From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B244E139085 for ; Sun, 5 Feb 2017 15:13:50 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B767321C028; Sun, 5 Feb 2017 15:13:44 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 7E70EE0D78 for ; Sun, 5 Feb 2017 15:13:44 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 6A3F834162B for ; Sun, 5 Feb 2017 15:13:43 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 71B463B8E for ; Sun, 5 Feb 2017 15:13:41 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1486307430.110875d7272058d72af8735e08ebbd4704c48d99.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:usrmerge commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/acct.fc policy/modules/contrib/acct.te policy/modules/contrib/alsa.fc policy/modules/contrib/alsa.te policy/modules/contrib/apcupsd.fc policy/modules/contrib/apcupsd.te policy/modules/contrib/cachefilesd.fc policy/modules/contrib/cachefilesd.te policy/modules/contrib/ccs.fc policy/modules/contrib/ccs.te policy/modules/contrib/cgroup.fc policy/modules/contrib/cgroup.te policy/modules/contrib/cpucontrol.fc policy/modules/contrib/cpucontrol.te policy/modules/contrib/cups.fc policy/modules/contrib/cups.te policy/modules/contrib/dbus.fc policy/modules/contrib/dbus.te policy/modules/contrib/devicekit.fc policy/modules/contrib/devicekit.te policy/modules/contrib/drbd.fc policy/modules/contrib/drbd.te policy/modules/contrib/iscsi.fc policy/modules/contrib/iscsi.te policy/modules/contrib/kdump.fc policy/modules/contrib/kdump.te policy/modules/contrib/kudzu.fc policy/modules/contrib/kudzu.te policy/modules/contrib/loadkeys.fc policy/modules/contrib/loadkeys. te policy/modules/contrib/mta.fc policy/modules/contrib/mta.te policy/modules/contrib/networkmanager.fc policy/modules/contrib/networkmanager.te policy/modules/contrib/nis.fc policy/modules/contrib/nis.te policy/modules/contrib/nut.fc policy/modules/contrib/nut.te policy/modules/contrib/oddjob.fc policy/modules/contrib/oddjob.te policy/modules/contrib/pcmcia.fc policy/modules/contrib/pcmcia.te policy/modules/contrib/plymouthd.fc policy/modules/contrib/plymouthd.te policy/modules/contrib/portmap.fc policy/modules/contrib/portmap.te policy/modules/contrib/portreserve.fc policy/modules/contrib/portreserve.te policy/modules/contrib/ppp.fc policy/modules/contrib/ppp.te policy/modules/contrib/prelude.fc policy/modules/contrib/prelude.te policy/modules/contrib/quota.fc policy/modules/contrib/quota.te policy/modules/contrib/raid.fc policy/modules/contrib/raid.te policy/modules/contrib/rdisc.fc policy/modules/contrib/rdisc.te policy/modules/contrib/readahead.fc policy/modules/contrib/readahe ad.te policy/modules/contrib/resmgr.fc policy/modules/contrib/resmgr.te policy/modules/contrib/rpc.fc policy/modules/contrib/rpc.te policy/modules/contrib/rpcbind.fc policy/modules/contrib/rpcbind.te policy/modules/contrib/rpm.fc policy/modules/contrib/rpm.te policy/modules/contrib/shorewall.fc policy/modules/contrib/shorewall.te policy/modules/contrib/shutdown.fc policy/modules/contrib/shutdown.te policy/modules/contrib/usbmodules.fc policy/modules/contrib/usbmodules.te policy/modules/contrib/vpn.fc policy/modules/contrib/vpn.te policy/modules/contrib/zosremote.fc policy/modules/contrib/zosremote.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 110875d7272058d72af8735e08ebbd4704c48d99 X-VCS-Branch: usrmerge Date: Sun, 5 Feb 2017 15:13:41 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 419120f5-2da2-42f6-9c0f-96446a94786b X-Archives-Hash: 60ff24eb7881b39bc319f9e73e8ed2db commit: 110875d7272058d72af8735e08ebbd4704c48d99 Author: Chris PeBenito ieee org> AuthorDate: Sat Feb 4 20:18:43 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sun Feb 5 15:10:30 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=110875d7 Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. policy/modules/contrib/acct.fc | 2 -- policy/modules/contrib/acct.te | 2 +- policy/modules/contrib/alsa.fc | 5 ----- policy/modules/contrib/alsa.te | 2 +- policy/modules/contrib/apcupsd.fc | 2 -- policy/modules/contrib/apcupsd.te | 2 +- policy/modules/contrib/cachefilesd.fc | 2 -- policy/modules/contrib/cachefilesd.te | 2 +- policy/modules/contrib/ccs.fc | 2 -- policy/modules/contrib/ccs.te | 2 +- policy/modules/contrib/cgroup.fc | 4 ---- policy/modules/contrib/cgroup.te | 2 +- policy/modules/contrib/cpucontrol.fc | 4 ---- policy/modules/contrib/cpucontrol.te | 2 +- policy/modules/contrib/cups.fc | 2 -- policy/modules/contrib/cups.te | 2 +- policy/modules/contrib/dbus.fc | 4 ---- policy/modules/contrib/dbus.te | 2 +- policy/modules/contrib/devicekit.fc | 3 --- policy/modules/contrib/devicekit.te | 2 +- policy/modules/contrib/drbd.fc | 3 --- policy/modules/contrib/drbd.te | 2 +- policy/modules/contrib/iscsi.fc | 4 ---- policy/modules/contrib/iscsi.te | 2 +- policy/modules/contrib/kdump.fc | 5 ----- policy/modules/contrib/kdump.te | 2 +- policy/modules/contrib/kudzu.fc | 3 --- policy/modules/contrib/kudzu.te | 2 +- policy/modules/contrib/loadkeys.fc | 3 --- policy/modules/contrib/loadkeys.te | 2 +- policy/modules/contrib/mta.fc | 2 -- policy/modules/contrib/mta.te | 2 +- policy/modules/contrib/networkmanager.fc | 3 --- policy/modules/contrib/networkmanager.te | 2 +- policy/modules/contrib/nis.fc | 2 -- policy/modules/contrib/nis.te | 2 +- policy/modules/contrib/nut.fc | 4 ---- policy/modules/contrib/nut.te | 2 +- policy/modules/contrib/oddjob.fc | 2 -- policy/modules/contrib/oddjob.te | 2 +- policy/modules/contrib/pcmcia.fc | 3 --- policy/modules/contrib/pcmcia.te | 2 +- policy/modules/contrib/plymouthd.fc | 4 ---- policy/modules/contrib/plymouthd.te | 2 +- policy/modules/contrib/portmap.fc | 4 ---- policy/modules/contrib/portmap.te | 2 +- policy/modules/contrib/portreserve.fc | 2 -- policy/modules/contrib/portreserve.te | 2 +- policy/modules/contrib/ppp.fc | 3 --- policy/modules/contrib/ppp.te | 2 +- policy/modules/contrib/prelude.fc | 2 -- policy/modules/contrib/prelude.te | 2 +- policy/modules/contrib/quota.fc | 3 --- policy/modules/contrib/quota.te | 2 +- policy/modules/contrib/raid.fc | 8 -------- policy/modules/contrib/raid.te | 2 +- policy/modules/contrib/rdisc.fc | 2 -- policy/modules/contrib/rdisc.te | 2 +- policy/modules/contrib/readahead.fc | 2 -- policy/modules/contrib/readahead.te | 2 +- policy/modules/contrib/resmgr.fc | 2 -- policy/modules/contrib/resmgr.te | 2 +- policy/modules/contrib/rpc.fc | 3 --- policy/modules/contrib/rpc.te | 2 +- policy/modules/contrib/rpcbind.fc | 2 -- policy/modules/contrib/rpcbind.te | 2 +- policy/modules/contrib/rpm.fc | 4 ---- policy/modules/contrib/rpm.te | 2 +- policy/modules/contrib/shorewall.fc | 3 --- policy/modules/contrib/shorewall.te | 2 +- policy/modules/contrib/shutdown.fc | 4 ---- policy/modules/contrib/shutdown.te | 2 +- policy/modules/contrib/usbmodules.fc | 2 -- policy/modules/contrib/usbmodules.te | 2 +- policy/modules/contrib/vpn.fc | 2 -- policy/modules/contrib/vpn.te | 2 +- policy/modules/contrib/zosremote.fc | 2 -- policy/modules/contrib/zosremote.te | 2 +- 78 files changed, 39 insertions(+), 157 deletions(-) diff --git a/policy/modules/contrib/acct.fc b/policy/modules/contrib/acct.fc index c6d17a2..8a4f7ef 100644 --- a/policy/modules/contrib/acct.fc +++ b/policy/modules/contrib/acct.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/psacct -- gen_context(system_u:object_r:acct_initrc_exec_t,s0) -/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) - /usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) /var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0) diff --git a/policy/modules/contrib/acct.te b/policy/modules/contrib/acct.te index 6f6fd13..aca9d80 100644 --- a/policy/modules/contrib/acct.te +++ b/policy/modules/contrib/acct.te @@ -1,4 +1,4 @@ -policy_module(acct, 1.7.0) +policy_module(acct, 1.7.1) ######################################## # diff --git a/policy/modules/contrib/alsa.fc b/policy/modules/contrib/alsa.fc index 112fc62..f26e239 100644 --- a/policy/modules/contrib/alsa.fc +++ b/policy/modules/contrib/alsa.fc @@ -4,14 +4,9 @@ ifdef(`distro_debian',` /\.config(/.*)? gen_context(system_u:object_r:alsa_var_lib_t,s0) ') -/bin/alsaunmute -- gen_context(system_u:object_r:alsa_exec_t,s0) - /etc/alsa(/.*)? gen_context(system_u:object_r:alsa_etc_t,s0) /etc/asound\.conf gen_context(system_u:object_r:alsa_etc_t,s0) -/sbin/alsactl -- gen_context(system_u:object_r:alsa_exec_t,s0) -/sbin/salsa -- gen_context(system_u:object_r:alsa_exec_t,s0) - # Systemd unit files /usr/lib/systemd/system/[^/]*alsa-restore.* -- gen_context(system_u:object_r:alsa_unit_t,s0) /usr/lib/systemd/system/[^/]*alsa-state.* -- gen_context(system_u:object_r:alsa_unit_t,s0) diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te index f7faa4b..1904667 100644 --- a/policy/modules/contrib/alsa.te +++ b/policy/modules/contrib/alsa.te @@ -1,4 +1,4 @@ -policy_module(alsa, 1.16.0) +policy_module(alsa, 1.16.1) ######################################## # diff --git a/policy/modules/contrib/apcupsd.fc b/policy/modules/contrib/apcupsd.fc index 375989c..c9a7900 100644 --- a/policy/modules/contrib/apcupsd.fc +++ b/policy/modules/contrib/apcupsd.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/apcupsd -- gen_context(system_u:object_r:apcupsd_initrc_exec_t,s0) -/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) - /usr/lib/systemd/system/apcupsd.*\.service -- gen_context(system_u:object_r:apcupsd_unit_t,s0) /usr/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) diff --git a/policy/modules/contrib/apcupsd.te b/policy/modules/contrib/apcupsd.te index 0277a90..e1586b3 100644 --- a/policy/modules/contrib/apcupsd.te +++ b/policy/modules/contrib/apcupsd.te @@ -1,4 +1,4 @@ -policy_module(apcupsd, 1.12.0) +policy_module(apcupsd, 1.12.1) ######################################## # diff --git a/policy/modules/contrib/cachefilesd.fc b/policy/modules/contrib/cachefilesd.fc index 7ee707d..1ddbe60 100644 --- a/policy/modules/contrib/cachefilesd.fc +++ b/policy/modules/contrib/cachefilesd.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/cachefilesd -- gen_context(system_u:object_r:cachefilesd_initrc_exec_t,s0) -/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) - /usr/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) /var/cache/fscache(/.