[COMMIT]refpolicy-contrib branch, master, updated. e6f073a7740ab4a4f322ed984f972282c401916e
Reference Policy commits mail list
refpolicy-commits at oss.tresys.com
Wed Sep 14 11:55:57 CDT 2011
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "refpolicy-contrib".
The branch, master has been updated
via e6f073a7740ab4a4f322ed984f972282c401916e (commit)
from 260b88365e2958ffc33a1c33f3dcf8da4c567db3 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit e6f073a7740ab4a4f322ed984f972282c401916e
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Sep 14 12:14:02 2011 -0400
Enable rules for ports that are defined, but do not have standard port numbers.
-----------------------------------------------------------------------
Summary of changes:
dante.te | 5 ++---
inetd.te | 6 +++---
2 files changed, 5 insertions(+), 6 deletions(-)
Detailed diffset:
:100644 100644 a8b93c0... b48572d... M dante.te
:100644 100644 c51a7b2... 6e82c4c... M inetd.te
diff --git a/dante.te b/dante.te
index a8b93c0..b48572d 100644
--- a/dante.te
+++ b/dante.te
@@ -1,4 +1,4 @@
-policy_module(dante, 1.7.0)
+policy_module(dante, 1.7.1)
########################################
#
@@ -46,8 +46,7 @@ corenet_udp_sendrecv_generic_node(dante_t)
corenet_tcp_sendrecv_all_ports(dante_t)
corenet_udp_sendrecv_all_ports(dante_t)
corenet_tcp_bind_generic_node(dante_t)
-#TODO: no portcons for this type
-#allow dante_t socks_port_t:tcp_socket name_bind;
+corenet_tcp_bind_socks_port(dante_t)
dev_read_sysfs(dante_t)
diff --git a/inetd.te b/inetd.te
index c51a7b2..6e82c4c 100644
--- a/inetd.te
+++ b/inetd.te
@@ -1,4 +1,4 @@
-policy_module(inetd, 1.11.0)
+policy_module(inetd, 1.11.1)
########################################
#
@@ -97,7 +97,7 @@ corenet_udp_bind_rsh_port(inetd_t)
corenet_tcp_bind_rsh_port(inetd_t)
corenet_tcp_bind_rsync_port(inetd_t)
corenet_udp_bind_rsync_port(inetd_t)
-#corenet_tcp_bind_stunnel_port(inetd_t)
+corenet_tcp_bind_stunnel_port(inetd_t)
corenet_tcp_bind_swat_port(inetd_t)
corenet_udp_bind_swat_port(inetd_t)
corenet_tcp_bind_telnetd_port(inetd_t)
@@ -118,7 +118,7 @@ corenet_sendrecv_ktalkd_server_packets(inetd_t)
corenet_sendrecv_printer_server_packets(inetd_t)
corenet_sendrecv_rsh_server_packets(inetd_t)
corenet_sendrecv_rsync_server_packets(inetd_t)
-#corenet_sendrecv_stunnel_server_packets(inetd_t)
+corenet_sendrecv_stunnel_server_packets(inetd_t)
corenet_sendrecv_swat_server_packets(inetd_t)
corenet_sendrecv_tftp_server_packets(inetd_t)
hooks/post-receive
--
refpolicy-contrib
More information about the Refpolicy-commits
mailing list