[gentoo-commits] proj/hardened-refpolicy:testing commit in: policy/modules/contrib/

[gentoo-commits] proj/hardened-refpolicy:testing commit in: policy/modules/contrib/

[Sven Vermeulen]

commit:     651e8313fa132e001f07edc4cafdcf50b1b0a031
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Wed Aug  6 18:07:32 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Wed Aug  6 18:07:32 2014 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=651e8313

Merged upstream, so can be removed from the ifdef distro_gentoo

---
 policy/modules/contrib/apache.fc | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/policy/modules/contrib/apache.fc b/policy/modules/contrib/apache.fc
index 0a2dbfd..4222f2e 100644
--- a/policy/modules/contrib/apache.fc
+++ b/policy/modules/contrib/apache.fc
@@ -175,19 +175,4 @@ ifdef(`distro_suse',`
 
 ifdef(`distro_gentoo',`
 /usr/share/build-1/libtool	--	gen_context(system_u:object_r:bin_t,s0)
-
-# Support for Hiawatha bug 513362
-/etc/hiawatha(/.*)?	gen_context(system_u:object_r:httpd_config_t,s0)
-
-/etc/rc\.d/init\.d/hiawatha	--	gen_context(system_u:object_r:httpd_initrc_exec_t,s0)
-
-/usr/bin/ssi-cgi	--	gen_context(system_u:object_r:httpd_exec_t,s0)
-
-/usr/sbin/cgi-wrapper	--	gen_context(system_u:object_r:httpd_exec_t,s0)
-/usr/sbin/hiawatha	--	gen_context(system_u:object_r:httpd_exec_t,s0)
-/usr/sbin/wigwam	--	gen_context(system_u:object_r:httpd_exec_t,s0)
-
-/var/lib/hiawatha(/.*)?	gen_context(system_u:object_r:httpd_var_lib_t,s0)
-
-/var/log/hiawatha(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
 ')

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Sven Vermeulen]

commit:     6ebb5fbf42a00295958c71b7f3281c728f3ce7a8
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Fri Aug  8 11:27:03 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Fri Aug  8 11:27:03 2014 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=6ebb5fbf

Allow resolvconf to configure dnsmasq

Resolvconf needs to be able to set which dns servers dnsmasq uses.
Bug #519240

---
 policy/modules/contrib/resolvconf.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/policy/modules/contrib/resolvconf.te b/policy/modules/contrib/resolvconf.te
index 7fbd00d..32cba23 100644
--- a/policy/modules/contrib/resolvconf.te
+++ b/policy/modules/contrib/resolvconf.te
@@ -44,6 +44,11 @@ optional_policy(`
 	term_dontaudit_use_console(resolvconf_t)
 ')
 
+optional_policy(`
+	dnsmasq_read_config(resolvconf_t)
+	dnsmasq_write_config(resolvconf_t)
+')
+
 #########################################
 #
 # Resolvconf client policy

[gentoo-commits] proj/hardened-refpolicy:testing commit in: policy/modules/contrib/

[Sven Vermeulen]

commit:     6ebb5fbf42a00295958c71b7f3281c728f3ce7a8
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Fri Aug  8 11:27:03 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Fri Aug  8 11:27:03 2014 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=6ebb5fbf

Allow resolvconf to configure dnsmasq

Resolvconf needs to be able to set which dns servers dnsmasq uses.
Bug #519240

---
 policy/modules/contrib/resolvconf.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/policy/modules/contrib/resolvconf.te b/policy/modules/contrib/resolvconf.te
index 7fbd00d..32cba23 100644
--- a/policy/modules/contrib/resolvconf.te
+++ b/policy/modules/contrib/resolvconf.te
@@ -44,6 +44,11 @@ optional_policy(`
 	term_dontaudit_use_console(resolvconf_t)
 ')
 
+optional_policy(`
+	dnsmasq_read_config(resolvconf_t)
+	dnsmasq_write_config(resolvconf_t)
+')
+
 #########################################
 #
 # Resolvconf client policy