From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id C9F031389E2 for ; Thu, 4 Dec 2014 01:46:20 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E808EE086A; Thu, 4 Dec 2014 01:46:18 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 278E2E0835 for ; Thu, 4 Dec 2014 01:46:17 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 03C573405FE for ; Thu, 4 Dec 2014 01:46:17 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 28DC5B85B for ; Thu, 4 Dec 2014 01:46:13 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1417639245.7573f100596f7b45113cb18cbe8a6287d13783c6.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/Changelog X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 7573f100596f7b45113cb18cbe8a6287d13783c6 X-VCS-Branch: master Date: Thu, 4 Dec 2014 01:46:13 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 84662ac5-0d4b-4440-990c-7f98952f5e93 X-Archives-Hash: 0c696399e5fa7b9aecc756636c5790e6 commit: 7573f100596f7b45113cb18cbe8a6287d13783c6 Author: Chris PeBenito tresys com> AuthorDate: Wed Dec 3 18:37:38 2014 +0000 Commit: Jason Zaman perfinion com> CommitDate: Wed Dec 3 20:40:45 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=7573f100 Update Changelog for release. --- policy/modules/contrib/Changelog | 108 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 108 insertions(+) diff --git a/policy/modules/contrib/Changelog b/policy/modules/contrib/Changelog index bff3eda..66e7d7c 100644 --- a/policy/modules/contrib/Changelog +++ b/policy/modules/contrib/Changelog @@ -1,3 +1,111 @@ +* Wed Dec 03 2014 Chris PeBenito - 2.20141203 +Chris PeBenito (26): + Whitespace fix in ntp.fc. + Module version bump for ntp fc entries from Laurent Bigonville. + Whitespace fix in shibboleth.te. + Module version bump for new shibboleth module from Martin Lang. + Module version bump for apt fix from Nicolas Iooss. + Module version bump for dnsmasq MTU fix from Sven Vermeulen. + Module version bump for apache content interfaces from Sven Vermeulen. + Module version bump for gitweb fc entry on Debian and ArchLinux from + Nicolas Iooss. + Module version bump for fc regex fixes from Nicolas Iooss. + Module version bump for various fixes from Laurent Bigonville. + Module version bump for ModemManager fc entry from Laurent Bigonville. + Add missing cron_admin_role() dependency. + Move sock_file filetrans to fcron_crond conditional. + Module version bump for cron and snort updates from Sven Vermeulen. + Module version bump for java icedtea fc entries from Sven Vermeulen. + Module version bump for apache/mlogc patch from Elia Pinto. + Remove name from ntp-kod ntp_drift_t filetrans. + Module version bump for ntp-kod file support from Jason Zaman. + Module version bump for init_daemon_pid_file use from Sven Vermeulen. + Module version bump for alsa and hiawatha fixes from Sven Vermeulen. + Module version bump for ftp and tftp fixes from Nicolas Iooss. + Move irc exec lines. + Module version bump for irc re-exec itself patch from Luis Ressel. + Module version bump for NetworkManager fc fix for ArchLinux from Nicolas + Iooss. + Module version bump for _admin fixes from Jason Zaman. + Bump module versions for release. + +Dominick Grift (3): + Module version bump for changes to the loadkeys module by Nicolas Iooss + cron: that boolean identifier does not exist also require it + Module version bump for changes to the networkmanager modules by Lubomir + Rintel + +Elia Pinto (1): + apache.te: Add labelling support for /var/log/mlogc + +Jason Zaman (20): + Add filetrans for ntp-kod file + ccs: syntax errors in ccs_admin interface + condor: syntax error in condor_admin + distcc: syntax error in distcc_admin + ftp: syntax error in ftp_admin + kerberos: syntax error in kerberos_admin + kismet: syntax error in kismet_admin + nut: syntax error in nut_admin + prelude: syntax error in prelude_admin + psad: syntax error in psad_admin + quota: syntax error in quota_admin + rpcbind: syntax error in rpcbind_admin + rpm: syntax error in rpm_admin + systemtap: syntax error in stapserver_admin + svnserve: syntax error in svnserve_admin + uptime: syntax error in uptime_admin + zabbix: syntax error in zabbix_admin + remove pyzor_role() from pyzor_admin() + remove spamassassin_role() from spamassassin_admin() + rsync: syntax error in rsync_admin + +Laurent Bigonville (7): + Add several fcontext for debian specific paths for ntp + Fix dbus_all_session_domain(), session_bus_type is an attribute + Allow gconfd to be started by the session bus + Fix the usage of dbus_spec_session_domain() interface + Properly label exim4 initscript under Debian + Add new gnome_spec_domtrans_all_gkeyringd() interface + Label /usr/sbin/ModemManager as modemmanager_exec_t + +Lubomir Rintel (1): + Allow NetworkManager to create Bluetooth SDP sockets + +Luis Ressel (1): + irc.te: Allow irssi to re-execute itself + +Martin Lang (1): + Add a policy module for shibboleth authentication + +Nicolas Iooss (7): + apt: remove non-existing permission set write_dir_perms + Label /usr/share/gitweb/static as httpd_git_content_t + Fix strange file patterns + ftp: fix labels in /var/lock/subsys/ + Label /usr/bin/tftpd as tftpd_exec_t + Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/ + Allow loadkeys to read usr_t files + +Sven Vermeulen (17): + dnsmasq reads MTU sysctl + Support read/append/manage functions for various httpd content + Snort policy updates + fcron socket support + Fix typo in dnsmasq.if + Mark icedtea binaries as java_exec_t + Use init_daemon_pid_file for contrib modules + Enable asound.state.lock support + Add support for Hiawatha web server + Use logging_search_logs, not logging_search_log + Use logging_search_logs, not logging_search_log + Use files_search_etc, not logging_search_etc + Use files_search_etc, not logging_search_etc + Use files_search_etc, not files_search_config + Use corecmd_search_bin, not corecmd_searh_bin + Use fs_search_tmpfs, not files_search_tmpfs + Use domain_auto_trans, not auto_trans + * Tue Mar 11 2014 Chris PeBenito - 2.20140311 Chris PeBenito (17): Minor rearrangement of minidlna lines.