*)? gen_context(system_u:object_r:cachefilesd_cache_t,s0) diff --git a/policy/modules/contrib/cachefilesd.te b/policy/modules/contrib/cachefilesd.te index c8cf94c..14fcf67 100644 --- a/policy/modules/contrib/cachefilesd.te +++ b/policy/modules/contrib/cachefilesd.te @@ -1,4 +1,4 @@ -policy_module(cachefilesd, 1.3.0) +policy_module(cachefilesd, 1.3.1) ######################################## # diff --git a/policy/modules/contrib/ccs.fc b/policy/modules/contrib/ccs.fc index 86c73a7..4bf5e8f 100644 --- a/policy/modules/contrib/ccs.fc +++ b/policy/modules/contrib/ccs.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/((ccs)|(ccsd)) -- gen_context(system_u:object_r:ccs_initrc_exec_t,s0) -/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) - /usr/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) /var/lib/cluster/((ccs)|(ccsd)).* gen_context(system_u:object_r:ccs_var_lib_t,s0) diff --git a/policy/modules/contrib/ccs.te b/policy/modules/contrib/ccs.te index 9bf4039..eacec0b 100644 --- a/policy/modules/contrib/ccs.te +++ b/policy/modules/contrib/ccs.te @@ -1,4 +1,4 @@ -policy_module(ccs, 1.10.0) +policy_module(ccs, 1.10.1) ######################################## # diff --git a/policy/modules/contrib/cgroup.fc b/policy/modules/contrib/cgroup.fc index a77ead6..cfe6b48 100644 --- a/policy/modules/contrib/cgroup.fc +++ b/policy/modules/contrib/cgroup.fc @@ -7,10 +7,6 @@ /etc/rc\.d/init\.d/cgconfig -- gen_context(system_u:object_r:cgconfig_initrc_exec_t,s0) /etc/rc\.d/init\.d/cgred -- gen_context(system_u:object_r:cgred_initrc_exec_t,s0) -/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) -/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) -/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) - /usr/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) /usr/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) /usr/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) diff --git a/policy/modules/contrib/cgroup.te b/policy/modules/contrib/cgroup.te index b9a20ff..5d600a9 100644 --- a/policy/modules/contrib/cgroup.te +++ b/policy/modules/contrib/cgroup.te @@ -1,4 +1,4 @@ -policy_module(cgroup, 1.5.0) +policy_module(cgroup, 1.5.1) ######################################## # diff --git a/policy/modules/contrib/cpucontrol.fc b/policy/modules/contrib/cpucontrol.fc index aa4b21b..06f5d0f 100644 --- a/policy/modules/contrib/cpucontrol.fc +++ b/policy/modules/contrib/cpucontrol.fc @@ -1,7 +1,3 @@ -/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) - -/sbin/microcode_ctl -- gen_context(system_u:object_r:cpucontrol_exec_t,s0) - /usr/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) /usr/sbin/cpufreqd -- gen_context(system_u:object_r:cpuspeed_exec_t,s0) diff --git a/policy/modules/contrib/cpucontrol.te b/policy/modules/contrib/cpucontrol.te index 5b7c320..cff0e16 100644 --- a/policy/modules/contrib/cpucontrol.te +++ b/policy/modules/contrib/cpucontrol.te @@ -1,4 +1,4 @@ -policy_module(cpucontrol, 1.6.0) +policy_module(cpucontrol, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/cups.fc b/policy/modules/contrib/cups.fc index 5ccf2cb..72afd97 100644 --- a/policy/modules/contrib/cups.fc +++ b/policy/modules/contrib/cups.fc @@ -18,8 +18,6 @@ /etc/printcap.* -- gen_context(system_u:object_r:cupsd_rw_etc_t,s0) -/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) - /opt/brother/Printers(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) /opt/gutenprint/ppds(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) diff --git a/policy/modules/contrib/cups.te b/policy/modules/contrib/cups.te index f5bf055..14a4cfd 100644 --- a/policy/modules/contrib/cups.te +++ b/policy/modules/contrib/cups.te @@ -1,4 +1,4 @@ -policy_module(cups, 1.21.0) +policy_module(cups, 1.21.1) ######################################## # diff --git a/policy/modules/contrib/dbus.fc b/policy/modules/contrib/dbus.fc index c96d02a..c7baa6b 100644 --- a/policy/modules/contrib/dbus.fc +++ b/policy/modules/contrib/dbus.fc @@ -2,10 +2,6 @@ HOME_DIR/\.dbus(/.*)? gen_context(system_u:object_r:session_dbusd_home_t,s0) /etc/dbus-.*(/.*)? gen_context(system_u:object_r:dbusd_etc_t,s0) -/bin/dbus-daemon -- gen_context(system_u:object_r:dbusd_exec_t,s0) - -/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) - /usr/bin/dbus-daemon(-1)? -- gen_context(system_u:object_r:dbusd_exec_t,s0) /usr/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) diff --git a/policy/modules/contrib/dbus.te b/policy/modules/contrib/dbus.te index 996fc68..42c7d4f 100644 --- a/policy/modules/contrib/dbus.te +++ b/policy/modules/contrib/dbus.te @@ -1,4 +1,4 @@ -policy_module(dbus, 1.22.0) +policy_module(dbus, 1.22.1) gen_require(` class dbus all_dbus_perms; diff --git a/policy/modules/contrib/devicekit.fc b/policy/modules/contrib/devicekit.fc index 8161451..2b6d443 100644 --- a/policy/modules/contrib/devicekit.fc +++ b/policy/modules/contrib/devicekit.fc @@ -1,6 +1,3 @@ -/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) -/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) - /usr/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) /usr/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) /usr/lib/udisks/udisks-daemon -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) diff --git a/policy/modules/contrib/devicekit.te b/policy/modules/contrib/devicekit.te index 229c6b2..a5926c4 100644 --- a/policy/modules/contrib/devicekit.te +++ b/policy/modules/contrib/devicekit.te @@ -1,4 +1,4 @@ -policy_module(devicekit, 1.6.0) +policy_module(devicekit, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/drbd.fc b/policy/modules/contrib/drbd.fc index 671a3fb..d5d54f7 100644 --- a/policy/modules/contrib/drbd.fc +++ b/policy/modules/contrib/drbd.fc @@ -1,8 +1,5 @@ /etc/rc\.d/init\.d/drbd -- gen_context(system_u:object_r:drbd_initrc_exec_t,s0) -/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) -/sbin/drbdsetup -- gen_context(system_u:object_r:drbd_exec_t,s0) - /usr/lib/ocf/resource.\d/linbit/drbd -- gen_context(system_u:object_r:drbd_exec_t,s0) /usr/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) diff --git a/policy/modules/contrib/drbd.te b/policy/modules/contrib/drbd.te index 0d8ed27..0d1e636 100644 --- a/policy/modules/contrib/drbd.te +++ b/policy/modules/contrib/drbd.te @@ -1,4 +1,4 @@ -policy_module(drbd, 1.2.0) +policy_module(drbd, 1.2.1) ######################################## # diff --git a/policy/modules/contrib/iscsi.fc b/policy/modules/contrib/iscsi.fc index df23b9b..29c1e5c 100644 --- a/policy/modules/contrib/iscsi.fc +++ b/policy/modules/contrib/iscsi.fc @@ -1,9 +1,5 @@ /etc/rc\.d/init\.d/((iscsi)|(iscsid)) -- gen_context(system_u:object_r:iscsi_initrc_exec_t,s0) -/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) -/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) -/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) - /usr/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) /usr/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) /usr/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/contrib/iscsi.te index 54f187c..8061f7e 100644 --- a/policy/modules/contrib/iscsi.te +++ b/policy/modules/contrib/iscsi.te @@ -1,4 +1,4 @@ -policy_module(iscsi, 1.11.0) +policy_module(iscsi, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/kdump.fc b/policy/modules/contrib/kdump.fc index d5ec077..94c0daa 100644 --- a/policy/modules/contrib/kdump.fc +++ b/policy/modules/contrib/kdump.fc @@ -2,14 +2,9 @@ /etc/rc\.d/init\.d/kdump -- gen_context(system_u:object_r:kdump_initrc_exec_t,s0) -/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) - /usr/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) /usr/lib/systemd/system/kdump.*\.service -- gen_context(system_u:object_r:kdump_unit_t,s0) -/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) -/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) - /usr/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) /usr/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) diff --git a/policy/modules/contrib/kdump.te b/policy/modules/contrib/kdump.te index 1f63509..e758c15 100644 --- a/policy/modules/contrib/kdump.te +++ b/policy/modules/contrib/kdump.te @@ -1,4 +1,4 @@ -policy_module(kdump, 1.5.0) +policy_module(kdump, 1.5.1) ####################################### # diff --git a/policy/modules/contrib/kudzu.fc b/policy/modules/contrib/kudzu.fc index 0e98a01..a0030a7 100644 --- a/policy/modules/contrib/kudzu.fc +++ b/policy/modules/contrib/kudzu.fc @@ -1,8 +1,5 @@ /etc/rc\.d/init\.d/kudzu -- gen_context(system_u:object_r:kudzu_initrc_exec_t,s0) -/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) -/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) - /usr/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) /usr/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) diff --git a/policy/modules/contrib/kudzu.te b/policy/modules/contrib/kudzu.te index a5f9182..4116d00 100644 --- a/policy/modules/contrib/kudzu.te +++ b/policy/modules/contrib/kudzu.te @@ -1,4 +1,4 @@ -policy_module(kudzu, 1.12.0) +policy_module(kudzu, 1.12.1) ######################################## # diff --git a/policy/modules/contrib/loadkeys.fc b/policy/modules/contrib/loadkeys.fc index c6fe71b..38f91fe 100644 --- a/policy/modules/contrib/loadkeys.fc +++ b/policy/modules/contrib/loadkeys.fc @@ -1,5 +1,2 @@ -/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) -/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) - /usr/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) /usr/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/contrib/loadkeys.te index ad97422..ca8e701 100644 --- a/policy/modules/contrib/loadkeys.te +++ b/policy/modules/contrib/loadkeys.te @@ -1,4 +1,4 @@ -policy_module(loadkeys, 1.11.0) +policy_module(loadkeys, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/mta.fc b/policy/modules/contrib/mta.fc index f42896c..2468134 100644 --- a/policy/modules/contrib/mta.fc +++ b/policy/modules/contrib/mta.fc @@ -5,8 +5,6 @@ HOME_DIR/\.mailrc -- gen_context(system_u:object_r:mail_home_t,s0) HOME_DIR/Maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) HOME_DIR/\.maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) -/bin/mail(x)? -- gen_context(system_u:object_r:sendmail_exec_t,s0) - /etc/aliases -- gen_context(system_u:object_r:etc_aliases_t,s0) /etc/aliases\.db -- gen_context(system_u:object_r:etc_aliases_t,s0) /etc/mail(/.