diff --git a/policy-20071130.patch b/policy-20071130.patch index 27d8d1a..98b7a1d 100644 --- a/policy-20071130.patch +++ b/policy-20071130.patch @@ -22901,7 +22901,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xser /var/lib/pam_devperm/:0 -- gen_context(system_u:object_r:xdm_var_lib_t,s0) diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xserver.if serefpolicy-3.3.1/policy/modules/services/xserver.if --- nsaserefpolicy/policy/modules/services/xserver.if 2007-12-04 11:02:50.000000000 -0500 -+++ serefpolicy-3.3.1/policy/modules/services/xserver.if 2008-02-29 17:12:34.000000000 -0500 ++++ serefpolicy-3.3.1/policy/modules/services/xserver.if 2008-02-29 17:16:49.000000000 -0500 @@ -15,6 +15,11 @@ template(`xserver_common_domain_template',` gen_require(` @@ -23657,7 +23657,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/xser + allow $3 xdm_t:x_drawable { receive get_property getattr list_child }; + + allow x_server_domain $2_input_xevent_t:x_event send; -+ allow x_xserver_domain $3:x_drawable send; ++ allow x_server_domain $3:x_drawable send; +') + +####################################### diff --git a/selinux-policy.spec b/selinux-policy.spec index 0fac8d6..201b8e2 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.3.1 -Release: 7%{?dist} +Release: 8%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -388,8 +388,8 @@ exit 0 %endif %changelog -* Thu Feb 28 2008 Dan Walsh 3.3.1-7 -- +* Thu Feb 28 2008 Dan Walsh 3.3.1-8 +- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t * Wed Feb 27 2008 Dan Walsh 3.3.1-6 - Prepare policy for beta release