commit: b283816112a221d3ef0381b117b0261f24b1e7f4 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Thu Apr 6 20:59:03 2017 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Mon Apr 10 16:42:08 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b2838161
Misc fc changes from Russell Coker. policy/modules/contrib/acct.fc | 2 -- policy/modules/contrib/acct.te | 2 +- policy/modules/contrib/apache.fc | 1 + policy/modules/contrib/apache.te | 2 +- policy/modules/contrib/apt.fc | 1 + policy/modules/contrib/apt.te | 2 +- policy/modules/contrib/dirmngr.fc | 1 + policy/modules/contrib/dirmngr.te | 2 +- policy/modules/contrib/dpkg.fc | 1 + policy/modules/contrib/dpkg.te | 2 +- 10 files changed, 9 insertions(+), 7 deletions(-) diff --git a/policy/modules/contrib/acct.fc b/policy/modules/contrib/acct.fc index 8a4f7efd..204e5375 100644 --- a/policy/modules/contrib/acct.fc +++ b/policy/modules/contrib/acct.fc @@ -1,5 +1,3 @@ -/etc/cron\.(daily|monthly)/acct -- gen_context(system_u:object_r:acct_exec_t,s0) - /etc/rc\.d/init\.d/psacct -- gen_context(system_u:object_r:acct_initrc_exec_t,s0) /usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) diff --git a/policy/modules/contrib/acct.te b/policy/modules/contrib/acct.te index aca9d80b..fb2e1ebe 100644 --- a/policy/modules/contrib/acct.te +++ b/policy/modules/contrib/acct.te @@ -1,4 +1,4 @@ -policy_module(acct, 1.7.1) +policy_module(acct, 1.7.2) ######################################## # diff --git a/policy/modules/contrib/apache.fc b/policy/modules/contrib/apache.fc index 5fded37a..591c8ad2 100644 --- a/policy/modules/contrib/apache.fc +++ b/policy/modules/contrib/apache.fc @@ -85,6 +85,7 @@ ifdef(`distro_suse',` /usr/share/mythtv/data(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) /usr/share/ntop/html(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) /usr/share/openca/htdocs(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) +/usr/share/postfixadmin/templates_c(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) /usr/share/selinux-policy[^/]*/html(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) /usr/share/wordpress/.*\.php -- gen_context(system_u:object_r:httpd_sys_script_exec_t,s0) /usr/share/wordpress-mu/wp-config\.php -- gen_context(system_u:object_r:httpd_sys_script_exec_t,s0) diff --git a/policy/modules/contrib/apache.te b/policy/modules/contrib/apache.te index 1d8b1140..628b4156 100644 --- a/policy/modules/contrib/apache.te +++ b/policy/modules/contrib/apache.te @@ -1,4 +1,4 @@ -policy_module(apache, 2.12.2) +policy_module(apache, 2.12.3) ######################################## # diff --git a/policy/modules/contrib/apt.fc b/policy/modules/contrib/apt.fc index 7b208016..92db84d6 100644 --- a/policy/modules/contrib/apt.fc +++ b/policy/modules/contrib/apt.fc @@ -14,6 +14,7 @@ ifndef(`distro_redhat',` /var/lib/apt(/.*)? gen_context(system_u:object_r:apt_var_lib_t,s0) /var/lib/aptitude(/.*)? gen_context(system_u:object_r:apt_var_lib_t,s0) +/var/lib/apt-xapian-inde(x)(/.*)? gen_context(system_u:object_r:apt_var_lib_t,s0) /var/lock/aptitude gen_context(system_u:object_r:apt_lock_t,s0) diff --git a/policy/modules/contrib/apt.te b/policy/modules/contrib/apt.te index 3c7d9b2d..05197c4c 100644 --- a/policy/modules/contrib/apt.te +++ b/policy/modules/contrib/apt.te @@ -1,4 +1,4 @@ -policy_module(apt, 1.10.0) +policy_module(apt, 1.10.1) ######################################## # diff --git a/policy/modules/contrib/dirmngr.fc b/policy/modules/contrib/dirmngr.fc index 8d97f2e6..a0f261c9 100644 --- a/policy/modules/contrib/dirmngr.fc +++ b/policy/modules/contrib/dirmngr.fc @@ -7,6 +7,7 @@ /var/log/dirmngr(/.*)? gen_context(system_u:object_r:dirmngr_log_t,s0) /var/lib/dirmngr(/.*)? gen_context(system_u:object_r:dirmngr_var_lib_t,s0) +/var/cache/dirmngr(/.*)? gen_context(system_u:object_r:dirmngr_var_lib_t,s0) /run/dirmngr\.pid -- gen_context(system_u:object_r:dirmngr_var_run_t,s0) diff --git a/policy/modules/contrib/dirmngr.te b/policy/modules/contrib/dirmngr.te index df4963bc..23f40456 100644 --- a/policy/modules/contrib/dirmngr.te +++ b/policy/modules/contrib/dirmngr.te @@ -1,4 +1,4 @@ -policy_module(dirmngr, 1.2.0) +policy_module(dirmngr, 1.2.1) ######################################## # diff --git a/policy/modules/contrib/dpkg.fc b/policy/modules/contrib/dpkg.fc index eec3c487..ad87459f 100644 --- a/policy/modules/contrib/dpkg.fc +++ b/policy/modules/contrib/dpkg.fc @@ -4,6 +4,7 @@ /usr/bin/dpkg -- gen_context(system_u:object_r:dpkg_exec_t,s0) /usr/bin/dselect -- gen_context(system_u:object_r:dpkg_exec_t,s0) +/var/lib/debtags(/.*)? gen_context(system_u:object_r:dpkg_var_lib_t,s0) /var/lib/dpkg(/.*)? gen_context(system_u:object_r:dpkg_var_lib_t,s0) /var/lib/dpkg/(meth)?lock -- gen_context(system_u:object_r:dpkg_lock_t,s0) diff --git a/policy/modules/contrib/dpkg.te b/policy/modules/contrib/dpkg.te index e7e50372..51ae8c36 100644 --- a/policy/modules/contrib/dpkg.te +++ b/policy/modules/contrib/dpkg.te @@ -1,4 +1,4 @@ -policy_module(dpkg, 1.11.2) +policy_module(dpkg, 1.11.3) ######################################## #