*)? gen_context(system_u:object_r:etc_mail_t,s0) diff --git a/policy/modules/contrib/mta.te b/policy/modules/contrib/mta.te index 51b3bbb..f0c4b92 100644 --- a/policy/modules/contrib/mta.te +++ b/policy/modules/contrib/mta.te @@ -1,4 +1,4 @@ -policy_module(mta, 2.8.0) +policy_module(mta, 2.8.1) ######################################## # diff --git a/policy/modules/contrib/networkmanager.fc b/policy/modules/contrib/networkmanager.fc index 6c54e0e..d24e9f0 100644 --- a/policy/modules/contrib/networkmanager.fc +++ b/policy/modules/contrib/networkmanager.fc @@ -21,9 +21,6 @@ /usr/lib/systemd/system/[^/]*NetworkManager.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) /usr/lib/systemd/system/[^/]*wpa_supplicant.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) -/sbin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) -/sbin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) - /usr/bin/NetworkManager -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) /usr/bin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) /usr/bin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) diff --git a/policy/modules/contrib/networkmanager.te b/policy/modules/contrib/networkmanager.te index 3b66680..27b9265 100644 --- a/policy/modules/contrib/networkmanager.te +++ b/policy/modules/contrib/networkmanager.te @@ -1,4 +1,4 @@ -policy_module(networkmanager, 1.20.0) +policy_module(networkmanager, 1.20.1) ######################################## # diff --git a/policy/modules/contrib/nis.fc b/policy/modules/contrib/nis.fc index a5c3ed9..2b86f44 100644 --- a/policy/modules/contrib/nis.fc +++ b/policy/modules/contrib/nis.fc @@ -5,8 +5,6 @@ /etc/ypserv\.conf -- gen_context(system_u:object_r:ypserv_conf_t,s0) -/sbin/ypbind -- gen_context(system_u:object_r:ypbind_exec_t,s0) - /usr/lib/yp/ypxfr -- gen_context(system_u:object_r:ypxfr_exec_t,s0) /usr/lib/systemd/system/ypbind.*\.service -- gen_context(system_u:object_r:ypbind_unit_t,s0) diff --git a/policy/modules/contrib/nis.te b/policy/modules/contrib/nis.te index 0fda4fa..c49ecb0 100644 --- a/policy/modules/contrib/nis.te +++ b/policy/modules/contrib/nis.te @@ -1,4 +1,4 @@ -policy_module(nis, 1.15.0) +policy_module(nis, 1.15.1) ######################################## # diff --git a/policy/modules/contrib/nut.fc b/policy/modules/contrib/nut.fc index 54ab902..5fa41e6 100644 --- a/policy/modules/contrib/nut.fc +++ b/policy/modules/contrib/nut.fc @@ -4,10 +4,6 @@ /etc/rc\.d/init\.d/nut-driver -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) /etc/rc\.d/init\.d/nut-server -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) -/sbin/upsd -- gen_context(system_u:object_r:nut_upsd_exec_t,s0) -/sbin/upsdrvctl -- gen_context(system_u:object_r:nut_upsdrvctl_exec_t,s0) -/sbin/upsmon -- gen_context(system_u:object_r:nut_upsmon_exec_t,s0) - /usr/lib/cgi-bin/nut/upsimage\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) /usr/lib/cgi-bin/nut/upsset\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) /usr/lib/cgi-bin/nut/upsstats\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) diff --git a/policy/modules/contrib/nut.te b/policy/modules/contrib/nut.te index 5471e63..8086281 100644 --- a/policy/modules/contrib/nut.te +++ b/policy/modules/contrib/nut.te @@ -1,4 +1,4 @@ -policy_module(nut, 1.6.0) +policy_module(nut, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/oddjob.fc b/policy/modules/contrib/oddjob.fc index 243a809..d20f5ea 100644 --- a/policy/modules/contrib/oddjob.fc +++ b/policy/modules/contrib/oddjob.fc @@ -1,5 +1,3 @@ -/sbin/mkhomedir_helper -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) - /usr/lib/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) /usr/libexec/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) diff --git a/policy/modules/contrib/oddjob.te b/policy/modules/contrib/oddjob.te index cf72de7..c01d4f6 100644 --- a/policy/modules/contrib/oddjob.te +++ b/policy/modules/contrib/oddjob.te @@ -1,4 +1,4 @@ -policy_module(oddjob, 1.11.0) +policy_module(oddjob, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/pcmcia.fc b/policy/modules/contrib/pcmcia.fc index e4538bc..b508069 100644 --- a/policy/modules/contrib/pcmcia.fc +++ b/policy/modules/contrib/pcmcia.fc @@ -1,8 +1,5 @@ /etc/apm/event\.d/pcmcia -- gen_context(system_u:object_r:cardmgr_exec_t,s0) -/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) -/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) - /usr/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) /usr/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) diff --git a/policy/modules/contrib/pcmcia.te b/policy/modules/contrib/pcmcia.te index b845487..ceab576 100644 --- a/policy/modules/contrib/pcmcia.te +++ b/policy/modules/contrib/pcmcia.te @@ -1,4 +1,4 @@ -policy_module(pcmcia, 1.8.0) +policy_module(pcmcia, 1.8.1) ######################################## # diff --git a/policy/modules/contrib/plymouthd.fc b/policy/modules/contrib/plymouthd.fc index 0f2fc4b..8eab91b 100644 --- a/policy/modules/contrib/plymouthd.fc +++ b/policy/modules/contrib/plymouthd.fc @@ -1,7 +1,3 @@ -/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) - -/sbin/plymouthd -- gen_context(system_u:object_r:plymouthd_exec_t,s0) - /usr/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) # Systemd unit file diff --git a/policy/modules/contrib/plymouthd.te b/policy/modules/contrib/plymouthd.te index 3e19efb..c9c0404 100644 --- a/policy/modules/contrib/plymouthd.te +++ b/policy/modules/contrib/plymouthd.te @@ -1,4 +1,4 @@ -policy_module(plymouthd, 1.4.0) +policy_module(plymouthd, 1.4.1) ######################################## # diff --git a/policy/modules/contrib/portmap.fc b/policy/modules/contrib/portmap.fc index 9264840..d15c707 100644 --- a/policy/modules/contrib/portmap.fc +++ b/policy/modules/contrib/portmap.fc @@ -1,9 +1,5 @@ /etc/rc\.d/init\.d/portmap -- gen_context(system_u:object_r:portmap_initrc_exec_t,s0) -/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) -/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) -/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) - /usr/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) /usr/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) /usr/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) diff --git a/policy/modules/contrib/portmap.te b/policy/modules/contrib/portmap.te index b5abc87..292b3aa 100644 --- a/policy/modules/contrib/portmap.te +++ b/policy/modules/contrib/portmap.te @@ -1,4 +1,4 @@ -policy_module(portmap, 1.13.0) +policy_module(portmap, 1.13.1) ######################################## # diff --git a/policy/modules/contrib/portreserve.fc b/policy/modules/contrib/portreserve.fc index 0207d6c..de7da13 100644 --- a/policy/modules/contrib/portreserve.fc +++ b/policy/modules/contrib/portreserve.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/portreserve -- gen_context(system_u:object_r:portreserve_initrc_exec_t,s0) -/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) - /usr/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) /run/portreserve(/.*)? gen_context(system_u:object_r:portreserve_var_run_t,s0) diff --git a/policy/modules/contrib/portreserve.te b/policy/modules/contrib/portreserve.te index 4aa79a4..7e05b61 100644 --- a/policy/modules/contrib/portreserve.te +++ b/policy/modules/contrib/portreserve.te @@ -1,4 +1,4 @@ -policy_module(portreserve, 1.6.0) +policy_module(portreserve, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/ppp.fc b/policy/modules/contrib/ppp.fc index 0b03de1..d31591a 100644 --- a/policy/modules/contrib/ppp.fc +++ b/policy/modules/contrib/ppp.fc @@ -9,9 +9,6 @@ HOME_DIR/\.ppprc -- gen_context(system_u:object_r:ppp_home_t,s0) /etc/ppp/resolv\.conf -- gen_context(system_u:object_r:pppd_etc_rw_t,s0) /etc/ppp/(auth|ip(v6|x)?)-(up|down) -- gen_context(system_u:object_r:pppd_initrc_exec_t,s0) -/sbin/ppp-watch -- gen_context(system_u:object_r:pppd_exec_t,s0) -/sbin/pppoe-server -- gen_context(system_u:object_r:pppd_exec_t,s0) - /usr/lib/systemd/system/ppp.*\.service -- gen_context(system_u:object_r:pppd_unit_t,s0) /usr/sbin/ipppd -- gen_context(system_u:object_r:pppd_exec_t,s0) diff --git a/policy/modules/contrib/ppp.te b/policy/modules/contrib/ppp.te index ba85666..2771882 100644 --- a/policy/modules/contrib/ppp.te +++ b/policy/modules/contrib/ppp.te @@ -1,4 +1,4 @@ -policy_module(ppp, 1.17.0) +policy_module(ppp, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/prelude.fc b/policy/modules/contrib/prelude.fc index fd4ccde..75df3cf 100644 --- a/policy/modules/contrib/prelude.fc +++ b/policy/modules/contrib/prelude.fc @@ -4,8 +4,6 @@ /etc/rc\.d/init\.d/prelude-lml -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) /etc/rc\.d/init\.d/prelude-manager -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) -/sbin/audisp-prelude -- gen_context(system_u:object_r:prelude_audisp_exec_t,s0) - /usr/bin/prelude-correlator -- gen_context(system_u:object_r:prelude_correlator_exec_t,s0) /usr/bin/prelude-lml -- gen_context(system_u:object_r:prelude_lml_exec_t,s0) /usr/bin/prelude-manager -- gen_context(system_u:object_r:prelude_exec_t,s0) diff --git a/policy/modules/contrib/prelude.te b/policy/modules/contrib/prelude.te index d3aa038..4f14f0b 100644 --- a/policy/modules/contrib/prelude.te +++ b/policy/modules/contrib/prelude.te @@ -1,4 +1,4 @@ -policy_module(prelude, 1.7.0) +policy_module(prelude, 1.7.1) ######################################## # diff --git a/policy/modules/contrib/quota.fc b/policy/modules/contrib/quota.fc index a609318..c3d05ba 100644 --- a/policy/modules/contrib/quota.fc +++ b/policy/modules/contrib/quota.fc @@ -10,9 +10,6 @@ HOME_DIR/a?quota\.