 @@
Name: oracle-selinux
Version: 0.1
-Release: 23.11%{?obtag}%{?dist}%{?repo}
+Release: 23.12%{?obtag}%{?dist}%{?repo}
Summary: SELinux policy module supporting Oracle
Group: System Environment/Base
License: GPLv2+
@@ -205,6 +205,9 @@ fi
%attr(0755,root,root) %{_sbindir}/oracle-nofcontext-selinux-enable
%changelog
+* Fri Nov 27 2009 Jan Pazdziora 0.1-23.12
+- Use read_files_pattern to get open on Fedora 11
+
* Mon Aug 03 2009 Jan Pazdziora 0.1-23.11
- /usr/sbin/oracle-nofcontext-selinux-enable needs semanage, let's add it to
Requires everywhere
commit a4800bfda286d9aabc8b8478f8b4012d60a6374c
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Nov 27 17:27:30 2009 +0100
Use read_files_pattern instead of just listing allows, to get open on Fedora 11.
Addressing
avc: denied { open } for pid=17434 comm="sqlplus"
name="select-from-dual.sql" dev=dm-0 ino=101925
scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023
tcontext=system_u:object_r:tmp_t:s0 tclass=file
diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te
index e1e5b06..96de268 100644
--- a/selinux/oracle-selinux/oracle.te
+++ b/selinux/oracle-selinux/oracle.te
@@ -171,7 +171,7 @@ allow oracle_db_t oracle_tnslsnr_t:fifo_file { rw_file_perms };
allow oracle_db_t oracle_tnslsnr_t:tcp_socket { rw_socket_perms };
# Allow sqlplus to read shell redirects
-allow oracle_sqlplus_t tmp_t:file { read ioctl getattr };
+read_files_pattern(oracle_sqlplus_t, tmp_t, tmp_t)
# sqlplus can run sql scripts
oracle_script(oracle_sqlplus_t)
Show replies by date