1 |
commit: 110875d7272058d72af8735e08ebbd4704c48d99 |
2 |
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> |
3 |
AuthorDate: Sat Feb 4 20:18:43 2017 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Feb 5 15:10:30 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=110875d7 |
7 |
|
8 |
Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. |
9 |
|
10 |
policy/modules/contrib/acct.fc | 2 -- |
11 |
policy/modules/contrib/acct.te | 2 +- |
12 |
policy/modules/contrib/alsa.fc | 5 ----- |
13 |
policy/modules/contrib/alsa.te | 2 +- |
14 |
policy/modules/contrib/apcupsd.fc | 2 -- |
15 |
policy/modules/contrib/apcupsd.te | 2 +- |
16 |
policy/modules/contrib/cachefilesd.fc | 2 -- |
17 |
policy/modules/contrib/cachefilesd.te | 2 +- |
18 |
policy/modules/contrib/ccs.fc | 2 -- |
19 |
policy/modules/contrib/ccs.te | 2 +- |
20 |
policy/modules/contrib/cgroup.fc | 4 ---- |
21 |
policy/modules/contrib/cgroup.te | 2 +- |
22 |
policy/modules/contrib/cpucontrol.fc | 4 ---- |
23 |
policy/modules/contrib/cpucontrol.te | 2 +- |
24 |
policy/modules/contrib/cups.fc | 2 -- |
25 |
policy/modules/contrib/cups.te | 2 +- |
26 |
policy/modules/contrib/dbus.fc | 4 ---- |
27 |
policy/modules/contrib/dbus.te | 2 +- |
28 |
policy/modules/contrib/devicekit.fc | 3 --- |
29 |
policy/modules/contrib/devicekit.te | 2 +- |
30 |
policy/modules/contrib/drbd.fc | 3 --- |
31 |
policy/modules/contrib/drbd.te | 2 +- |
32 |
policy/modules/contrib/iscsi.fc | 4 ---- |
33 |
policy/modules/contrib/iscsi.te | 2 +- |
34 |
policy/modules/contrib/kdump.fc | 5 ----- |
35 |
policy/modules/contrib/kdump.te | 2 +- |
36 |
policy/modules/contrib/kudzu.fc | 3 --- |
37 |
policy/modules/contrib/kudzu.te | 2 +- |
38 |
policy/modules/contrib/loadkeys.fc | 3 --- |
39 |
policy/modules/contrib/loadkeys.te | 2 +- |
40 |
policy/modules/contrib/mta.fc | 2 -- |
41 |
policy/modules/contrib/mta.te | 2 +- |
42 |
policy/modules/contrib/networkmanager.fc | 3 --- |
43 |
policy/modules/contrib/networkmanager.te | 2 +- |
44 |
policy/modules/contrib/nis.fc | 2 -- |
45 |
policy/modules/contrib/nis.te | 2 +- |
46 |
policy/modules/contrib/nut.fc | 4 ---- |
47 |
policy/modules/contrib/nut.te | 2 +- |
48 |
policy/modules/contrib/oddjob.fc | 2 -- |
49 |
policy/modules/contrib/oddjob.te | 2 +- |
50 |
policy/modules/contrib/pcmcia.fc | 3 --- |
51 |
policy/modules/contrib/pcmcia.te | 2 +- |
52 |
policy/modules/contrib/plymouthd.fc | 4 ---- |
53 |
policy/modules/contrib/plymouthd.te | 2 +- |
54 |
policy/modules/contrib/portmap.fc | 4 ---- |
55 |
policy/modules/contrib/portmap.te | 2 +- |
56 |
policy/modules/contrib/portreserve.fc | 2 -- |
57 |
policy/modules/contrib/portreserve.te | 2 +- |
58 |
policy/modules/contrib/ppp.fc | 3 --- |
59 |
policy/modules/contrib/ppp.te | 2 +- |
60 |
policy/modules/contrib/prelude.fc | 2 -- |
61 |
policy/modules/contrib/prelude.te | 2 +- |
62 |
policy/modules/contrib/quota.fc | 3 --- |
63 |
policy/modules/contrib/quota.te | 2 +- |
64 |
policy/modules/contrib/raid.fc | 8 -------- |
65 |
policy/modules/contrib/raid.te | 2 +- |
66 |
policy/modules/contrib/rdisc.fc | 2 -- |
67 |
policy/modules/contrib/rdisc.te | 2 +- |
68 |
policy/modules/contrib/readahead.fc | 2 -- |
69 |
policy/modules/contrib/readahead.te | 2 +- |
70 |
policy/modules/contrib/resmgr.fc | 2 -- |
71 |
policy/modules/contrib/resmgr.te | 2 +- |
72 |
policy/modules/contrib/rpc.fc | 3 --- |
73 |
policy/modules/contrib/rpc.te | 2 +- |
74 |
policy/modules/contrib/rpcbind.fc | 2 -- |
75 |
policy/modules/contrib/rpcbind.te | 2 +- |
76 |
policy/modules/contrib/rpm.fc | 4 ---- |
77 |
policy/modules/contrib/rpm.te | 2 +- |
78 |
policy/modules/contrib/shorewall.fc | 3 --- |
79 |
policy/modules/contrib/shorewall.te | 2 +- |
80 |
policy/modules/contrib/shutdown.fc | 4 ---- |
81 |
policy/modules/contrib/shutdown.te | 2 +- |
82 |
policy/modules/contrib/usbmodules.fc | 2 -- |
83 |
policy/modules/contrib/usbmodules.te | 2 +- |
84 |
policy/modules/contrib/vpn.fc | 2 -- |
85 |
policy/modules/contrib/vpn.te | 2 +- |
86 |
policy/modules/contrib/zosremote.fc | 2 -- |
87 |
policy/modules/contrib/zosremote.te | 2 +- |
88 |
78 files changed, 39 insertions(+), 157 deletions(-) |
89 |
|
90 |
diff --git a/policy/modules/contrib/acct.fc b/policy/modules/contrib/acct.fc |
91 |
index c6d17a2..8a4f7ef 100644 |
92 |
--- a/policy/modules/contrib/acct.fc |
93 |
+++ b/policy/modules/contrib/acct.fc |
94 |
@@ -2,8 +2,6 @@ |
95 |
|
96 |
/etc/rc\.d/init\.d/psacct -- gen_context(system_u:object_r:acct_initrc_exec_t,s0) |
97 |
|
98 |
-/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) |
99 |
- |
100 |
/usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) |
101 |
|
102 |
/var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0) |
103 |
|
104 |
diff --git a/policy/modules/contrib/acct.te b/policy/modules/contrib/acct.te |
105 |
index 6f6fd13..aca9d80 100644 |
106 |
--- a/policy/modules/contrib/acct.te |
107 |
+++ b/policy/modules/contrib/acct.te |
108 |
@@ -1,4 +1,4 @@ |
109 |
-policy_module(acct, 1.7.0) |
110 |
+policy_module(acct, 1.7.1) |
111 |
|
112 |
######################################## |
113 |
# |
114 |
|
115 |
diff --git a/policy/modules/contrib/alsa.fc b/policy/modules/contrib/alsa.fc |
116 |
index 112fc62..f26e239 100644 |
117 |
--- a/policy/modules/contrib/alsa.fc |
118 |
+++ b/policy/modules/contrib/alsa.fc |
119 |
@@ -4,14 +4,9 @@ ifdef(`distro_debian',` |
120 |
/\.config(/.*)? gen_context(system_u:object_r:alsa_var_lib_t,s0) |
121 |
') |
122 |
|
123 |
-/bin/alsaunmute -- gen_context(system_u:object_r:alsa_exec_t,s0) |
124 |
- |
125 |
/etc/alsa(/.*)? gen_context(system_u:object_r:alsa_etc_t,s0) |
126 |
/etc/asound\.conf gen_context(system_u:object_r:alsa_etc_t,s0) |
127 |
|
128 |
-/sbin/alsactl -- gen_context(system_u:object_r:alsa_exec_t,s0) |
129 |