(user|group) -- gen_context(system_u:object_r:quota_db_t,s0) /etc/rc\.d/init\.d/quota_nld -- gen_context(system_u:object_r:quota_nld_initrc_exec_t,s0) -/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) -/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) - /usr/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) /usr/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) /usr/sbin/quota_nld -- gen_context(system_u:object_r:quota_nld_exec_t,s0) diff --git a/policy/modules/contrib/quota.te b/policy/modules/contrib/quota.te index 95262d4..9952f53 100644 --- a/policy/modules/contrib/quota.te +++ b/policy/modules/contrib/quota.te @@ -1,4 +1,4 @@ -policy_module(quota, 1.9.0) +policy_module(quota, 1.9.1) ######################################## # diff --git a/policy/modules/contrib/raid.fc b/policy/modules/contrib/raid.fc index dc17e79..dc26d8d 100644 --- a/policy/modules/contrib/raid.fc +++ b/policy/modules/contrib/raid.fc @@ -3,14 +3,6 @@ /etc/rc\.d/init\.d/mdmonitor -- gen_context(system_u:object_r:mdadm_initrc_exec_t,s0) -/sbin/iprdump -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/iprinit -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/iprupdate -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdadm -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdmon -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdmpd -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/raid-check -- gen_context(system_u:object_r:mdadm_exec_t,s0) - # Systemd unit files /usr/lib/systemd/system/[^/]*mdadm-.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) /usr/lib/systemd/system/[^/]*mdmon.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) diff --git a/policy/modules/contrib/raid.te b/policy/modules/contrib/raid.te index 172bae9..ad21e09 100644 --- a/policy/modules/contrib/raid.te +++ b/policy/modules/contrib/raid.te @@ -1,4 +1,4 @@ -policy_module(raid, 1.17.0) +policy_module(raid, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/rdisc.fc b/policy/modules/contrib/rdisc.fc index e9765c0..168de32 100644 --- a/policy/modules/contrib/rdisc.fc +++ b/policy/modules/contrib/rdisc.fc @@ -1,3 +1 @@ -/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) - /usr/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) diff --git a/policy/modules/contrib/rdisc.te b/policy/modules/contrib/rdisc.te index 9196c1d..ea6d2d9 100644 --- a/policy/modules/contrib/rdisc.te +++ b/policy/modules/contrib/rdisc.te @@ -1,4 +1,4 @@ -policy_module(rdisc, 1.8.0) +policy_module(rdisc, 1.8.1) ######################################## # diff --git a/policy/modules/contrib/readahead.fc b/policy/modules/contrib/readahead.fc index 9519bd8..5932e20 100644 --- a/policy/modules/contrib/readahead.fc +++ b/policy/modules/contrib/readahead.fc @@ -1,5 +1,3 @@ -/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) - /usr/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) /var/lib/readahead(/.*)? gen_context(system_u:object_r:readahead_var_lib_t,s0) diff --git a/policy/modules/contrib/readahead.te b/policy/modules/contrib/readahead.te index 9b2d53f..080c0ad 100644 --- a/policy/modules/contrib/readahead.te +++ b/policy/modules/contrib/readahead.te @@ -1,4 +1,4 @@ -policy_module(readahead, 1.15.0) +policy_module(readahead, 1.15.1) ######################################## # diff --git a/policy/modules/contrib/resmgr.fc b/policy/modules/contrib/resmgr.fc index 9dec87b..138f76e 100644 --- a/policy/modules/contrib/resmgr.fc +++ b/policy/modules/contrib/resmgr.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/resmgr -- gen_context(system_u:object_r:resmgrd_initrc_exec_t,s0) -/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) - /usr/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) /run/\.resmgr_socket -s gen_context(system_u:object_r:resmgrd_var_run_t,s0) diff --git a/policy/modules/contrib/resmgr.te b/policy/modules/contrib/resmgr.te index db7eca5..25e4067 100644 --- a/policy/modules/contrib/resmgr.te +++ b/policy/modules/contrib/resmgr.te @@ -1,4 +1,4 @@ -policy_module(resmgr, 1.5.0) +policy_module(resmgr, 1.5.1) ######################################## # diff --git a/policy/modules/contrib/rpc.fc b/policy/modules/contrib/rpc.fc index 17ad35a..9d6d524 100644 --- a/policy/modules/contrib/rpc.fc +++ b/policy/modules/contrib/rpc.fc @@ -4,9 +4,6 @@ /etc/rc\.d/init\.d/nfslock -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) /etc/rc\.d/init\.d/rpcidmapd -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) -/sbin/rpc\..* -- gen_context(system_u:object_r:rpcd_exec_t,s0) -/sbin/sm-notify -- gen_context(system_u:object_r:rpcd_exec_t,s0) - /usr/lib/systemd/system/nfs.*\.service -- gen_context(system_u:object_r:nfsd_unit_t,s0) /usr/lib/systemd/system/rpc.*\.service -- gen_context(system_u:object_r:rpcd_unit_t,s0) diff --git a/policy/modules/contrib/rpc.te b/policy/modules/contrib/rpc.te index 2e47156..cf1f775 100644 --- a/policy/modules/contrib/rpc.te +++ b/policy/modules/contrib/rpc.te @@ -1,4 +1,4 @@ -policy_module(rpc, 1.19.0) +policy_module(rpc, 1.19.1) ######################################## # diff --git a/policy/modules/contrib/rpcbind.fc b/policy/modules/contrib/rpcbind.fc index b4bb017..35f6ae4 100644 --- a/policy/modules/contrib/rpcbind.fc +++ b/policy/modules/contrib/rpcbind.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/rpcbind -- gen_context(system_u:object_r:rpcbind_initrc_exec_t,s0) -/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) - /usr/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) /var/cache/rpcbind(/.*)? gen_context(system_u:object_r:rpcbind_var_lib_t,s0) diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/contrib/rpcbind.te index e3a4cc0..8e75226 100644 --- a/policy/modules/contrib/rpcbind.te +++ b/policy/modules/contrib/rpcbind.te @@ -1,4 +1,4 @@ -policy_module(rpcbind, 1.11.0) +policy_module(rpcbind, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc index e4c2850..71c90c7 100644 --- a/policy/modules/contrib/rpm.fc +++ b/policy/modules/contrib/rpm.fc @@ -1,9 +1,5 @@ -/bin/rpm -- gen_context(system_u:object_r:rpm_exec_t,s0) - /etc/rc\.d/init\.d/bcfg2 -- gen_context(system_u:object_r:rpm_initrc_exec_t,s0) -/sbin/yast2 -- gen_context(system_u:object_r:rpm_exec_t,s0) - /usr/bin/debuginfo-install -- gen_context(system_u:object_r:debuginfo_exec_t,s0) /usr/bin/fedora-rmdevelrpms -- gen_context(system_u:object_r:rpm_exec_t,s0) /usr/bin/online_update -- gen_context(system_u:object_r:rpm_exec_t,s0) diff --git a/policy/modules/contrib/rpm.te b/policy/modules/contrib/rpm.te index 2a709ce..6ab5fd9 100644 --- a/policy/modules/contrib/rpm.te +++ b/policy/modules/contrib/rpm.te @@ -1,4 +1,4 @@ -policy_module(rpm, 1.19.0) +policy_module(rpm, 1.19.1) ######################################## # diff --git a/policy/modules/contrib/shorewall.fc b/policy/modules/contrib/shorewall.fc index 3349532..e92567a 100644 --- a/policy/modules/contrib/shorewall.fc +++ b/policy/modules/contrib/shorewall.fc @@ -3,9 +3,6 @@ /etc/shorewall(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) /etc/shorewall-lite(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) -/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) -/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) - /usr/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) /usr/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) diff --git a/policy/modules/contrib/shorewall.te b/policy/modules/contrib/shorewall.te index 29661de..e2e6c30 100644 --- a/policy/modules/contrib/shorewall.te +++ b/policy/modules/contrib/shorewall.te @@ -1,4 +1,4 @@ -policy_module(shorewall, 1.6.0) +policy_module(shorewall, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/shutdown.fc b/policy/modules/contrib/shutdown.fc index 199c689..e6730a0 100644 --- a/policy/modules/contrib/shutdown.fc +++ b/policy/modules/contrib/shutdown.fc @@ -1,9 +1,5 @@ /etc/nologin -- gen_context(system_u:object_r:shutdown_etc_t,s0) -/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) - -/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) - /usr/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) /usr/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) diff --git a/policy/modules/contrib/shutdown.te b/policy/modules/contrib/shutdown.te index e10149f..6a0b126 100644 --- a/policy/modules/contrib/shutdown.te +++ b/policy/modules/contrib/shutdown.te @@ -1,4 +1,4 @@ -policy_module(shutdown, 1.4.0) +policy_module(shutdown, 1.4.1) ######################################## # diff --git a/policy/modules/contrib/usbmodules.fc b/policy/modules/contrib/usbmodules.fc index 02d7253..66604b5 100644 --- a/policy/modules/contrib/usbmodules.fc +++ b/policy/modules/contrib/usbmodules.fc @@ -1,3 +1 @@ -/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) - /usr/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) diff --git a/policy/modules/contrib/usbmodules.te b/policy/modules/contrib/usbmodules.te index 279e511..d4307b9 100644 --- a/policy/modules/contrib/usbmodules.te +++ b/policy/modules/contrib/usbmodules.te @@ -1,4 +1,4 @@ -policy_module(usbmodules, 1.3.0) +policy_module(usbmodules, 1.3.1) ######################################## # diff --git a/policy/modules/contrib/vpn.fc b/policy/modules/contrib/vpn.fc index 02701c3..1cd43c6 100644 --- a/policy/modules/contrib/vpn.fc +++ b/policy/modules/contrib/vpn.fc @@ -1,5 +1,3 @@ -/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) - /usr/bin/openconnect -- gen_context(system_u:object_r:vpnc_exec_t,s0) /usr/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) diff --git a/policy/modules/contrib/vpn.te b/policy/modules/contrib/vpn.te index e11d751..85353fa 100644 --- a/policy/modules/contrib/vpn.te +++ b/policy/modules/contrib/vpn.te @@ -1,4 +1,4 @@ -policy_module(vpn, 1.17.0) +policy_module(vpn, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/zosremote.fc b/policy/modules/contrib/zosremote.fc index 7a7fc61..adfd4a2 100644 --- a/policy/modules/contrib/zosremote.fc +++ b/policy/modules/contrib/zosremote.fc @@ -1,3 +1 @@ -/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) - /usr/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) diff --git a/policy/modules/contrib/zosremote.te b/policy/modules/contrib/zosremote.te index bc6a5db..7139cde 100644 --- a/policy/modules/contrib/zosremote.te +++ b/policy/modules/contrib/zosremote.te @@ -1,4 +1,4 @@ -policy_module(zosremote, 1.2.0) +policy_module(zosremote, 1.2.1) ######################################## # From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 831C2139695 for ; Thu, 16 Feb 2017 11:34:49 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E12B921C043; Thu, 16 Feb 2017 11:34:46 +0000 (UTC) Received: from smtp.gentoo.org (mail.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id AA80221C04E for ; Thu, 16 Feb 2017 11:34:46 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 44AE73414C1 for ; Thu, 16 Feb 2017 11:34:45 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 9758349C2 for ; Thu, 16 Feb 2017 11:34:43 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1486307430.110875d7272058d72af8735e08ebbd4704c48d99.