diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch index ccc0018..f2b1c82 100644 --- a/policy-rawhide-contrib.patch +++ b/policy-rawhide-contrib.patch @@ -6796,9 +6796,18 @@ index e9fe2ca..4c2d076 100644 /usr/sbin/avahi-dnsconfd -- gen_context(system_u:object_r:avahi_exec_t,s0) /usr/sbin/avahi-autoipd -- gen_context(system_u:object_r:avahi_exec_t,s0) diff --git a/avahi.if b/avahi.if -index aebe7cb..3355ef9 100644 +index aebe7cb..33fe57b 100644 --- a/avahi.if +++ b/avahi.if +@@ -97,7 +97,7 @@ interface(`avahi_dbus_chat',` + ######################################## + ## + ## Connect to avahi using a unix +-$$ stream socket. ++## stream socket. + ## + ## + ## @@ -135,6 +135,29 @@ interface(`avahi_dontaudit_search_pid',` ######################################## @@ -14921,10 +14930,10 @@ index 6ce66e7..1d0337a 100644 optional_policy(` diff --git a/cups.fc b/cups.fc -index 949011e..63eb4c7 100644 +index 949011e..f3c8888 100644 --- a/cups.fc +++ b/cups.fc -@@ -1,77 +1,86 @@ +@@ -1,77 +1,85 @@ -/etc/alchemist/namespace/printconf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) -/etc/cups(/.*)? gen_context(system_u:object_r:cupsd_etc_t,s0) @@ -14965,7 +14974,6 @@ index 949011e..63eb4c7 100644 -/usr/bin/cups-config-daemon -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) -/usr/bin/hpijs -- gen_context(system_u:object_r:hplip_exec_t,s0) -+#/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) +/usr/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) -/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0) @@ -15048,8 +15056,8 @@ index 949011e..63eb4c7 100644 +/var/run/udev-configure-printer(/.*)? gen_context(system_u:object_r:cupsd_config_var_run_t,s0) +/var/turboprint(/.*)? gen_context(system_u:object_r:cupsd_var_run_t,s0) + -+#/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0) -+/usr/local/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) ++/usr/Brother/fax/.*\.log.* gen_context(system_u:object_r:cupsd_log_t,s0) ++/usr/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) +/etc/opt/Brother/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) +/usr/Printer/(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) + @@ -32610,6 +32618,18 @@ index 5a414e0..4e159c2 100644 miscfiles_manage_man_cache(mandb_t) optional_policy(` +diff --git a/mcelog.if b/mcelog.if +index 9dbe694..f89651e 100644 +--- a/mcelog.if ++++ b/mcelog.if +@@ -56,6 +56,6 @@ interface(`mcelog_admin',` + logging_search_logs($1) + admin_pattern($1, mcelog_log_t) + +- files_search_pids($1 ++ files_search_pids($1) + admin_pattern($1, mcelog_var_run_t) + ') diff --git a/mcelog.te b/mcelog.te index 13ea191..799df10 100644 --- a/mcelog.te @@ -52980,7 +53000,7 @@ index efcb653..ff2c96a 100644 +/var/log/ppp-connect-errors.* -- gen_context(system_u:object_r:pppd_log_t,s0) +/var/log/ppp(/.*)? gen_context(system_u:object_r:pppd_log_t,s0) diff --git a/ppp.if b/ppp.if -index cd8b8b9..cb827c0 100644 +index cd8b8b9..cde0d62 100644 --- a/ppp.if +++ b/ppp.if @@ -1,110 +1,91 @@ @@ -53242,14 +53262,7 @@ index cd8b8b9..cb827c0 100644 ## ## ## -@@ -288,13 +266,13 @@ interface(`ppp_run',` - attribute_role pppd_roles; - ') - -- ppp_domtrans($1) -+ ppp_domtrans($1 - roleattribute $2 pppd_roles; - ') +@@ -294,7 +272,7 @@ interface(`ppp_run',` ######################################## ## @@ -58311,7 +58324,7 @@ index 1bef513..af2850e 100644 allow qmail_tcp_env_t qmail_smtpd_exec_t:file read_file_perms; diff --git a/qpid.if b/qpid.if -index cd51b96..670cb1a 100644 +index cd51b96..f7e9c70 100644 --- a/qpid.if +++ b/qpid.if @@ -1,4 +1,4 @@ @@ -58588,7 +58601,7 @@ index cd51b96..670cb1a 100644 - files_search_pids($1) - admin_pattern($1, qpidd_var_run_t) -+ files_search_var_lib($1( ++ files_search_var_lib($1) + admin_pattern($1, qpidd_var_lib_t) + + files_search_pids($1) diff --git a/selinux-policy.spec b/selinux-policy.spec index d66811a..c067601 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -13,8 +13,8 @@ %if %{?BUILD_MLS:0}%{!?BUILD_MLS:1} %define BUILD_MLS 1 %endif -%define POLICYVER 29 -%define POLICYCOREUTILSVER 2.1.13-34 +%define POLICYVER 28 +%define POLICYCOREUTILSVER 2.1.13-53 %define CHECKPOLICYVER 2.1.11-3 Summary: SELinux policy configuration Name: selinux-policy