-/sbin/salsa -- gen_context(system_u:object_r:alsa_exec_t,s0) |
130 |
- |
131 |
# Systemd unit files |
132 |
/usr/lib/systemd/system/[^/]*alsa-restore.* -- gen_context(system_u:object_r:alsa_unit_t,s0) |
133 |
/usr/lib/systemd/system/[^/]*alsa-state.* -- gen_context(system_u:object_r:alsa_unit_t,s0) |
134 |
|
135 |
diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te |
136 |
index f7faa4b..1904667 100644 |
137 |
--- a/policy/modules/contrib/alsa.te |
138 |
+++ b/policy/modules/contrib/alsa.te |
139 |
@@ -1,4 +1,4 @@ |
140 |
-policy_module(alsa, 1.16.0) |
141 |
+policy_module(alsa, 1.16.1) |
142 |
|
143 |
######################################## |
144 |
# |
145 |
|
146 |
diff --git a/policy/modules/contrib/apcupsd.fc b/policy/modules/contrib/apcupsd.fc |
147 |
index 375989c..c9a7900 100644 |
148 |
--- a/policy/modules/contrib/apcupsd.fc |
149 |
+++ b/policy/modules/contrib/apcupsd.fc |
150 |
@@ -1,7 +1,5 @@ |
151 |
/etc/rc\.d/init\.d/apcupsd -- gen_context(system_u:object_r:apcupsd_initrc_exec_t,s0) |
152 |
|
153 |
-/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) |
154 |
- |
155 |
/usr/lib/systemd/system/apcupsd.*\.service -- gen_context(system_u:object_r:apcupsd_unit_t,s0) |
156 |
|
157 |
/usr/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) |
158 |
|
159 |
diff --git a/policy/modules/contrib/apcupsd.te b/policy/modules/contrib/apcupsd.te |
160 |
index 0277a90..e1586b3 100644 |
161 |
--- a/policy/modules/contrib/apcupsd.te |
162 |
+++ b/policy/modules/contrib/apcupsd.te |
163 |
@@ -1,4 +1,4 @@ |
164 |
-policy_module(apcupsd, 1.12.0) |
165 |
+policy_module(apcupsd, 1.12.1) |
166 |
|
167 |
######################################## |
168 |
# |
169 |
|
170 |
diff --git a/policy/modules/contrib/cachefilesd.fc b/policy/modules/contrib/cachefilesd.fc |
171 |
index 7ee707d..1ddbe60 100644 |
172 |
--- a/policy/modules/contrib/cachefilesd.fc |
173 |
+++ b/policy/modules/contrib/cachefilesd.fc |
174 |
@@ -1,7 +1,5 @@ |
175 |
/etc/rc\.d/init\.d/cachefilesd -- gen_context(system_u:object_r:cachefilesd_initrc_exec_t,s0) |
176 |
|
177 |
-/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) |
178 |
- |
179 |
/usr/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) |
180 |
|
181 |
/var/cache/fscache(/.*)? gen_context(system_u:object_r:cachefilesd_cache_t,s0) |
182 |
|
183 |
diff --git a/policy/modules/contrib/cachefilesd.te b/policy/modules/contrib/cachefilesd.te |
184 |
index c8cf94c..14fcf67 100644 |
185 |
--- a/policy/modules/contrib/cachefilesd.te |
186 |
+++ b/policy/modules/contrib/cachefilesd.te |
187 |
@@ -1,4 +1,4 @@ |
188 |
-policy_module(cachefilesd, 1.3.0) |
189 |
+policy_module(cachefilesd, 1.3.1) |
190 |
|
191 |
######################################## |
192 |
# |
193 |
|
194 |
diff --git a/policy/modules/contrib/ccs.fc b/policy/modules/contrib/ccs.fc |
195 |
index 86c73a7..4bf5e8f 100644 |
196 |
--- a/policy/modules/contrib/ccs.fc |
197 |
+++ b/policy/modules/contrib/ccs.fc |
198 |
@@ -2,8 +2,6 @@ |
199 |
|
200 |
/etc/rc\.d/init\.d/((ccs)|(ccsd)) -- gen_context(system_u:object_r:ccs_initrc_exec_t,s0) |
201 |
|
202 |
-/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) |
203 |
- |
204 |
/usr/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) |
205 |
|
206 |
/var/lib/cluster/((ccs)|(ccsd)).* gen_context(system_u:object_r:ccs_var_lib_t,s0) |
207 |
|
208 |
diff --git a/policy/modules/contrib/ccs.te b/policy/modules/contrib/ccs.te |
209 |
index 9bf4039..eacec0b 100644 |
210 |
--- a/policy/modules/contrib/ccs.te |
211 |
+++ b/policy/modules/contrib/ccs.te |
212 |
@@ -1,4 +1,4 @@ |
213 |
-policy_module(ccs, 1.10.0) |
214 |
+policy_module(ccs, 1.10.1) |
215 |
|
216 |
######################################## |
217 |
# |
218 |
|
219 |
diff --git a/policy/modules/contrib/cgroup.fc b/policy/modules/contrib/cgroup.fc |
220 |
index a77ead6..cfe6b48 100644 |
221 |
--- a/policy/modules/contrib/cgroup.fc |
222 |
+++ b/policy/modules/contrib/cgroup.fc |
223 |
@@ -7,10 +7,6 @@ |
224 |
/etc/rc\.d/init\.d/cgconfig -- gen_context(system_u:object_r:cgconfig_initrc_exec_t,s0) |
225 |
/etc/rc\.d/init\.d/cgred -- gen_context(system_u:object_r:cgred_initrc_exec_t,s0) |
226 |
|
227 |
-/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) |
228 |
-/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) |
229 |
-/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) |
230 |
- |
231 |
/usr/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) |
232 |
/usr/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) |
233 |
/usr/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) |
234 |
|
235 |
diff --git a/policy/modules/contrib/cgroup.te b/policy/modules/contrib/cgroup.te |
236 |
index b9a20ff..5d600a9 100644 |
237 |
--- a/policy/modules/contrib/cgroup.te |
238 |
+++ b/policy/modules/contrib/cgroup.te |
239 |
@@ -1,4 +1,4 @@ |
240 |
-policy_module(cgroup, 1.5.0) |
241 |
+policy_module(cgroup, 1.5.1) |
242 |
|
243 |
######################################## |
244 |
# |
245 |
|
246 |
diff --git a/policy/modules/contrib/cpucontrol.fc b/policy/modules/contrib/cpucontrol.fc |
247 |
index aa4b21b..06f5d0f 100644 |
248 |
--- a/policy/modules/contrib/cpucontrol.fc |
249 |
+++ b/policy/modules/contrib/cpucontrol.fc |
250 |
@@ -1,7 +1,3 @@ |
251 |
-/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) |
252 |
- |
253 |
-/sbin/microcode_ctl -- gen_context(system_u:object_r:cpucontrol_exec_t,s0) |
254 |
- |
255 |
/usr/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) |
256 |
|
257 |
/usr/sbin/cpufreqd -- gen_context(system_u:object_r:cpuspeed_exec_t,s0) |
258 |
|
259 |
diff --git a/policy/modules/contrib/cpucontrol.te b/policy/modules/contrib/cpucontrol.te |
260 |
index 5b7c320..cff0e16 100644 |
261 |
--- a/policy/modules/contrib/cpucontrol.te |