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/acct.fc policy/modules/contrib/acct.te policy/modules/contrib/alsa.fc policy/modules/contrib/alsa.te policy/modules/contrib/apcupsd.fc policy/modules/contrib/apcupsd.te policy/modules/contrib/cachefilesd.fc policy/modules/contrib/cachefilesd.te policy/modules/contrib/ccs.fc policy/modules/contrib/ccs.te policy/modules/contrib/cgroup.fc policy/modules/contrib/cgroup.te policy/modules/contrib/cpucontrol.fc policy/modules/contrib/cpucontrol.te policy/modules/contrib/cups.fc policy/modules/contrib/cups.te policy/modules/contrib/dbus.fc policy/modules/contrib/dbus.te policy/modules/contrib/devicekit.fc policy/modules/contrib/devicekit.te policy/modules/contrib/drbd.fc policy/modules/contrib/drbd.te policy/modules/contrib/iscsi.fc policy/modules/contrib/iscsi.te policy/modules/contrib/kdump.fc policy/modules/contrib/kdump.te policy/modules/contrib/kudzu.fc policy/modules/contrib/kudzu.te policy/modules/contrib/loadkeys.fc policy/modules/contrib/loadkeys. te policy/modules/contrib/mta.fc policy/modules/contrib/mta.te policy/modules/contrib/networkmanager.fc policy/modules/contrib/networkmanager.te policy/modules/contrib/nis.fc policy/modules/contrib/nis.te policy/modules/contrib/nut.fc policy/modules/contrib/nut.te policy/modules/contrib/oddjob.fc policy/modules/contrib/oddjob.te policy/modules/contrib/pcmcia.fc policy/modules/contrib/pcmcia.te policy/modules/contrib/plymouthd.fc policy/modules/contrib/plymouthd.te policy/modules/contrib/portmap.fc policy/modules/contrib/portmap.te policy/modules/contrib/portreserve.fc policy/modules/contrib/portreserve.te policy/modules/contrib/ppp.fc policy/modules/contrib/ppp.te policy/modules/contrib/prelude.fc policy/modules/contrib/prelude.te policy/modules/contrib/quota.fc policy/modules/contrib/quota.te policy/modules/contrib/raid.fc policy/modules/contrib/raid.te policy/modules/contrib/rdisc.fc policy/modules/contrib/rdisc.te policy/modules/contrib/readahead.fc policy/modules/contrib/readahe ad.te policy/modules/contrib/resmgr.fc policy/modules/contrib/resmgr.te policy/modules/contrib/rpc.fc policy/modules/contrib/rpc.te policy/modules/contrib/rpcbind.fc policy/modules/contrib/rpcbind.te policy/modules/contrib/rpm.fc policy/modules/contrib/rpm.te policy/modules/contrib/shorewall.fc policy/modules/contrib/shorewall.te policy/modules/contrib/shutdown.fc policy/modules/contrib/shutdown.te policy/modules/contrib/usbmodules.fc policy/modules/contrib/usbmodules.te policy/modules/contrib/vpn.fc policy/modules/contrib/vpn.te policy/modules/contrib/zosremote.fc policy/modules/contrib/zosremote.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 110875d7272058d72af8735e08ebbd4704c48d99 X-VCS-Branch: master Date: Thu, 16 Feb 2017 11:34:43 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 1237e7b1-b393-4105-9bf5-b5126625b362 X-Archives-Hash: 54c658c94a2c0cc0f4297f7568be8425 Message-ID: <20170216113443.CGlBbeCopqpskxBntDKpVLqS9Oxq3OGleuLDLCOGw7I@z> commit: 110875d7272058d72af8735e08ebbd4704c48d99 Author: Chris PeBenito ieee org> AuthorDate: Sat Feb 4 20:18:43 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sun Feb 5 15:10:30 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=110875d7 Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. policy/modules/contrib/acct.fc | 2 -- policy/modules/contrib/acct.te | 2 +- policy/modules/contrib/alsa.fc | 5 ----- policy/modules/contrib/alsa.te | 2 +- policy/modules/contrib/apcupsd.fc | 2 -- policy/modules/contrib/apcupsd.te | 2 +- policy/modules/contrib/cachefilesd.fc | 2 -- policy/modules/contrib/cachefilesd.te | 2 +- policy/modules/contrib/ccs.fc | 2 -- policy/modules/contrib/ccs.te | 2 +- policy/modules/contrib/cgroup.fc | 4 ---- policy/modules/contrib/cgroup.te | 2 +- policy/modules/contrib/cpucontrol.fc | 4 ---- policy/modules/contrib/cpucontrol.te | 2 +- policy/modules/contrib/cups.fc | 2 -- policy/modules/contrib/cups.te | 2 +- policy/modules/contrib/dbus.fc | 4 ---- policy/modules/contrib/dbus.te | 2 +- policy/modules/contrib/devicekit.fc | 3 --- policy/modules/contrib/devicekit.te | 2 +- policy/modules/contrib/drbd.fc | 3 --- policy/modules/contrib/drbd.te | 2 +- policy/modules/contrib/iscsi.fc | 4 ---- policy/modules/contrib/iscsi.te | 2 +- policy/modules/contrib/kdump.fc | 5 ----- policy/modules/contrib/kdump.te | 2 +- policy/modules/contrib/kudzu.fc | 3 --- policy/modules/contrib/kudzu.te | 2 +- policy/modules/contrib/loadkeys.fc | 3 --- policy/modules/contrib/loadkeys.te | 2 +- policy/modules/contrib/mta.fc | 2 -- policy/modules/contrib/mta.te | 2 +- policy/modules/contrib/networkmanager.fc | 3 --- policy/modules/contrib/networkmanager.te | 2 +- policy/modules/contrib/nis.fc | 2 -- policy/modules/contrib/nis.te | 2 +- policy/modules/contrib/nut.fc | 4 ---- policy/modules/contrib/nut.te | 2 +- policy/modules/contrib/oddjob.fc | 2 -- policy/modules/contrib/oddjob.te | 2 +- policy/modules/contrib/pcmcia.fc | 3 --- policy/modules/contrib/pcmcia.te | 2 +- policy/modules/contrib/plymouthd.fc | 4 ---- policy/modules/contrib/plymouthd.te | 2 +- policy/modules/contrib/portmap.fc | 4 ---- policy/modules/contrib/portmap.te | 2 +- policy/modules/contrib/portreserve.fc | 2 -- policy/modules/contrib/portreserve.te | 2 +- policy/modules/contrib/ppp.fc | 3 --- policy/modules/contrib/ppp.te | 2 +- policy/modules/contrib/prelude.fc | 2 -- policy/modules/contrib/prelude.te | 2 +- policy/modules/contrib/quota.fc | 3 --- policy/modules/contrib/quota.te | 2 +- policy/modules/contrib/raid.fc | 8 -------- policy/modules/contrib/raid.te | 2 +- policy/modules/contrib/rdisc.fc | 2 -- policy/modules/contrib/rdisc.te | 2 +- policy/modules/contrib/readahead.fc | 2 -- policy/modules/contrib/readahead.te | 2 +- policy/modules/contrib/resmgr.fc | 2 -- policy/modules/contrib/resmgr.te | 2 +- policy/modules/contrib/rpc.fc | 3 --- policy/modules/contrib/rpc.te | 2 +- policy/modules/contrib/rpcbind.fc | 2 -- policy/modules/contrib/rpcbind.te | 2 +- policy/modules/contrib/rpm.fc | 4 ---- policy/modules/contrib/rpm.te | 2 +- policy/modules/contrib/shorewall.fc | 3 --- policy/modules/contrib/shorewall.te | 2 +- policy/modules/contrib/shutdown.fc | 4 ---- policy/modules/contrib/shutdown.te | 2 +- policy/modules/contrib/usbmodules.fc | 2 -- policy/modules/contrib/usbmodules.te | 2 +- policy/modules/contrib/vpn.fc | 2 -- policy/modules/contrib/vpn.te | 2 +- policy/modules/contrib/zosremote.fc | 2 -- policy/modules/contrib/zosremote.te | 2 +- 78 files changed, 39 insertions(+), 157 deletions(-) diff --git a/policy/modules/contrib/acct.fc b/policy/modules/contrib/acct.fc index c6d17a2f..8a4f7efd 100644 --- a/policy/modules/contrib/acct.fc +++ b/policy/modules/contrib/acct.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/psacct -- gen_context(system_u:object_r:acct_initrc_exec_t,s0) -/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) - /usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) /var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0) diff --git a/policy/modules/contrib/acct.te b/policy/modules/contrib/acct.te index 6f6fd13e..aca9d80b 100644 --- a/policy/modules/contrib/acct.te +++ b/policy/modules/contrib/acct.te @@ -1,4 +1,4 @@ -policy_module(acct, 1.7.0) +policy_module(acct, 1.7.1) ######################################## # diff --git a/policy/modules/contrib/alsa.fc b/policy/modules/contrib/alsa.fc index 112fc62d..f26e2392 100644 --- a/policy/modules/contrib/alsa.fc +++ b/policy/modules/contrib/alsa.fc @@ -4,14 +4,9 @@ ifdef(`distro_debian',` /\.config(/.*)? gen_context(system_u:object_r:alsa_var_lib_t,s0) ') -/bin/alsaunmute -- gen_context(system_u:object_r:alsa_exec_t,s0) - /etc/alsa(/.*)? gen_context(system_u:object_r:alsa_etc_t,s0) /etc/asound\.conf gen_context(system_u:object_r:alsa_etc_t,s0) -/sbin/alsactl -- gen_context(system_u:object_r:alsa_exec_t,s0) -/sbin/salsa -- gen_context(system_u:object_r:alsa_exec_t,s0) - # Systemd unit files /usr/lib/systemd/system/[^/]*alsa-restore.* -- gen_context(system_u:object_r:alsa_unit_t,s0) /usr/lib/systemd/system/[^/]*alsa-state.* -- gen_context(system_u:object_r:alsa_unit_t,s0) diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te index f7faa4bb..19046676 100644 --- a/policy/modules/contrib/alsa.te +++ b/policy/modules/contrib/alsa.te @@ -1,4 +1,4 @@ -policy_module(alsa, 1.16.0) +policy_module(alsa, 1.16.1) ######################################## # diff --git a/policy/modules/contrib/apcupsd.fc b/policy/modules/contrib/apcupsd.fc index 375989c9..c9a7900c 100644 --- a/policy/modules/contrib/apcupsd.fc +++ b/policy/modules/contrib/apcupsd.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/apcupsd -- gen_context(system_u:object_r:apcupsd_initrc_exec_t,s0) -/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) - /usr/lib/systemd/system/apcupsd.*\.service -- gen_context(system_u:object_r:apcupsd_unit_t,s0) /usr/sbin/apcupsd -- gen_context(system_u:object_r:apcupsd_exec_t,s0) diff --git a/policy/modules/contrib/apcupsd.te b/policy/modules/contrib/apcupsd.te index 0277a904..e1586b36 100644 --- a/policy/modules/contrib/apcupsd.te +++ b/policy/modules/contrib/apcupsd.te @@ -1,4 +1,4 @@ -policy_module(apcupsd, 1.12.0) +policy_module(apcupsd, 1.12.1) ######################################## # diff --git a/policy/modules/contrib/cachefilesd.fc b/policy/modules/contrib/cachefilesd.fc index 7ee707df..1ddbe60d 100644 --- a/policy/modules/contrib/cachefilesd.fc +++ b/policy/modules/contrib/cachefilesd.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/cachefilesd -- gen_context(system_u:object_r:cachefilesd_initrc_exec_t,s0) -/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) - /usr/sbin/cachefilesd -- gen_context(system_u:object_r:cachefilesd_exec_t,s0) /var/cache/fscache(/.*)? gen_context(system_u:object_r:cachefilesd_cache_t,s0) diff --git a/policy/modules/contrib/cachefilesd.te b/policy/modules/contrib/cachefilesd.te index c8cf94c6..14fcf67c 100644 --- a/policy/modules/contrib/cachefilesd.te +++ b/policy/modules/contrib/cachefilesd.te @@ -1,4 +1,4 @@ -policy_module(cachefilesd, 1.3.0) +policy_module(cachefilesd, 1.3.1) ######################################## # diff --git a/policy/modules/contrib/ccs.fc b/policy/modules/contrib/ccs.fc index 86c73a7d..4bf5e8f3 100644 --- a/policy/modules/contrib/ccs.fc +++ b/policy/modules/contrib/ccs.