Changeset 2776

Timestamp:

08/12/08 14:33:18 (4 months ago)

Author:

cpebenito

Message:

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Files:

• trunk/Changelog (modified) (1 diff)
• trunk/policy/modules/system/libraries.fc (modified) (1 diff)
• trunk/policy/modules/system/libraries.te (modified) (3 diffs)

trunk/Changelog

@@ +1 @@
+- Glibc 2.7 fix from Vaclav Ovsik.
-- Samba/winbind update from Mike Edenfield.
-- Policy size optimization with a non-security file attribute from James

trunk/policy/modules/system/libraries.fc

@@ -297 +297 @@
-# /var
-#
+/var/cache/ldconfig(/.*)?                       gen_context(system_u:object_r:ldconfig_cache_t,s0)
+
-/var/ftp/lib(64)?(/.*)?                         gen_context(system_u:object_r:lib_t,s0)
-/var/ftp/lib(64)?/ld[^/]*\.so(\.[^/]*)* --      gen_context(system_u:object_r:ld_so_t,s0)

trunk/policy/modules/system/libraries.te

@@ -1 +1 @@
-
-0
+1
-
-########################################
@@ -23 +23 @@
-init_system_domain(ldconfig_t,ldconfig_exec_t)
-role system_r types ldconfig_t;
+
+type ldconfig_cache_t;
+files_type(ldconfig_cache_t)
-
-type ldconfig_tmp_t;
@@ -51 +54 @@
-
-allow ldconfig_t self:capability sys_chroot;
+
+manage_files_pattern(ldconfig_t, ldconfig_cache_t, ldconfig_cache_t)
-
-allow ldconfig_t ld_so_cache_t:file manage_file_perms;