262 |
+++ b/policy/modules/contrib/cpucontrol.te |
263 |
@@ -1,4 +1,4 @@ |
264 |
-policy_module(cpucontrol, 1.6.0) |
265 |
+policy_module(cpucontrol, 1.6.1) |
266 |
|
267 |
######################################## |
268 |
# |
269 |
|
270 |
diff --git a/policy/modules/contrib/cups.fc b/policy/modules/contrib/cups.fc |
271 |
index 5ccf2cb..72afd97 100644 |
272 |
--- a/policy/modules/contrib/cups.fc |
273 |
+++ b/policy/modules/contrib/cups.fc |
274 |
@@ -18,8 +18,6 @@ |
275 |
|
276 |
/etc/printcap.* -- gen_context(system_u:object_r:cupsd_rw_etc_t,s0) |
277 |
|
278 |
-/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) |
279 |
- |
280 |
/opt/brother/Printers(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) |
281 |
/opt/gutenprint/ppds(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) |
282 |
|
283 |
|
284 |
diff --git a/policy/modules/contrib/cups.te b/policy/modules/contrib/cups.te |
285 |
index f5bf055..14a4cfd 100644 |
286 |
--- a/policy/modules/contrib/cups.te |
287 |
+++ b/policy/modules/contrib/cups.te |
288 |
@@ -1,4 +1,4 @@ |
289 |
-policy_module(cups, 1.21.0) |
290 |
+policy_module(cups, 1.21.1) |
291 |
|
292 |
######################################## |
293 |
# |
294 |
|
295 |
diff --git a/policy/modules/contrib/dbus.fc b/policy/modules/contrib/dbus.fc |
296 |
index c96d02a..c7baa6b 100644 |
297 |
--- a/policy/modules/contrib/dbus.fc |
298 |
+++ b/policy/modules/contrib/dbus.fc |
299 |
@@ -2,10 +2,6 @@ HOME_DIR/\.dbus(/.*)? gen_context(system_u:object_r:session_dbusd_home_t,s0) |
300 |
|
301 |
/etc/dbus-.*(/.*)? gen_context(system_u:object_r:dbusd_etc_t,s0) |
302 |
|
303 |
-/bin/dbus-daemon -- gen_context(system_u:object_r:dbusd_exec_t,s0) |
304 |
- |
305 |
-/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) |
306 |
- |
307 |
/usr/bin/dbus-daemon(-1)? -- gen_context(system_u:object_r:dbusd_exec_t,s0) |
308 |
|
309 |
/usr/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) |
310 |
|
311 |
diff --git a/policy/modules/contrib/dbus.te b/policy/modules/contrib/dbus.te |
312 |
index 996fc68..42c7d4f 100644 |
313 |
--- a/policy/modules/contrib/dbus.te |
314 |
+++ b/policy/modules/contrib/dbus.te |
315 |
@@ -1,4 +1,4 @@ |
316 |
-policy_module(dbus, 1.22.0) |
317 |
+policy_module(dbus, 1.22.1) |
318 |
|
319 |
gen_require(` |
320 |
class dbus all_dbus_perms; |
321 |
|
322 |
diff --git a/policy/modules/contrib/devicekit.fc b/policy/modules/contrib/devicekit.fc |
323 |
index 8161451..2b6d443 100644 |
324 |
--- a/policy/modules/contrib/devicekit.fc |
325 |
+++ b/policy/modules/contrib/devicekit.fc |
326 |
@@ -1,6 +1,3 @@ |
327 |
-/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) |
328 |
-/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) |
329 |
- |
330 |
/usr/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) |
331 |
/usr/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) |
332 |
/usr/lib/udisks/udisks-daemon -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) |
333 |
|
334 |
diff --git a/policy/modules/contrib/devicekit.te b/policy/modules/contrib/devicekit.te |
335 |
index 229c6b2..a5926c4 100644 |
336 |
--- a/policy/modules/contrib/devicekit.te |
337 |
+++ b/policy/modules/contrib/devicekit.te |
338 |
@@ -1,4 +1,4 @@ |
339 |
-policy_module(devicekit, 1.6.0) |
340 |
+policy_module(devicekit, 1.6.1) |
341 |
|
342 |
######################################## |
343 |
# |
344 |
|
345 |
diff --git a/policy/modules/contrib/drbd.fc b/policy/modules/contrib/drbd.fc |
346 |
index 671a3fb..d5d54f7 100644 |
347 |
--- a/policy/modules/contrib/drbd.fc |
348 |
+++ b/policy/modules/contrib/drbd.fc |
349 |
@@ -1,8 +1,5 @@ |
350 |
/etc/rc\.d/init\.d/drbd -- gen_context(system_u:object_r:drbd_initrc_exec_t,s0) |
351 |
|
352 |
-/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) |
353 |
-/sbin/drbdsetup -- gen_context(system_u:object_r:drbd_exec_t,s0) |
354 |
- |
355 |
/usr/lib/ocf/resource.\d/linbit/drbd -- gen_context(system_u:object_r:drbd_exec_t,s0) |
356 |
|
357 |
/usr/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) |
358 |
|
359 |
diff --git a/policy/modules/contrib/drbd.te b/policy/modules/contrib/drbd.te |
360 |
index 0d8ed27..0d1e636 100644 |
361 |
--- a/policy/modules/contrib/drbd.te |
362 |
+++ b/policy/modules/contrib/drbd.te |
363 |
@@ -1,4 +1,4 @@ |
364 |
-policy_module(drbd, 1.2.0) |
365 |
+policy_module(drbd, 1.2.1) |
366 |
|
367 |
######################################## |
368 |
# |
369 |
|
370 |
diff --git a/policy/modules/contrib/iscsi.fc b/policy/modules/contrib/iscsi.fc |
371 |
index df23b9b..29c1e5c 100644 |
372 |
--- a/policy/modules/contrib/iscsi.fc |
373 |
+++ b/policy/modules/contrib/iscsi.fc |
374 |
@@ -1,9 +1,5 @@ |
375 |
/etc/rc\.d/init\.d/((iscsi)|(iscsid)) -- gen_context(system_u:object_r:iscsi_initrc_exec_t,s0) |
376 |
|
377 |
-/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
378 |
-/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
379 |
-/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
380 |
- |
381 |
/usr/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
382 |
/usr/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
383 |
/usr/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) |
384 |
|
385 |
diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/contrib/iscsi.te |
386 |
index 54f187c..8061f7e 100644 |
387 |
--- a/policy/modules/contrib/iscsi.te |
388 |
+++ b/policy/modules/contrib/iscsi.te |
389 |
@@ -1,4 +1,4 @@ |
390 |
-policy_module(iscsi, 1.11.0) |
391 |
+policy_module(iscsi, 1.11.1) |
392 |
|
393 |
######################################## |
394 |
# |
395 |
|
396 |
diff --git a/policy/modules/contrib/kdump.fc b/policy/modules/contrib/kdump.fc |
397 |
index d5ec077..94c0daa 100644 |
398 |
--- a/policy/modules/contrib/kdump.fc |
399 |