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/((ccs)|(ccsd)) -- gen_context(system_u:object_r:ccs_initrc_exec_t,s0) -/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) - /usr/sbin/ccsd -- gen_context(system_u:object_r:ccs_exec_t,s0) /var/lib/cluster/((ccs)|(ccsd)).* gen_context(system_u:object_r:ccs_var_lib_t,s0) diff --git a/policy/modules/contrib/ccs.te b/policy/modules/contrib/ccs.te index 9bf4039e..eacec0bf 100644 --- a/policy/modules/contrib/ccs.te +++ b/policy/modules/contrib/ccs.te @@ -1,4 +1,4 @@ -policy_module(ccs, 1.10.0) +policy_module(ccs, 1.10.1) ######################################## # diff --git a/policy/modules/contrib/cgroup.fc b/policy/modules/contrib/cgroup.fc index a77ead69..cfe6b48c 100644 --- a/policy/modules/contrib/cgroup.fc +++ b/policy/modules/contrib/cgroup.fc @@ -7,10 +7,6 @@ /etc/rc\.d/init\.d/cgconfig -- gen_context(system_u:object_r:cgconfig_initrc_exec_t,s0) /etc/rc\.d/init\.d/cgred -- gen_context(system_u:object_r:cgred_initrc_exec_t,s0) -/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) -/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) -/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) - /usr/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfig_exec_t,s0) /usr/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0) /usr/sbin/cgclear -- gen_context(system_u:object_r:cgclear_exec_t,s0) diff --git a/policy/modules/contrib/cgroup.te b/policy/modules/contrib/cgroup.te index b9a20ff1..5d600a9f 100644 --- a/policy/modules/contrib/cgroup.te +++ b/policy/modules/contrib/cgroup.te @@ -1,4 +1,4 @@ -policy_module(cgroup, 1.5.0) +policy_module(cgroup, 1.5.1) ######################################## # diff --git a/policy/modules/contrib/cpucontrol.fc b/policy/modules/contrib/cpucontrol.fc index aa4b21bf..06f5d0f9 100644 --- a/policy/modules/contrib/cpucontrol.fc +++ b/policy/modules/contrib/cpucontrol.fc @@ -1,7 +1,3 @@ -/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) - -/sbin/microcode_ctl -- gen_context(system_u:object_r:cpucontrol_exec_t,s0) - /usr/lib/firmware/microcode.*\.dat -- gen_context(system_u:object_r:cpucontrol_conf_t,s0) /usr/sbin/cpufreqd -- gen_context(system_u:object_r:cpuspeed_exec_t,s0) diff --git a/policy/modules/contrib/cpucontrol.te b/policy/modules/contrib/cpucontrol.te index 5b7c3202..cff0e16c 100644 --- a/policy/modules/contrib/cpucontrol.te +++ b/policy/modules/contrib/cpucontrol.te @@ -1,4 +1,4 @@ -policy_module(cpucontrol, 1.6.0) +policy_module(cpucontrol, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/cups.fc b/policy/modules/contrib/cups.fc index 5ccf2cb8..72afd973 100644 --- a/policy/modules/contrib/cups.fc +++ b/policy/modules/contrib/cups.fc @@ -18,8 +18,6 @@ /etc/printcap.* -- gen_context(system_u:object_r:cupsd_rw_etc_t,s0) -/lib/udev/udev-configure-printer -- gen_context(system_u:object_r:cupsd_config_exec_t,s0) - /opt/brother/Printers(.*/)?inf(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) /opt/gutenprint/ppds(/.*)? gen_context(system_u:object_r:cupsd_rw_etc_t,s0) diff --git a/policy/modules/contrib/cups.te b/policy/modules/contrib/cups.te index f5bf055d..14a4cfd7 100644 --- a/policy/modules/contrib/cups.te +++ b/policy/modules/contrib/cups.te @@ -1,4 +1,4 @@ -policy_module(cups, 1.21.0) +policy_module(cups, 1.21.1) ######################################## # diff --git a/policy/modules/contrib/dbus.fc b/policy/modules/contrib/dbus.fc index c96d02a3..c7baa6ba 100644 --- a/policy/modules/contrib/dbus.fc +++ b/policy/modules/contrib/dbus.fc @@ -2,10 +2,6 @@ HOME_DIR/\.dbus(/.*)? gen_context(system_u:object_r:session_dbusd_home_t,s0) /etc/dbus-.*(/.*)? gen_context(system_u:object_r:dbusd_etc_t,s0) -/bin/dbus-daemon -- gen_context(system_u:object_r:dbusd_exec_t,s0) - -/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) - /usr/bin/dbus-daemon(-1)? -- gen_context(system_u:object_r:dbusd_exec_t,s0) /usr/lib/dbus-.*/dbus-daemon-launch-helper -- gen_context(system_u:object_r:dbusd_exec_t,s0) diff --git a/policy/modules/contrib/dbus.te b/policy/modules/contrib/dbus.te index 996fc683..42c7d4fe 100644 --- a/policy/modules/contrib/dbus.te +++ b/policy/modules/contrib/dbus.te @@ -1,4 +1,4 @@ -policy_module(dbus, 1.22.0) +policy_module(dbus, 1.22.1) gen_require(` class dbus all_dbus_perms; diff --git a/policy/modules/contrib/devicekit.fc b/policy/modules/contrib/devicekit.fc index 8161451d..2b6d443c 100644 --- a/policy/modules/contrib/devicekit.fc +++ b/policy/modules/contrib/devicekit.fc @@ -1,6 +1,3 @@ -/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) -/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) - /usr/lib/udev/udisks-part-id -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) /usr/lib/udisks2/udisksd -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) /usr/lib/udisks/udisks-daemon -- gen_context(system_u:object_r:devicekit_disk_exec_t,s0) diff --git a/policy/modules/contrib/devicekit.te b/policy/modules/contrib/devicekit.te index 229c6b2d..a5926c4a 100644 --- a/policy/modules/contrib/devicekit.te +++ b/policy/modules/contrib/devicekit.te @@ -1,4 +1,4 @@ -policy_module(devicekit, 1.6.0) +policy_module(devicekit, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/drbd.fc b/policy/modules/contrib/drbd.fc index 671a3fb6..d5d54f78 100644 --- a/policy/modules/contrib/drbd.fc +++ b/policy/modules/contrib/drbd.fc @@ -1,8 +1,5 @@ /etc/rc\.d/init\.d/drbd -- gen_context(system_u:object_r:drbd_initrc_exec_t,s0) -/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) -/sbin/drbdsetup -- gen_context(system_u:object_r:drbd_exec_t,s0) - /usr/lib/ocf/resource.\d/linbit/drbd -- gen_context(system_u:object_r:drbd_exec_t,s0) /usr/sbin/drbdadm -- gen_context(system_u:object_r:drbd_exec_t,s0) diff --git a/policy/modules/contrib/drbd.te b/policy/modules/contrib/drbd.te index 0d8ed272..0d1e6366 100644 --- a/policy/modules/contrib/drbd.te +++ b/policy/modules/contrib/drbd.te @@ -1,4 +1,4 @@ -policy_module(drbd, 1.2.0) +policy_module(drbd, 1.2.1) ######################################## # diff --git a/policy/modules/contrib/iscsi.fc b/policy/modules/contrib/iscsi.fc index df23b9ba..29c1e5cd 100644 --- a/policy/modules/contrib/iscsi.fc +++ b/policy/modules/contrib/iscsi.fc @@ -1,9 +1,5 @@ /etc/rc\.d/init\.d/((iscsi)|(iscsid)) -- gen_context(system_u:object_r:iscsi_initrc_exec_t,s0) -/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) -/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) -/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) - /usr/sbin/iscsid -- gen_context(system_u:object_r:iscsid_exec_t,s0) /usr/sbin/brcm_iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) /usr/sbin/iscsiuio -- gen_context(system_u:object_r:iscsid_exec_t,s0) diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/contrib/iscsi.te index 54f187cd..8061f7ea 100644 --- a/policy/modules/contrib/iscsi.te +++ b/policy/modules/contrib/iscsi.te @@ -1,4 +1,4 @@ -policy_module(iscsi, 1.11.0) +policy_module(iscsi, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/kdump.fc b/policy/modules/contrib/kdump.fc index d5ec0772..94c0daa2 100644 --- a/policy/modules/contrib/kdump.fc +++ b/policy/modules/contrib/kdump.fc @@ -2,14 +2,9 @@ /etc/rc\.d/init\.d/kdump -- gen_context(system_u:object_r:kdump_initrc_exec_t,s0) -/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) - /usr/bin/kdumpctl -- gen_context(system_u:object_r:kdumpctl_exec_t,s0) /usr/lib/systemd/system/kdump.*\.service -- gen_context(system_u:object_r:kdump_unit_t,s0) -/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) -/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) - /usr/sbin/kdump -- gen_context(system_u:object_r:kdump_exec_t,s0) /usr/sbin/kexec -- gen_context(system_u:object_r:kdump_exec_t,s0) diff --git a/policy/modules/contrib/kdump.te b/policy/modules/contrib/kdump.te index 1f635092..e758c15f 100644 --- a/policy/modules/contrib/kdump.te +++ b/policy/modules/contrib/kdump.te @@ -1,4 +1,4 @@ -policy_module(kdump, 1.5.0) +policy_module(kdump, 1.5.1) ####################################### # diff --git a/policy/modules/contrib/kudzu.fc b/policy/modules/contrib/kudzu.fc index 0e98a015..a0030a74 100644 --- a/policy/modules/contrib/kudzu.fc +++ b/policy/modules/contrib/kudzu.fc @@ -1,8 +1,5 @@ /etc/rc\.d/init\.d/kudzu -- gen_context(system_u:object_r:kudzu_initrc_exec_t,s0) -/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) -/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) - /usr/sbin/kmodule -- gen_context(system_u:object_r:kudzu_exec_t,s0) /usr/sbin/kudzu -- gen_context(system_u:object_r:kudzu_exec_t,s0) diff --git a/policy/modules/contrib/kudzu.te b/policy/modules/contrib/kudzu.te index a5f91822..4116d008 100644 --- a/policy/modules/contrib/kudzu.te +++ b/policy/modules/contrib/kudzu.te @@ -1,4 +1,4 @@ -policy_module(kudzu, 1.12.0) +policy_module(kudzu, 1.12.1) ######################################## # diff --git a/policy/modules/contrib/loadkeys.fc b/policy/modules/contrib/loadkeys.fc index c6fe71b7..38f91fed 100644 --- a/policy/modules/contrib/loadkeys.fc +++ b/policy/modules/contrib/loadkeys.fc @@ -1,5 +1,2 @@ -/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) -/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) - /usr/bin/loadkeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) /usr/bin/unikeys -- gen_context(system_u:object_r:loadkeys_exec_t,s0) diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/contrib/loadkeys.te index ad974220..ca8e7015 100644 --- a/policy/modules/contrib/loadkeys.te +++ b/policy/modules/contrib/loadkeys.te @@ -1,4 +1,4 @@ -policy_module(loadkeys, 1.11.0) +policy_module(loadkeys, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/mta.fc b/policy/modules/contrib/mta.fc index f42896cb..24681349 100644 --- a/policy/modules/contrib/mta.fc +++ b/policy/modules/contrib/mta.fc @@ -5,8 +5,6 @@ HOME_DIR/\.mailrc -- gen_context(system_u:object_r:mail_home_t,s0) HOME_DIR/Maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) HOME_DIR/\.maildir(/.*)? gen_context(system_u:object_r:mail_home_rw_t,s0) -/bin/mail(x)? -- gen_context(system_u:object_r:sendmail_exec_t,s0) - /etc/aliases -- gen_context(system_u:object_r:etc_aliases_t,s0) /etc/aliases\.db -- gen_context(system_u:object_r:etc_aliases_t,s0) /etc/mail(/.