diff --git a/policy-F13.patch b/policy-F13.patch index 6efa28d..ae68730 100644 --- a/policy-F13.patch +++ b/policy-F13.patch @@ -12627,8 +12627,8 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cgro +/var/run/cgred.* gen_context(system_u:object_r:cgred_var_run_t, s0) diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cgroup.if serefpolicy-3.7.5/policy/modules/services/cgroup.if --- nsaserefpolicy/policy/modules/services/cgroup.if 1969-12-31 19:00:00.000000000 -0500 -+++ serefpolicy-3.7.5/policy/modules/services/cgroup.if 2009-12-22 14:42:11.000000000 -0500 -@@ -0,0 +1,34 @@ ++++ serefpolicy-3.7.5/policy/modules/services/cgroup.if 2009-12-22 17:06:40.000000000 -0500 +@@ -0,0 +1,35 @@ +## Control group rules engine daemon. +## +##

@@ -12640,7 +12640,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cgro +##

+##

+## The list of rules is read during the daemon startup and -+## are cached in daemon’s memory. The daemon reloads the ++## are cached in daemons memory. The daemon reloads the +## list of rules when it receives SIGUSR2 signal. +##

+##
@@ -12663,6 +12663,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cgro + files_search_pids($1) + stream_connect_pattern($1, cgred_var_run_t, cgred_var_run_t, cgred_t) +') ++ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/cgroup.te serefpolicy-3.7.5/policy/modules/services/cgroup.te --- nsaserefpolicy/policy/modules/services/cgroup.te 1969-12-31 19:00:00.000000000 -0500 +++ serefpolicy-3.7.5/policy/modules/services/cgroup.te 2009-12-22 14:55:46.000000000 -0500 @@ -14633,7 +14634,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/deny +/var/log/denyhosts(/.*)? gen_context(system_u:object_r:denyhosts_var_log_t, s0) diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/denyhosts.if serefpolicy-3.7.5/policy/modules/services/denyhosts.if --- nsaserefpolicy/policy/modules/services/denyhosts.if 1969-12-31 19:00:00.000000000 -0500 -+++ serefpolicy-3.7.5/policy/modules/services/denyhosts.if 2009-12-22 10:13:51.000000000 -0500 ++++ serefpolicy-3.7.5/policy/modules/services/denyhosts.if 2009-12-22 17:05:58.000000000 -0500 @@ -0,0 +1,91 @@ +## Deny Hosts. +##