+++ b/policy/modules/contrib/kdump.fc |
400 |
@@ -2,14 +2,9 @@ |
401 |
|
402 |
/etc/rc\.d/init\.d/kdump -- gen_context(system_u:object_r:kdump_initrc_exec_t,s0) |
403 |
|
404 |
-/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) |
405 |
- |
406 |
/usr/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) |
407 |
|
408 |
/usr/lib/systemd/system/kdump.*\.service -- gen_context(system_u:object_r:kdump_unit_t,s0) |
409 |
|
410 |
-/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) |
411 |
-/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) |
412 |
- |
413 |
/usr/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) |
414 |
/usr/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) |
415 |
|
416 |
diff --git a/policy/modules/contrib/kdump.te b/policy/modules/contrib/kdump.te |
417 |
index 1f63509..e758c15 100644 |
418 |
--- a/policy/modules/contrib/kdump.te |
419 |
+++ b/policy/modules/contrib/kdump.te |
420 |
@@ -1,4 +1,4 @@ |
421 |
-policy_module(kdump, 1.5.0) |
422 |
+policy_module(kdump, 1.5.1) |
423 |
|
424 |
####################################### |
425 |
# |
426 |
|
427 |
diff --git a/policy/modules/contrib/kudzu.fc b/policy/modules/contrib/kudzu.fc |
428 |
index 0e98a01..a0030a7 100644 |
429 |
--- a/policy/modules/contrib/kudzu.fc |
430 |
+++ b/policy/modules/contrib/kudzu.fc |
431 |
@@ -1,8 +1,5 @@ |
432 |
/etc/rc\.d/init\.d/kudzu -- gen_context(system_u:object_r:kudzu_initrc_exec_t,s0) |
433 |
|
434 |
-/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) |
435 |
-/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) |
436 |
- |
437 |
/usr/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) |
438 |
/usr/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) |
439 |
|
440 |
|
441 |
diff --git a/policy/modules/contrib/kudzu.te b/policy/modules/contrib/kudzu.te |
442 |
index a5f9182..4116d00 100644 |
443 |
--- a/policy/modules/contrib/kudzu.te |
444 |
+++ b/policy/modules/contrib/kudzu.te |
445 |
@@ -1,4 +1,4 @@ |
446 |
-policy_module(kudzu, 1.12.0) |
447 |
+policy_module(kudzu, 1.12.1) |
448 |
|
449 |
######################################## |
450 |
# |
451 |
|
452 |
diff --git a/policy/modules/contrib/loadkeys.fc b/policy/modules/contrib/loadkeys.fc |
453 |
index c6fe71b..38f91fe 100644 |
454 |
--- a/policy/modules/contrib/loadkeys.fc |
455 |
+++ b/policy/modules/contrib/loadkeys.fc |
456 |
@@ -1,5 +1,2 @@ |
457 |
-/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) |
458 |
-/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) |
459 |
- |
460 |
/usr/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) |
461 |
/usr/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) |
462 |
|
463 |
diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/contrib/loadkeys.te |
464 |
index ad97422..ca8e701 100644 |
465 |
--- a/policy/modules/contrib/loadkeys.te |
466 |
+++ b/policy/modules/contrib/loadkeys.te |
467 |
@@ -1,4 +1,4 @@ |
468 |
-policy_module(loadkeys, 1.11.0) |
469 |
+policy_module(loadkeys, 1.11.1) |
470 |
|
471 |
######################################## |
472 |
# |
473 |
|
474 |
diff --git a/policy/modules/contrib/mta.fc b/policy/modules/contrib/mta.fc |
475 |
index f42896c..2468134 100644 |
476 |
--- a/policy/modules/contrib/mta.fc |
477 |
+++ b/policy/modules/contrib/mta.fc |
478 |
@@ -5,8 +5,6 @@ HOME_DIR/\.mailrc -- gen_context(system_u:object_r:mail_home_t,s0) |
479 |
HOME_DIR/Maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) |
480 |
HOME_DIR/\.maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) |
481 |
|
482 |
-/bin/mail(x)? -- gen_context(system_u:object_r:sendmail_exec_t,s0) |
483 |
- |
484 |
/etc/aliases -- gen_context(system_u:object_r:etc_aliases_t,s0) |
485 |
/etc/aliases\.db -- gen_context(system_u:object_r:etc_aliases_t,s0) |
486 |
/etc/mail(/.*)? gen_context(system_u:object_r:etc_mail_t,s0) |
487 |
|
488 |
diff --git a/policy/modules/contrib/mta.te b/policy/modules/contrib/mta.te |
489 |
index 51b3bbb..f0c4b92 100644 |
490 |
--- a/policy/modules/contrib/mta.te |
491 |
+++ b/policy/modules/contrib/mta.te |
492 |
@@ -1,4 +1,4 @@ |
493 |
-policy_module(mta, 2.8.0) |
494 |
+policy_module(mta, 2.8.1) |
495 |
|
496 |
######################################## |
497 |
# |
498 |
|
499 |
diff --git a/policy/modules/contrib/networkmanager.fc b/policy/modules/contrib/networkmanager.fc |
500 |
index 6c54e0e..d24e9f0 100644 |
501 |
--- a/policy/modules/contrib/networkmanager.fc |
502 |
+++ b/policy/modules/contrib/networkmanager.fc |
503 |
@@ -21,9 +21,6 @@ |
504 |
/usr/lib/systemd/system/[^/]*NetworkManager.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) |
505 |
/usr/lib/systemd/system/[^/]*wpa_supplicant.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) |
506 |
|
507 |
-/sbin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) |
508 |
-/sbin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) |
509 |
- |
510 |
/usr/bin/NetworkManager -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) |
511 |
/usr/bin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) |
512 |
/usr/bin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) |
513 |
|
514 |
diff --git a/policy/modules/contrib/networkmanager.te b/policy/modules/contrib/networkmanager.te |
515 |
index 3b66680..27b9265 100644 |
516 |
--- a/policy/modules/contrib/networkmanager.te |
517 |
+++ b/policy/modules/contrib/networkmanager.te |
518 |
@@ -1,4 +1,4 @@ |
519 |
-policy_module(networkmanager, 1.20.0) |
520 |
+policy_module(networkmanager, 1.20.1) |
521 |
|
522 |
######################################## |
523 |
# |
524 |
|
525 |
diff --git a/policy/modules/contrib/nis.fc b/policy/modules/contrib/nis.fc |
526 |
index a5c3ed9..2b86f44 100644 |
527 |
--- a/policy/modules/contrib/nis.fc |
528 |
+++ b/policy/modules/contrib/nis.fc |
529 |
@@ -5,8 +5,6 @@ |