*)? gen_context(system_u:object_r:etc_mail_t,s0) diff --git a/policy/modules/contrib/mta.te b/policy/modules/contrib/mta.te index 51b3bbb9..f0c4b92c 100644 --- a/policy/modules/contrib/mta.te +++ b/policy/modules/contrib/mta.te @@ -1,4 +1,4 @@ -policy_module(mta, 2.8.0) +policy_module(mta, 2.8.1) ######################################## # diff --git a/policy/modules/contrib/networkmanager.fc b/policy/modules/contrib/networkmanager.fc index 6c54e0e7..d24e9f0c 100644 --- a/policy/modules/contrib/networkmanager.fc +++ b/policy/modules/contrib/networkmanager.fc @@ -21,9 +21,6 @@ /usr/lib/systemd/system/[^/]*NetworkManager.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) /usr/lib/systemd/system/[^/]*wpa_supplicant.* -- gen_context(system_u:object_r:NetworkManager_unit_t,s0) -/sbin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) -/sbin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) - /usr/bin/NetworkManager -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) /usr/bin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0) /usr/bin/wpa_supplicant -- gen_context(system_u:object_r:NetworkManager_exec_t,s0) diff --git a/policy/modules/contrib/networkmanager.te b/policy/modules/contrib/networkmanager.te index 3b666807..27b92658 100644 --- a/policy/modules/contrib/networkmanager.te +++ b/policy/modules/contrib/networkmanager.te @@ -1,4 +1,4 @@ -policy_module(networkmanager, 1.20.0) +policy_module(networkmanager, 1.20.1) ######################################## # diff --git a/policy/modules/contrib/nis.fc b/policy/modules/contrib/nis.fc index a5c3ed9b..2b86f44d 100644 --- a/policy/modules/contrib/nis.fc +++ b/policy/modules/contrib/nis.fc @@ -5,8 +5,6 @@ /etc/ypserv\.conf -- gen_context(system_u:object_r:ypserv_conf_t,s0) -/sbin/ypbind -- gen_context(system_u:object_r:ypbind_exec_t,s0) - /usr/lib/yp/ypxfr -- gen_context(system_u:object_r:ypxfr_exec_t,s0) /usr/lib/systemd/system/ypbind.*\.service -- gen_context(system_u:object_r:ypbind_unit_t,s0) diff --git a/policy/modules/contrib/nis.te b/policy/modules/contrib/nis.te index 0fda4fa3..c49ecb0b 100644 --- a/policy/modules/contrib/nis.te +++ b/policy/modules/contrib/nis.te @@ -1,4 +1,4 @@ -policy_module(nis, 1.15.0) +policy_module(nis, 1.15.1) ######################################## # diff --git a/policy/modules/contrib/nut.fc b/policy/modules/contrib/nut.fc index 54ab9020..5fa41e6a 100644 --- a/policy/modules/contrib/nut.fc +++ b/policy/modules/contrib/nut.fc @@ -4,10 +4,6 @@ /etc/rc\.d/init\.d/nut-driver -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) /etc/rc\.d/init\.d/nut-server -- gen_context(system_u:object_r:nut_initrc_exec_t,s0) -/sbin/upsd -- gen_context(system_u:object_r:nut_upsd_exec_t,s0) -/sbin/upsdrvctl -- gen_context(system_u:object_r:nut_upsdrvctl_exec_t,s0) -/sbin/upsmon -- gen_context(system_u:object_r:nut_upsmon_exec_t,s0) - /usr/lib/cgi-bin/nut/upsimage\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) /usr/lib/cgi-bin/nut/upsset\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) /usr/lib/cgi-bin/nut/upsstats\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0) diff --git a/policy/modules/contrib/nut.te b/policy/modules/contrib/nut.te index 5471e631..8086281f 100644 --- a/policy/modules/contrib/nut.te +++ b/policy/modules/contrib/nut.te @@ -1,4 +1,4 @@ -policy_module(nut, 1.6.0) +policy_module(nut, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/oddjob.fc b/policy/modules/contrib/oddjob.fc index 243a8098..d20f5ea2 100644 --- a/policy/modules/contrib/oddjob.fc +++ b/policy/modules/contrib/oddjob.fc @@ -1,5 +1,3 @@ -/sbin/mkhomedir_helper -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) - /usr/lib/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) /usr/libexec/oddjob/mkhomedir -- gen_context(system_u:object_r:oddjob_mkhomedir_exec_t,s0) diff --git a/policy/modules/contrib/oddjob.te b/policy/modules/contrib/oddjob.te index cf72de7e..c01d4f62 100644 --- a/policy/modules/contrib/oddjob.te +++ b/policy/modules/contrib/oddjob.te @@ -1,4 +1,4 @@ -policy_module(oddjob, 1.11.0) +policy_module(oddjob, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/pcmcia.fc b/policy/modules/contrib/pcmcia.fc index e4538bc4..b508069e 100644 --- a/policy/modules/contrib/pcmcia.fc +++ b/policy/modules/contrib/pcmcia.fc @@ -1,8 +1,5 @@ /etc/apm/event\.d/pcmcia -- gen_context(system_u:object_r:cardmgr_exec_t,s0) -/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) -/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) - /usr/sbin/cardctl -- gen_context(system_u:object_r:cardctl_exec_t,s0) /usr/sbin/cardmgr -- gen_context(system_u:object_r:cardmgr_exec_t,s0) diff --git a/policy/modules/contrib/pcmcia.te b/policy/modules/contrib/pcmcia.te index b8454876..ceab5763 100644 --- a/policy/modules/contrib/pcmcia.te +++ b/policy/modules/contrib/pcmcia.te @@ -1,4 +1,4 @@ -policy_module(pcmcia, 1.8.0) +policy_module(pcmcia, 1.8.1) ######################################## # diff --git a/policy/modules/contrib/plymouthd.fc b/policy/modules/contrib/plymouthd.fc index 0f2fc4bb..8eab91b8 100644 --- a/policy/modules/contrib/plymouthd.fc +++ b/policy/modules/contrib/plymouthd.fc @@ -1,7 +1,3 @@ -/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) - -/sbin/plymouthd -- gen_context(system_u:object_r:plymouthd_exec_t,s0) - /usr/bin/plymouth -- gen_context(system_u:object_r:plymouth_exec_t,s0) # Systemd unit file diff --git a/policy/modules/contrib/plymouthd.te b/policy/modules/contrib/plymouthd.te index 3e19efb5..c9c04040 100644 --- a/policy/modules/contrib/plymouthd.te +++ b/policy/modules/contrib/plymouthd.te @@ -1,4 +1,4 @@ -policy_module(plymouthd, 1.4.0) +policy_module(plymouthd, 1.4.1) ######################################## # diff --git a/policy/modules/contrib/portmap.fc b/policy/modules/contrib/portmap.fc index 9264840d..d15c7072 100644 --- a/policy/modules/contrib/portmap.fc +++ b/policy/modules/contrib/portmap.fc @@ -1,9 +1,5 @@ /etc/rc\.d/init\.d/portmap -- gen_context(system_u:object_r:portmap_initrc_exec_t,s0) -/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) -/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) -/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) - /usr/sbin/pmap_dump -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) /usr/sbin/pmap_set -- gen_context(system_u:object_r:portmap_helper_exec_t,s0) /usr/sbin/portmap -- gen_context(system_u:object_r:portmap_exec_t,s0) diff --git a/policy/modules/contrib/portmap.te b/policy/modules/contrib/portmap.te index b5abc87b..292b3aa8 100644 --- a/policy/modules/contrib/portmap.te +++ b/policy/modules/contrib/portmap.te @@ -1,4 +1,4 @@ -policy_module(portmap, 1.13.0) +policy_module(portmap, 1.13.1) ######################################## # diff --git a/policy/modules/contrib/portreserve.fc b/policy/modules/contrib/portreserve.fc index 0207d6c8..de7da13c 100644 --- a/policy/modules/contrib/portreserve.fc +++ b/policy/modules/contrib/portreserve.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/portreserve -- gen_context(system_u:object_r:portreserve_initrc_exec_t,s0) -/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) - /usr/sbin/portreserve -- gen_context(system_u:object_r:portreserve_exec_t,s0) /run/portreserve(/.*)? gen_context(system_u:object_r:portreserve_var_run_t,s0) diff --git a/policy/modules/contrib/portreserve.te b/policy/modules/contrib/portreserve.te index 4aa79a45..7e05b61b 100644 --- a/policy/modules/contrib/portreserve.te +++ b/policy/modules/contrib/portreserve.te @@ -1,4 +1,4 @@ -policy_module(portreserve, 1.6.0) +policy_module(portreserve, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/ppp.fc b/policy/modules/contrib/ppp.fc index 0b03de18..d31591a5 100644 --- a/policy/modules/contrib/ppp.fc +++ b/policy/modules/contrib/ppp.fc @@ -9,9 +9,6 @@ HOME_DIR/\.ppprc -- gen_context(system_u:object_r:ppp_home_t,s0) /etc/ppp/resolv\.conf -- gen_context(system_u:object_r:pppd_etc_rw_t,s0) /etc/ppp/(auth|ip(v6|x)?)-(up|down) -- gen_context(system_u:object_r:pppd_initrc_exec_t,s0) -/sbin/ppp-watch -- gen_context(system_u:object_r:pppd_exec_t,s0) -/sbin/pppoe-server -- gen_context(system_u:object_r:pppd_exec_t,s0) - /usr/lib/systemd/system/ppp.*\.service -- gen_context(system_u:object_r:pppd_unit_t,s0) /usr/sbin/ipppd -- gen_context(system_u:object_r:pppd_exec_t,s0) diff --git a/policy/modules/contrib/ppp.te b/policy/modules/contrib/ppp.te index ba856667..27718824 100644 --- a/policy/modules/contrib/ppp.te +++ b/policy/modules/contrib/ppp.te @@ -1,4 +1,4 @@ -policy_module(ppp, 1.17.0) +policy_module(ppp, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/prelude.fc b/policy/modules/contrib/prelude.fc index fd4ccde3..75df3cf6 100644 --- a/policy/modules/contrib/prelude.fc +++ b/policy/modules/contrib/prelude.fc @@ -4,8 +4,6 @@ /etc/rc\.d/init\.d/prelude-lml -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) /etc/rc\.d/init\.d/prelude-manager -- gen_context(system_u:object_r:prelude_initrc_exec_t,s0) -/sbin/audisp-prelude -- gen_context(system_u:object_r:prelude_audisp_exec_t,s0) - /usr/bin/prelude-correlator -- gen_context(system_u:object_r:prelude_correlator_exec_t,s0) /usr/bin/prelude-lml -- gen_context(system_u:object_r:prelude_lml_exec_t,s0) /usr/bin/prelude-manager -- gen_context(system_u:object_r:prelude_exec_t,s0) diff --git a/policy/modules/contrib/prelude.te b/policy/modules/contrib/prelude.te index d3aa038a..4f14f0b6 100644 --- a/policy/modules/contrib/prelude.te +++ b/policy/modules/contrib/prelude.te @@ -1,4 +1,4 @@ -policy_module(prelude, 1.7.0) +policy_module(prelude, 1.7.1) ######################################## # diff --git a/policy/modules/contrib/quota.fc b/policy/modules/contrib/quota.fc index a6093189..c3d05ba1 100644 --- a/policy/modules/contrib/quota.fc +++ b/policy/modules/contrib/quota.fc @@ -10,9 +10,6 @@ HOME_DIR/a?quota\.