diff --git a/policy-udev_tbl.patch b/policy-udev_tbl.patch new file mode 100644 index 0000000..b0f26f3 --- /dev/null +++ b/policy-udev_tbl.patch @@ -0,0 +1,10 @@ +--- serefpolicy-2.5.9/policy/modules/system/udev.fc.udev_tbl 2007-03-20 09:36:50.000000000 -0400 ++++ serefpolicy-2.5.9/policy/modules/system/udev.fc 2007-03-22 06:36:55.000000000 -0400 +@@ -1,6 +1,6 @@ + # udev + +-/dev/\.udev(/.*)? gen_context(system_u:object_r:udev_tbl_t,s0) ++/dev/\.udev(/.*)? -- gen_context(system_u:object_r:udev_tbl_t,s0) + /dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0) + /dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0) + diff --git a/selinux-policy.spec b/selinux-policy.spec index e810676..21efd8e 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,11 +17,12 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 2.5.9 -Release: 4%{?dist} +Release: 5%{?dist} License: GPL Group: System Environment/Base Source: serefpolicy-%{version}.tgz patch: policy-20070219.patch +patch1: policy-udev_tbl.patch Source1: modules-targeted.conf Source2: booleans-targeted.conf Source3: Makefile.devel @@ -171,6 +172,7 @@ Based off of reference policy: Checked out revision 2215. %prep %setup -q -n serefpolicy-%{version} %patch -p1 +%patch1 -p1 %install # Build targeted policy @@ -356,6 +358,9 @@ semodule -b base.pp -r bootloader -r clock -r dpkg -r fstools -r hotplug -r init %endif %changelog +* Wed Mar 21 2007 Dan Walsh 2.5.9-5 +- Fix labeling on udev.tbl dirs + * Tue Mar 20 2007 Dan Walsh 2.5.9-4 - Fixes for logwatch