530 |
|
531 |
/etc/ypserv\.conf -- gen_context(system_u:object_r:ypserv_conf_t,s0) |
532 |
|
533 |
-/sbin/ypbind -- gen_context(system_u:object_r:ypbind_exec_t,s0) |
534 |
- |
535 |
/usr/lib/yp/ypxfr -- gen_context(system_u:object_r:ypxfr_exec_t,s0) |
536 |
|
537 |
/usr/lib/systemd/system/ypbind.*\.service -- gen_context(system_u:object_r:ypbind_unit_t,s0) |
538 |
|
539 |
diff --git a/policy/modules/contrib/nis.te b/policy/modules/contrib/nis.te |
540 |
index 0fda4fa..c49ecb0 100644 |
541 |
--- a/policy/modules/contrib/nis.te |
542 |
+++ b/policy/modules/contrib/nis.te |
543 |
@@ -1,4 +1,4 @@ |
544 |
-policy_module(nis, 1.15.0) |
545 |
+policy_module(nis, 1.15.1) |
546 |
|
547 |
######################################## |
548 |
# |
549 |
|
550 |
diff --git a/policy/modules/contrib/nut.fc b/policy/modules/contrib/nut.fc |
551 |
index 54ab902..5fa41e6 100644 |
552 |
--- a/policy/modules/contrib/nut.fc |
553 |
+++ b/policy/modules/contrib/nut.fc |
554 |
@@ -4,10 +4,6 @@ |
555 |
/etc/rc\.d/init\.d/nut-driver -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) |
556 |
/etc/rc\.d/init\.d/nut-server -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) |
557 |
|
558 |
-/sbin/upsd -- gen_context(system_u:object_r:nut_upsd_exec_t,s0) |
559 |
-/sbin/upsdrvctl -- gen_context(system_u:object_r:nut_upsdrvctl_exec_t,s0) |
560 |
-/sbin/upsmon -- gen_context(system_u:object_r:nut_upsmon_exec_t,s0) |
561 |
- |
562 |
/usr/lib/cgi-bin/nut/upsimage\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) |
563 |
/usr/lib/cgi-bin/nut/upsset\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) |
564 |
/usr/lib/cgi-bin/nut/upsstats\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) |
565 |
|
566 |
diff --git a/policy/modules/contrib/nut.te b/policy/modules/contrib/nut.te |
567 |
index 5471e63..8086281 100644 |
568 |
--- a/policy/modules/contrib/nut.te |
569 |
+++ b/policy/modules/contrib/nut.te |
570 |
@@ -1,4 +1,4 @@ |
571 |
-policy_module(nut, 1.6.0) |
572 |
+policy_module(nut, 1.6.1) |
573 |
|
574 |
######################################## |
575 |
# |
576 |
|
577 |
diff --git a/policy/modules/contrib/oddjob.fc b/policy/modules/contrib/oddjob.fc |
578 |
index 243a809..d20f5ea 100644 |
579 |
--- a/policy/modules/contrib/oddjob.fc |
580 |
+++ b/policy/modules/contrib/oddjob.fc |
581 |
@@ -1,5 +1,3 @@ |
582 |
-/sbin/mkhomedir_helper -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) |
583 |
- |
584 |
/usr/lib/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) |
585 |
|
586 |
/usr/libexec/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) |
587 |
|
588 |
diff --git a/policy/modules/contrib/oddjob.te b/policy/modules/contrib/oddjob.te |
589 |
index cf72de7..c01d4f6 100644 |
590 |
--- a/policy/modules/contrib/oddjob.te |
591 |
+++ b/policy/modules/contrib/oddjob.te |
592 |
@@ -1,4 +1,4 @@ |
593 |
-policy_module(oddjob, 1.11.0) |
594 |
+policy_module(oddjob, 1.11.1) |
595 |
|
596 |
######################################## |
597 |
# |
598 |
|
599 |
diff --git a/policy/modules/contrib/pcmcia.fc b/policy/modules/contrib/pcmcia.fc |
600 |
index e4538bc..b508069 100644 |
601 |
--- a/policy/modules/contrib/pcmcia.fc |
602 |
+++ b/policy/modules/contrib/pcmcia.fc |
603 |
@@ -1,8 +1,5 @@ |
604 |
/etc/apm/event\.d/pcmcia -- gen_context(system_u:object_r:cardmgr_exec_t,s0) |
605 |
|
606 |
-/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) |
607 |
-/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) |
608 |
- |
609 |
/usr/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) |
610 |
/usr/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) |
611 |
|
612 |
|
613 |
diff --git a/policy/modules/contrib/pcmcia.te b/policy/modules/contrib/pcmcia.te |
614 |
index b845487..ceab576 100644 |
615 |
--- a/policy/modules/contrib/pcmcia.te |
616 |
+++ b/policy/modules/contrib/pcmcia.te |
617 |
@@ -1,4 +1,4 @@ |
618 |
-policy_module(pcmcia, 1.8.0) |
619 |
+policy_module(pcmcia, 1.8.1) |
620 |
|
621 |
######################################## |
622 |
# |
623 |
|
624 |
diff --git a/policy/modules/contrib/plymouthd.fc b/policy/modules/contrib/plymouthd.fc |
625 |
index 0f2fc4b..8eab91b 100644 |
626 |
--- a/policy/modules/contrib/plymouthd.fc |
627 |
+++ b/policy/modules/contrib/plymouthd.fc |
628 |
@@ -1,7 +1,3 @@ |
629 |
-/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) |
630 |
- |
631 |
-/sbin/plymouthd -- gen_context(system_u:object_r:plymouthd_exec_t,s0) |
632 |
- |
633 |
/usr/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) |
634 |
|
635 |
# Systemd unit file |
636 |
|
637 |
diff --git a/policy/modules/contrib/plymouthd.te b/policy/modules/contrib/plymouthd.te |
638 |
index 3e19efb..c9c0404 100644 |
639 |
--- a/policy/modules/contrib/plymouthd.te |
640 |
+++ b/policy/modules/contrib/plymouthd.te |
641 |
@@ -1,4 +1,4 @@ |
642 |
-policy_module(plymouthd, 1.4.0) |
643 |
+policy_module(plymouthd, 1.4.1) |
644 |
|
645 |
######################################## |
646 |
# |
647 |
|
648 |
diff --git a/policy/modules/contrib/portmap.fc b/policy/modules/contrib/portmap.fc |
649 |
index 9264840..d15c707 100644 |
650 |
--- a/policy/modules/contrib/portmap.fc |
651 |
+++ b/policy/modules/contrib/portmap.fc |
652 |
@@ -1,9 +1,5 @@ |
653 |
/etc/rc\.d/init\.d/portmap -- gen_context(system_u:object_r:portmap_initrc_exec_t,s0) |
654 |
|
655 |
-/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) |
656 |
-/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) |
657 |
-/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) |
658 |
- |
659 |
/usr/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) |
660 |
/usr/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) |
661 |
/usr/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) |
662 |
|
663 |