(user|group) -- gen_context(system_u:object_r:quota_db_t,s0) /etc/rc\.d/init\.d/quota_nld -- gen_context(system_u:object_r:quota_nld_initrc_exec_t,s0) -/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) -/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) - /usr/sbin/convertquota -- gen_context(system_u:object_r:quota_exec_t,s0) /usr/sbin/quota(check|on) -- gen_context(system_u:object_r:quota_exec_t,s0) /usr/sbin/quota_nld -- gen_context(system_u:object_r:quota_nld_exec_t,s0) diff --git a/policy/modules/contrib/quota.te b/policy/modules/contrib/quota.te index 95262d48..9952f537 100644 --- a/policy/modules/contrib/quota.te +++ b/policy/modules/contrib/quota.te @@ -1,4 +1,4 @@ -policy_module(quota, 1.9.0) +policy_module(quota, 1.9.1) ######################################## # diff --git a/policy/modules/contrib/raid.fc b/policy/modules/contrib/raid.fc index dc17e796..dc26d8d3 100644 --- a/policy/modules/contrib/raid.fc +++ b/policy/modules/contrib/raid.fc @@ -3,14 +3,6 @@ /etc/rc\.d/init\.d/mdmonitor -- gen_context(system_u:object_r:mdadm_initrc_exec_t,s0) -/sbin/iprdump -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/iprinit -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/iprupdate -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdadm -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdmon -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/mdmpd -- gen_context(system_u:object_r:mdadm_exec_t,s0) -/sbin/raid-check -- gen_context(system_u:object_r:mdadm_exec_t,s0) - # Systemd unit files /usr/lib/systemd/system/[^/]*mdadm-.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) /usr/lib/systemd/system/[^/]*mdmon.* -- gen_context(system_u:object_r:mdadm_unit_t,s0) diff --git a/policy/modules/contrib/raid.te b/policy/modules/contrib/raid.te index 172bae9b..ad21e093 100644 --- a/policy/modules/contrib/raid.te +++ b/policy/modules/contrib/raid.te @@ -1,4 +1,4 @@ -policy_module(raid, 1.17.0) +policy_module(raid, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/rdisc.fc b/policy/modules/contrib/rdisc.fc index e9765c0f..168de323 100644 --- a/policy/modules/contrib/rdisc.fc +++ b/policy/modules/contrib/rdisc.fc @@ -1,3 +1 @@ -/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) - /usr/sbin/rdisc -- gen_context(system_u:object_r:rdisc_exec_t,s0) diff --git a/policy/modules/contrib/rdisc.te b/policy/modules/contrib/rdisc.te index 9196c1db..ea6d2d92 100644 --- a/policy/modules/contrib/rdisc.te +++ b/policy/modules/contrib/rdisc.te @@ -1,4 +1,4 @@ -policy_module(rdisc, 1.8.0) +policy_module(rdisc, 1.8.1) ######################################## # diff --git a/policy/modules/contrib/readahead.fc b/policy/modules/contrib/readahead.fc index 9519bd88..5932e207 100644 --- a/policy/modules/contrib/readahead.fc +++ b/policy/modules/contrib/readahead.fc @@ -1,5 +1,3 @@ -/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) - /usr/sbin/readahead.* -- gen_context(system_u:object_r:readahead_exec_t,s0) /var/lib/readahead(/.*)? gen_context(system_u:object_r:readahead_var_lib_t,s0) diff --git a/policy/modules/contrib/readahead.te b/policy/modules/contrib/readahead.te index 9b2d53fd..080c0ad0 100644 --- a/policy/modules/contrib/readahead.te +++ b/policy/modules/contrib/readahead.te @@ -1,4 +1,4 @@ -policy_module(readahead, 1.15.0) +policy_module(readahead, 1.15.1) ######################################## # diff --git a/policy/modules/contrib/resmgr.fc b/policy/modules/contrib/resmgr.fc index 9dec87b4..138f76e2 100644 --- a/policy/modules/contrib/resmgr.fc +++ b/policy/modules/contrib/resmgr.fc @@ -2,8 +2,6 @@ /etc/rc\.d/init\.d/resmgr -- gen_context(system_u:object_r:resmgrd_initrc_exec_t,s0) -/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) - /usr/sbin/resmgrd -- gen_context(system_u:object_r:resmgrd_exec_t,s0) /run/\.resmgr_socket -s gen_context(system_u:object_r:resmgrd_var_run_t,s0) diff --git a/policy/modules/contrib/resmgr.te b/policy/modules/contrib/resmgr.te index db7eca57..25e40670 100644 --- a/policy/modules/contrib/resmgr.te +++ b/policy/modules/contrib/resmgr.te @@ -1,4 +1,4 @@ -policy_module(resmgr, 1.5.0) +policy_module(resmgr, 1.5.1) ######################################## # diff --git a/policy/modules/contrib/rpc.fc b/policy/modules/contrib/rpc.fc index 17ad35a5..9d6d5241 100644 --- a/policy/modules/contrib/rpc.fc +++ b/policy/modules/contrib/rpc.fc @@ -4,9 +4,6 @@ /etc/rc\.d/init\.d/nfslock -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) /etc/rc\.d/init\.d/rpcidmapd -- gen_context(system_u:object_r:rpcd_initrc_exec_t,s0) -/sbin/rpc\..* -- gen_context(system_u:object_r:rpcd_exec_t,s0) -/sbin/sm-notify -- gen_context(system_u:object_r:rpcd_exec_t,s0) - /usr/lib/systemd/system/nfs.*\.service -- gen_context(system_u:object_r:nfsd_unit_t,s0) /usr/lib/systemd/system/rpc.*\.service -- gen_context(system_u:object_r:rpcd_unit_t,s0) diff --git a/policy/modules/contrib/rpc.te b/policy/modules/contrib/rpc.te index 2e471568..cf1f775b 100644 --- a/policy/modules/contrib/rpc.te +++ b/policy/modules/contrib/rpc.te @@ -1,4 +1,4 @@ -policy_module(rpc, 1.19.0) +policy_module(rpc, 1.19.1) ######################################## # diff --git a/policy/modules/contrib/rpcbind.fc b/policy/modules/contrib/rpcbind.fc index b4bb017f..35f6ae43 100644 --- a/policy/modules/contrib/rpcbind.fc +++ b/policy/modules/contrib/rpcbind.fc @@ -1,7 +1,5 @@ /etc/rc\.d/init\.d/rpcbind -- gen_context(system_u:object_r:rpcbind_initrc_exec_t,s0) -/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) - /usr/sbin/rpcbind -- gen_context(system_u:object_r:rpcbind_exec_t,s0) /var/cache/rpcbind(/.*)? gen_context(system_u:object_r:rpcbind_var_lib_t,s0) diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/contrib/rpcbind.te index e3a4cc00..8e752265 100644 --- a/policy/modules/contrib/rpcbind.te +++ b/policy/modules/contrib/rpcbind.te @@ -1,4 +1,4 @@ -policy_module(rpcbind, 1.11.0) +policy_module(rpcbind, 1.11.1) ######################################## # diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc index e4c28502..71c90c7e 100644 --- a/policy/modules/contrib/rpm.fc +++ b/policy/modules/contrib/rpm.fc @@ -1,9 +1,5 @@ -/bin/rpm -- gen_context(system_u:object_r:rpm_exec_t,s0) - /etc/rc\.d/init\.d/bcfg2 -- gen_context(system_u:object_r:rpm_initrc_exec_t,s0) -/sbin/yast2 -- gen_context(system_u:object_r:rpm_exec_t,s0) - /usr/bin/debuginfo-install -- gen_context(system_u:object_r:debuginfo_exec_t,s0) /usr/bin/fedora-rmdevelrpms -- gen_context(system_u:object_r:rpm_exec_t,s0) /usr/bin/online_update -- gen_context(system_u:object_r:rpm_exec_t,s0) diff --git a/policy/modules/contrib/rpm.te b/policy/modules/contrib/rpm.te index 2a709ce6..6ab5fd9e 100644 --- a/policy/modules/contrib/rpm.te +++ b/policy/modules/contrib/rpm.te @@ -1,4 +1,4 @@ -policy_module(rpm, 1.19.0) +policy_module(rpm, 1.19.1) ######################################## # diff --git a/policy/modules/contrib/shorewall.fc b/policy/modules/contrib/shorewall.fc index 3349532e..e92567aa 100644 --- a/policy/modules/contrib/shorewall.fc +++ b/policy/modules/contrib/shorewall.fc @@ -3,9 +3,6 @@ /etc/shorewall(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) /etc/shorewall-lite(/.*)? gen_context(system_u:object_r:shorewall_etc_t,s0) -/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) -/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) - /usr/sbin/shorewall6? -- gen_context(system_u:object_r:shorewall_exec_t,s0) /usr/sbin/shorewall-lite -- gen_context(system_u:object_r:shorewall_exec_t,s0) diff --git a/policy/modules/contrib/shorewall.te b/policy/modules/contrib/shorewall.te index 29661dea..e2e6c30d 100644 --- a/policy/modules/contrib/shorewall.te +++ b/policy/modules/contrib/shorewall.te @@ -1,4 +1,4 @@ -policy_module(shorewall, 1.6.0) +policy_module(shorewall, 1.6.1) ######################################## # diff --git a/policy/modules/contrib/shutdown.fc b/policy/modules/contrib/shutdown.fc index 199c6894..e6730a03 100644 --- a/policy/modules/contrib/shutdown.fc +++ b/policy/modules/contrib/shutdown.fc @@ -1,9 +1,5 @@ /etc/nologin -- gen_context(system_u:object_r:shutdown_etc_t,s0) -/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) - -/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) - /usr/lib/upstart/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) /usr/sbin/shutdown -- gen_context(system_u:object_r:shutdown_exec_t,s0) diff --git a/policy/modules/contrib/shutdown.te b/policy/modules/contrib/shutdown.te index e10149f1..6a0b126e 100644 --- a/policy/modules/contrib/shutdown.te +++ b/policy/modules/contrib/shutdown.te @@ -1,4 +1,4 @@ -policy_module(shutdown, 1.4.0) +policy_module(shutdown, 1.4.1) ######################################## # diff --git a/policy/modules/contrib/usbmodules.fc b/policy/modules/contrib/usbmodules.fc index 02d72531..66604b50 100644 --- a/policy/modules/contrib/usbmodules.fc +++ b/policy/modules/contrib/usbmodules.fc @@ -1,3 +1 @@ -/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) - /usr/sbin/usbmodules -- gen_context(system_u:object_r:usbmodules_exec_t,s0) diff --git a/policy/modules/contrib/usbmodules.te b/policy/modules/contrib/usbmodules.te index 279e511d..d4307b9d 100644 --- a/policy/modules/contrib/usbmodules.te +++ b/policy/modules/contrib/usbmodules.te @@ -1,4 +1,4 @@ -policy_module(usbmodules, 1.3.0) +policy_module(usbmodules, 1.3.1) ######################################## # diff --git a/policy/modules/contrib/vpn.fc b/policy/modules/contrib/vpn.fc index 02701c33..1cd43c66 100644 --- a/policy/modules/contrib/vpn.fc +++ b/policy/modules/contrib/vpn.fc @@ -1,5 +1,3 @@ -/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) - /usr/bin/openconnect -- gen_context(system_u:object_r:vpnc_exec_t,s0) /usr/sbin/vpnc -- gen_context(system_u:object_r:vpnc_exec_t,s0) diff --git a/policy/modules/contrib/vpn.te b/policy/modules/contrib/vpn.te index e11d7511..85353fa7 100644 --- a/policy/modules/contrib/vpn.te +++ b/policy/modules/contrib/vpn.te @@ -1,4 +1,4 @@ -policy_module(vpn, 1.17.0) +policy_module(vpn, 1.17.1) ######################################## # diff --git a/policy/modules/contrib/zosremote.fc b/policy/modules/contrib/zosremote.fc index 7a7fc614..adfd4a21 100644 --- a/policy/modules/contrib/zosremote.fc +++ b/policy/modules/contrib/zosremote.fc @@ -1,3 +1 @@ -/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) - /usr/sbin/audispd-zos-remote -- gen_context(system_u:object_r:zos_remote_exec_t,s0) diff --git a/policy/modules/contrib/zosremote.te b/policy/modules/contrib/zosremote.te index bc6a5db7..7139cde4 100644 --- a/policy/modules/contrib/zosremote.te +++ b/policy/modules/contrib/zosremote.te @@ -1,4 +1,4 @@ -policy_module(zosremote, 1.2.0) +policy_module(zosremote, 1.2.1) ######################################## #