Accepted refpolicy 0.0.20061018-3 (source)
archive at ubuntu.com
Fri Feb 2 16:37:59 GMT 2007
-> Component: universe Section: admin
Date: Fri, 02 Feb 2007 15:58:46 +0000
Binary: selinux-policy-refpolicy-doc, selinux-policy-refpolicy-targeted, selinux-policy-refpolicy-strict, selinux-policy-refpolicy-src
Maintainer: Manoj Srivastava <srivasta at debian.org>
Changed-By: Andrew Mitchell <ajmitch at ihug.co.nz>
Closes: 402293 404309 404895 405103 405613
refpolicy (0.0.20061018-3) unstable; urgency=high
* Bug fix: "refpolicy: FTBFS: /bin/sh: debian/stamp/config-strict: No
such file or directory", thanks to Lucas Nussbaum. This was fixed by
moving all the stamps into ./debian instead. I'll re-visit the
./debian/stamp/ directory in lenny. This is a pretty minor packaging
change. (Closes: #405613).
* Bug fix: "selinux-policy-refpolicy-targeted: Policy for dcc misses
Debian's FHS paths", thanks to Devin Carraway. From the bug report:
Many of the files in these packages are overlooked when labelling
files, because refpolicy's dcc module stipulates paths not consistent
with the Debian FHS layout. The files go unlabelled and dcc-client
(at least) stops working. The two major problems are the references
to /usr/libexec/dcc (damons, placed in /usr/sbin by the Debian
packages) and to /var/dcc (all sorts of things, placed under
/var/lib/dcc). A side effect of the latter is that dccifd_t and
probably others need search on var_lib_t, through which it must pass
to get to /var/lib/dcc. Fixed the policy; will send upstream.
* Bug fix: "selinux-policy-refpolicy-targeted: clamav policy forbids
clamd_t search on /var/lib", thanks to Devin Carraway. This is a
simple one line change, and obviously an oversight; I think getting
clamd to work is fairly important. (Closes: #404895).
* Bug fix: "selinux-policy-refpolicy-targeted: Multiple problems with
courier policy", thanks to Devin Carraway. There is detailed
information of the changes made in the bug report, and in the commit
logs. Again, fixing courier daemons seems pretty important; SELinux
tends to get used a lot on remote mail servers, and this fixes issues
with the policy. (Closes: #405103).
refpolicy (0.0.20061018-2) unstable; urgency=high
* The This update enables MCS for targeted and strict, uses 1024
categories (as Fedora uses - necessary for compatability). Please note
that enabling MCS categories is required for compatibility with
filesystems created on Fedora Core 5 and above, RHEL 5 and above, and
CentOS 5 and above. MCS categories is also a feature that we plan for
all future releases of SE Linux and does not have a nice upgrade path
- releasing etch without MCS will make things painful for SE Linux
users on the upgrade to lenny. This feature has been extensively
tested by Russel Coker and myself, and does not otherwise impact the
* Allow semanage to use the initrd file descriptor in targeted policy.
* Fix a bug with restorecon.
* Bug fix: "refpolicy: qemu should have execmem permissions", thanks to
David Haerdeman (Closes: #402293).
734eb13417de2ee4acdc33a1ac110f45 51639 admin optional refpolicy_0.0.20061018-3.diff.gz
385420b7765f56c5e39a4b85724f4abb 813 admin optional refpolicy_0.0.20061018-3.dsc
More information about the feisty-changes