diff --git a/policy/modules/contrib/portmap.te b/policy/modules/contrib/portmap.te |
664 |
index b5abc87..292b3aa 100644 |
665 |
--- a/policy/modules/contrib/portmap.te |
666 |
+++ b/policy/modules/contrib/portmap.te |
667 |
@@ -1,4 +1,4 @@ |
668 |
-policy_module(portmap, 1.13.0) |
669 |
+policy_module(portmap, 1.13.1) |
670 |
|
671 |
######################################## |
672 |
# |
673 |
|
674 |
diff --git a/policy/modules/contrib/portreserve.fc b/policy/modules/contrib/portreserve.fc |
675 |
index 0207d6c..de7da13 100644 |
676 |
--- a/policy/modules/contrib/portreserve.fc |
677 |
+++ b/policy/modules/contrib/portreserve.fc |
678 |
@@ -2,8 +2,6 @@ |
679 |
|
680 |
/etc/rc\.d/init\.d/portreserve -- gen_context(system_u:object_r:portreserve_initrc_exec_t,s0) |
681 |
|
682 |
-/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) |
683 |
- |
684 |
/usr/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) |
685 |
|
686 |
/run/portreserve(/.*)? gen_context(system_u:object_r:portreserve_var_run_t,s0) |
687 |
|
688 |
diff --git a/policy/modules/contrib/portreserve.te b/policy/modules/contrib/portreserve.te |
689 |
index 4aa79a4..7e05b61 100644 |
690 |
--- a/policy/modules/contrib/portreserve.te |
691 |
+++ b/policy/modules/contrib/portreserve.te |
692 |
@@ -1,4 +1,4 @@ |
693 |
-policy_module(portreserve, 1.6.0) |
694 |
+policy_module(portreserve, 1.6.1) |
695 |
|
696 |
######################################## |
697 |
# |
698 |
|
699 |
diff --git a/policy/modules/contrib/ppp.fc b/policy/modules/contrib/ppp.fc |
700 |
index 0b03de1..d31591a 100644 |
701 |
--- a/policy/modules/contrib/ppp.fc |
702 |
+++ b/policy/modules/contrib/ppp.fc |
703 |
@@ -9,9 +9,6 @@ HOME_DIR/\.ppprc -- gen_context(system_u:object_r:ppp_home_t,s0) |
704 |
/etc/ppp/resolv\.conf -- gen_context(system_u:object_r:pppd_etc_rw_t,s0) |
705 |
/etc/ppp/(auth|ip(v6|x)?)-(up|down) -- gen_context(system_u:object_r:pppd_initrc_exec_t,s0) |
706 |
|
707 |
-/sbin/ppp-watch -- gen_context(system_u:object_r:pppd_exec_t,s0) |
708 |
-/sbin/pppoe-server -- gen_context(system_u:object_r:pppd_exec_t,s0) |
709 |
- |
710 |
/usr/lib/systemd/system/ppp.*\.service -- gen_context(system_u:object_r:pppd_unit_t,s0) |
711 |
|
712 |
/usr/sbin/ipppd -- gen_context(system_u:object_r:pppd_exec_t,s0) |
713 |
|
714 |
diff --git a/policy/modules/contrib/ppp.te b/policy/modules/contrib/ppp.te |
715 |
index ba85666..2771882 100644 |
716 |
--- a/policy/modules/contrib/ppp.te |
717 |
+++ b/policy/modules/contrib/ppp.te |
718 |
@@ -1,4 +1,4 @@ |
719 |
-policy_module(ppp, 1.17.0) |
720 |
+policy_module(ppp, 1.17.1) |
721 |
|
722 |
######################################## |
723 |
# |
724 |
|
725 |
diff --git a/policy/modules/contrib/prelude.fc b/policy/modules/contrib/prelude.fc |
726 |
index fd4ccde..75df3cf 100644 |
727 |
--- a/policy/modules/contrib/prelude.fc |
728 |
+++ b/policy/modules/contrib/prelude.fc |
729 |
@@ -4,8 +4,6 @@ |
730 |
/etc/rc\.d/init\.d/prelude-lml -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) |
731 |
/etc/rc\.d/init\.d/prelude-manager -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) |
732 |
|
733 |
-/sbin/audisp-prelude -- gen_context(system_u:object_r:prelude_audisp_exec_t,s0) |
734 |
- |
735 |
/usr/bin/prelude-correlator -- gen_context(system_u:object_r:prelude_correlator_exec_t,s0) |
736 |
/usr/bin/prelude-lml -- gen_context(system_u:object_r:prelude_lml_exec_t,s0) |
737 |
/usr/bin/prelude-manager -- gen_context(system_u:object_r:prelude_exec_t,s0) |
738 |
|
739 |
diff --git a/policy/modules/contrib/prelude.te b/policy/modules/contrib/prelude.te |
740 |
index d3aa038..4f14f0b 100644 |
741 |
--- a/policy/modules/contrib/prelude.te |
742 |
+++ b/policy/modules/contrib/prelude.te |
743 |
@@ -1,4 +1,4 @@ |
744 |
-policy_module(prelude, 1.7.0) |
745 |
+policy_module(prelude, 1.7.1) |
746 |
|
747 |
######################################## |
748 |
# |
749 |
|
750 |
diff --git a/policy/modules/contrib/quota.fc b/policy/modules/contrib/quota.fc |
751 |
index a609318..c3d05ba 100644 |
752 |
--- a/policy/modules/contrib/quota.fc |
753 |
+++ b/policy/modules/contrib/quota.fc |
754 |
@@ -10,9 +10,6 @@ HOME_DIR/a?quota\.(user|group) -- gen_context(system_u:object_r:quota_db_t,s0) |
755 |
|
756 |
/etc/rc\.d/init\.d/quota_nld -- gen_context(system_u:object_r:quota_nld_initrc_exec_t,s0) |
757 |
|
758 |
-/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) |
759 |
-/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) |
760 |
- |
761 |
/usr/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) |
762 |
/usr/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) |
763 |
/usr/sbin/quota_nld -- gen_context(system_u:object_r:quota_nld_exec_t,s0) |
764 |
|
765 |
diff --git a/policy/modules/contrib/quota.te b/policy/modules/contrib/quota.te |
766 |
index 95262d4..9952f53 100644 |
767 |
--- a/policy/modules/contrib/quota.te |
768 |
+++ b/policy/modules/contrib/quota.te |
769 |
@@ -1,4 +1,4 @@ |
770 |
-policy_module(quota, 1.9.0) |
771 |
+policy_module(quota, 1.9.1) |
772 |
|
773 |
######################################## |
774 |
# |
775 |
|
776 |
diff --git a/policy/modules/contrib/raid.fc b/policy/modules/contrib/raid.fc |
777 |
index dc17e79..dc26d8d 100644 |
778 |
--- a/policy/modules/contrib/raid.fc |
779 |
+++ b/policy/modules/contrib/raid.fc |
780 |
@@ -3,14 +3,6 @@ |
781 |
|
782 |
/etc/rc\.d/init\.d/mdmonitor -- gen_context(system_u:object_r:mdadm_initrc_exec_t,s0) |
783 |
|
784 |
-/sbin/iprdump -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
785 |
-/sbin/iprinit -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
786 |
-/sbin/iprupdate -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
787 |
-/sbin/mdadm -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
788 |
