rel-eng/packages/oracle-xe-selinux | 2 +-
selinux/oracle-xe-selinux/oracle-xe-selinux.spec | 6 +++++-
selinux/oracle-xe-selinux/oracle-xe.te | 2 ++
3 files changed, 8 insertions(+), 2 deletions(-)
New commits:
commit bcb5bf5fe279e12cb3f990dab0bd1305994a0d01
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 14:57:22 2009 +0100
Automatic commit of package [oracle-xe-selinux] minor release [10.2-14].
diff --git a/rel-eng/packages/oracle-xe-selinux b/rel-eng/packages/oracle-xe-selinux
index 62c6ea0..f2e2e2b 100644
--- a/rel-eng/packages/oracle-xe-selinux
+++ b/rel-eng/packages/oracle-xe-selinux
@@ -1 +1 @@
-10.2-13 selinux/oracle-xe-selinux/
+10.2-14 selinux/oracle-xe-selinux/
diff --git a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
index 4c5ec6a..aadf6ed 100644
--- a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
+++ b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
@@ -6,7 +6,7 @@
Name: oracle-xe-selinux
Version: 10.2
-Release: 13%{?dist}
+Release: 14%{?dist}
Summary: SELinux policy module supporting Oracle XE
Group: System Environment/Base
License: GPLv2+
@@ -137,6 +137,10 @@ fi
%attr(0755,root,root) %{_sbindir}/%{name}-enable
%changelog
+* Thu Nov 26 2009 Jan Pazdziora 10.2-14
+- In RHEL5 one process reading information on another in the /proc directory
+ caused a ptrace access check, allow
+
* Mon Aug 03 2009 Jan Pazdziora 10.2-13
- Use rw_files_pattern instead of direct allows, to get open on new Fedoras
commit f73e3d94c589a634a972ac1d86583d5a34635836
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 14:50:17 2009 +0100
In RHEL5 one process reading information on another in the /proc directory caused a
ptrace access check.
Addressing
avc: denied { ptrace } for pid=14422 comm="oracle"
scontext=system_u:system_r:oracle_db_t:s0 tcontext=system_u:system_r:oracle_db_t:s0
tclass=process
diff --git a/selinux/oracle-xe-selinux/oracle-xe.te
b/selinux/oracle-xe-selinux/oracle-xe.te
index 7094acf..8647094 100644
--- a/selinux/oracle-xe-selinux/oracle-xe.te
+++ b/selinux/oracle-xe-selinux/oracle-xe.te
@@ -30,3 +30,5 @@ dontaudit oracle_tnslsnr_t http_cache_port_t:tcp_socket name_bind;
allow oracle_db_t initrc_t:fifo_file { read ioctl };
+allow oracle_db_t self:process ptrace;
+
Show replies by date