-/sbin/mdmon -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
789 |
-/sbin/mdmpd -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
790 |
-/sbin/raid-check -- gen_context(system_u:object_r:mdadm_exec_t,s0) |
791 |
- |
792 |
# Systemd unit files |
793 |
/usr/lib/systemd/system/[^/]*mdadm-.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) |
794 |
/usr/lib/systemd/system/[^/]*mdmon.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) |
795 |
|
796 |
diff --git a/policy/modules/contrib/raid.te b/policy/modules/contrib/raid.te |
797 |
index 172bae9..ad21e09 100644 |
798 |
--- a/policy/modules/contrib/raid.te |
799 |
+++ b/policy/modules/contrib/raid.te |
800 |
@@ -1,4 +1,4 @@ |
801 |
-policy_module(raid, 1.17.0) |
802 |
+policy_module(raid, 1.17.1) |
803 |
|
804 |
######################################## |
805 |
# |
806 |
|
807 |
diff --git a/policy/modules/contrib/rdisc.fc b/policy/modules/contrib/rdisc.fc |
808 |
index e9765c0..168de32 100644 |
809 |
--- a/policy/modules/contrib/rdisc.fc |
810 |
+++ b/policy/modules/contrib/rdisc.fc |
811 |
@@ -1,3 +1 @@ |
812 |
-/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) |
813 |
- |
814 |
/usr/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) |
815 |
|
816 |
diff --git a/policy/modules/contrib/rdisc.te b/policy/modules/contrib/rdisc.te |
817 |
index 9196c1d..ea6d2d9 100644 |
818 |
--- a/policy/modules/contrib/rdisc.te |
819 |
+++ b/policy/modules/contrib/rdisc.te |
820 |
@@ -1,4 +1,4 @@ |
821 |
-policy_module(rdisc, 1.8.0) |
822 |
+policy_module(rdisc, 1.8.1) |
823 |
|
824 |
######################################## |
825 |
# |
826 |
|
827 |
diff --git a/policy/modules/contrib/readahead.fc b/policy/modules/contrib/readahead.fc |
828 |
index 9519bd8..5932e20 100644 |
829 |
--- a/policy/modules/contrib/readahead.fc |
830 |
+++ b/policy/modules/contrib/readahead.fc |
831 |
@@ -1,5 +1,3 @@ |
832 |
-/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) |
833 |
- |
834 |
/usr/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) |
835 |
|
836 |
/var/lib/readahead(/.*)? gen_context(system_u:object_r:readahead_var_lib_t,s0) |
837 |
|
838 |
diff --git a/policy/modules/contrib/readahead.te b/policy/modules/contrib/readahead.te |
839 |
index 9b2d53f..080c0ad 100644 |
840 |
--- a/policy/modules/contrib/readahead.te |
841 |
+++ b/policy/modules/contrib/readahead.te |
842 |
@@ -1,4 +1,4 @@ |
843 |
-policy_module(readahead, 1.15.0) |
844 |
+policy_module(readahead, 1.15.1) |
845 |
|
846 |
######################################## |
847 |
# |
848 |
|
849 |
diff --git a/policy/modules/contrib/resmgr.fc b/policy/modules/contrib/resmgr.fc |
850 |
index 9dec87b..138f76e 100644 |
851 |
--- a/policy/modules/contrib/resmgr.fc |
852 |
+++ b/policy/modules/contrib/resmgr.fc |
853 |
@@ -2,8 +2,6 @@ |
854 |
|
855 |
/etc/rc\.d/init\.d/resmgr -- gen_context(system_u:object_r:resmgrd_initrc_exec_t,s0) |
856 |
|
857 |
-/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) |
858 |
- |
859 |
/usr/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) |
860 |
|
861 |
/run/\.resmgr_socket -s gen_context(system_u:object_r:resmgrd_var_run_t,s0) |
862 |
|
863 |
diff --git a/policy/modules/contrib/resmgr.te b/policy/modules/contrib/resmgr.te |
864 |
index db7eca5..25e4067 100644 |
865 |
--- a/policy/modules/contrib/resmgr.te |
866 |
+++ b/policy/modules/contrib/resmgr.te |
867 |
@@ -1,4 +1,4 @@ |
868 |
-policy_module(resmgr, 1.5.0) |
869 |
+policy_module(resmgr, 1.5.1) |
870 |
|
871 |
######################################## |
872 |
# |
873 |
|
874 |
diff --git a/policy/modules/contrib/rpc.fc b/policy/modules/contrib/rpc.fc |
875 |
index 17ad35a..9d6d524 100644 |
876 |
--- a/policy/modules/contrib/rpc.fc |
877 |
+++ b/policy/modules/contrib/rpc.fc |
878 |
@@ -4,9 +4,6 @@ |
879 |
/etc/rc\.d/init\.d/nfslock -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) |
880 |
/etc/rc\.d/init\.d/rpcidmapd -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) |
881 |
|
882 |
-/sbin/rpc\..* -- gen_context(system_u:object_r:rpcd_exec_t,s0) |
883 |
-/sbin/sm-notify -- gen_context(system_u:object_r:rpcd_exec_t,s0) |
884 |
- |
885 |
/usr/lib/systemd/system/nfs.*\.service -- gen_context(system_u:object_r:nfsd_unit_t,s0) |
886 |
/usr/lib/systemd/system/rpc.*\.service -- gen_context(system_u:object_r:rpcd_unit_t,s0) |
887 |
|
888 |
|
889 |
diff --git a/policy/modules/contrib/rpc.te b/policy/modules/contrib/rpc.te |
890 |
index 2e47156..cf1f775 100644 |
891 |
--- a/policy/modules/contrib/rpc.te |
892 |
+++ b/policy/modules/contrib/rpc.te |
893 |
@@ -1,4 +1,4 @@ |
894 |
-policy_module(rpc, 1.19.0) |
895 |
+policy_module(rpc, 1.19.1) |
896 |
|
897 |
######################################## |
898 |
# |
899 |
|
900 |
diff --git a/policy/modules/contrib/rpcbind.fc b/policy/modules/contrib/rpcbind.fc |
901 |
index b4bb017..35f6ae4 100644 |
902 |
--- a/policy/modules/contrib/rpcbind.fc |
903 |
+++ b/policy/modules/contrib/rpcbind.fc |
904 |
@@ -1,7 +1,5 @@ |
905 |
/etc/rc\.d/init\.d/rpcbind -- gen_context(system_u:object_r:rpcbind_initrc_exec_t,s0) |
906 |
|
907 |
-/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) |
908 |
- |
909 |
/usr/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) |
910 |
|
911 |
/var/cache/rpcbind(/.*)? gen_context(system_u:object_r:rpcbind_var_lib_t,s0) |
912 |
|
913 |
diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/contrib/rpcbind.te |
914 |
index e3a4cc0..8e75226 100644 |
915 |
--- a/policy/modules/contrib/rpcbind.te |
916 |
+++ b/policy/modules/contrib/rpcbind.te |
917 |
@@ -1,4 +1,4 @@ |
918 |
-policy_module(rpcbind, 1.11.0) |
919 |
+policy_module(rpcbind, 1.11.1) |
920 |
|
921 |
######################################## |
922 |
# |
923 |
|
924 |
diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc |
925 |
index e4c2850..71c90c7 100644 |
926 |
--- a/policy/modules/contrib/rpm.fc |
927 |
+++ b/policy/modules/contrib/rpm.fc |
928 |
@@ -1,9 +1,5 @@ |
929 |
-/bin/rpm -- gen_context(system_u:object_r:rpm_exec_t,s0) |
930 |
- |
931 |
/etc/rc\.d/init\.d/bcfg2 -- gen_context(system_u:object_r:rpm_initrc_exec_t,s0) |
932 |
|
933 |
-/sbin/yast2 -- gen_context(system_u:object_r:rpm_exec_t,s0) |
934 |
- |
935 |
/usr/bin/debuginfo-install -- gen_context(system_u:object_r:debuginfo_exec_t,s0) |
936 |
/usr/bin/fedora-rmdevelrpms -- gen_context(system_u:object_r:rpm_exec_t,s0) |
937 |
/usr/bin/online_update -- gen_context(system_u:object_r:rpm_exec_t,s0) |
938 |
|
939 |
diff --git a/policy/modules/contrib/rpm.te b/policy/modules/contrib/rpm.te |
940 |
index 2a709ce..6ab5fd9 100644 |
941 |
--- a/policy/modules/contrib/rpm.te |
942 |
+++ b/policy/modules/contrib/rpm.te |
943 |
@@ -1,4 +1,4 @@ |
944 |
-policy_module(rpm, 1.19.0) |
945 |
+policy_module(rpm, 1.19.1) |
946 |
|
947 |
######################################## |
948 |
# |
949 |
|
950 |
diff --git a/policy/modules/contrib/shorewall.fc b/policy/modules/contrib/shorewall.fc |
951 |
index 3349532..e92567a 100644 |
952 |
--- a/policy/modules/contrib/shorewall.fc |
953 |
+++ b/policy/modules/contrib/shorewall.fc |
954 |
@@ -3,9 +3,6 @@ |
955 |
/etc/shorewall(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) |
956 |
/etc/shorewall-lite(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) |
957 |
|
958 |
-/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) |
959 |
-/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) |
960 |
- |
961 |
/usr/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) |
962 |
/usr/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) |
963 |
|
964 |
|
965 |
diff --git a/policy/modules/contrib/shorewall.te b/policy/modules/contrib/shorewall.te |
966 |
index 29661de..e2e6c30 100644 |
967 |
--- a/policy/modules/contrib/shorewall.te |
968 |
+++ b/policy/modules/contrib/shorewall.te |
969 |
@@ -1,4 +1,4 @@ |
970 |
-policy_module(shorewall, 1.6.0) |
971 |
+policy_module(shorewall, 1.6.1) |
972 |
|
973 |
######################################## |
974 |
# |
975 |
|
976 |
diff --git a/policy/modules/contrib/shutdown.fc b/policy/modules/contrib/shutdown.fc |
977 |
index 199c689..e6730a0 100644 |
978 |
--- a/policy/modules/contrib/shutdown.fc |
979 |
+++ b/policy/modules/contrib/shutdown.fc |
980 |
@@ -1,9 +1,5 @@ |
981 |
/etc/nologin -- gen_context(system_u:object_r:shutdown_etc_t,s0) |
982 |
|
983 |
-/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) |
984 |
- |
985 |
-/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) |
986 |
- |
987 |
/usr/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) |
988 |
|
989 |
/usr/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) |
990 |
|
991 |
diff --git a/policy/modules/contrib/shutdown.te b/policy/modules/contrib/shutdown.te |
992 |
index e10149f..6a0b126 100644 |
993 |
--- a/policy/modules/contrib/shutdown.te |
994 |
+++ b/policy/modules/contrib/shutdown.te |
995 |
@@ -1,4 +1,4 @@ |
996 |
-policy_module(shutdown, 1.4.0) |
997 |
+policy_module(shutdown, 1.4.1) |
998 |
|
999 |
######################################## |
1000 |
# |
1001 |
|
1002 |
diff --git a/policy/modules/contrib/usbmodules.fc b/policy/modules/contrib/usbmodules.fc |
1003 |
index 02d7253..66604b5 100644 |
1004 |
--- a/policy/modules/contrib/usbmodules.fc |
1005 |
+++ b/policy/modules/contrib/usbmodules.fc |
1006 |
@@ -1,3 +1 @@ |
1007 |
-/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) |
1008 |
- |
1009 |
/usr/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) |
1010 |
|
1011 |
diff --git a/policy/modules/contrib/usbmodules.te b/policy/modules/contrib/usbmodules.te |
1012 |
index 279e511..d4307b9 100644 |
1013 |
--- a/policy/modules/contrib/usbmodules.te |
1014 |
+++ b/policy/modules/contrib/usbmodules.te |
1015 |
@@ -1,4 +1,4 @@ |
1016 |
-policy_module(usbmodules, 1.3.0) |
1017 |
+policy_module(usbmodules, 1.3.1) |
1018 |
|
1019 |
######################################## |
1020 |
# |
1021 |
|
1022 |
diff --git a/policy/modules/contrib/vpn.fc b/policy/modules/contrib/vpn.fc |
1023 |
index 02701c3..1cd43c6 100644 |
1024 |
--- a/policy/modules/contrib/vpn.fc |
1025 |
+++ b/policy/modules/contrib/vpn.fc |
1026 |
@@ -1,5 +1,3 @@ |
1027 |
-/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) |
1028 |
- |
1029 |
/usr/bin/openconnect -- gen_context(system_u:object_r:vpnc_exec_t,s0) |
1030 |
|
1031 |
/usr/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) |
1032 |
|
1033 |
diff --git a/policy/modules/contrib/vpn.te b/policy/modules/contrib/vpn.te |
1034 |
index e11d751..85353fa 100644 |
1035 |
--- a/policy/modules/contrib/vpn.te |
1036 |
+++ b/policy/modules/contrib/vpn.te |
1037 |
@@ -1,4 +1,4 @@ |
1038 |
-policy_module(vpn, 1.17.0) |
1039 |
+policy_module(vpn, 1.17.1) |
1040 |
|
1041 |
######################################## |
1042 |
# |
1043 |
|
1044 |
diff --git a/policy/modules/contrib/zosremote.fc b/policy/modules/contrib/zosremote.fc |
1045 |
index 7a7fc61..adfd4a2 100644 |
1046 |
--- a/policy/modules/contrib/zosremote.fc |
1047 |
+++ b/policy/modules/contrib/zosremote.fc |
1048 |
@@ -1,3 +1 @@ |
1049 |
-/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) |
1050 |
- |
1051 |
/usr/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) |
1052 |
|
1053 |
diff --git a/policy/modules/contrib/zosremote.te b/policy/modules/contrib/zosremote.te |
1054 |
index bc6a5db..7139cde 100644 |
1055 |
--- a/policy/modules/contrib/zosremote.te |
1056 |
+++ b/policy/modules/contrib/zosremote.te |
1057 |
@@ -1,4 +1,4 @@ |
1058 |
-policy_module(zosremote, 1.2.0) |
1059 |
+policy_module(zosremote, 1.2.1) |
1060 |
|
1061 |
######################################## |
1062 |
# |