2008-04-08 13:54:34 +00:00
|
|
|
diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/Makefile policycoreutils-2.0.46/Makefile
|
2007-12-19 17:55:58 +00:00
|
|
|
--- nsapolicycoreutils/Makefile 2007-12-19 06:02:52.000000000 -0500
|
2008-04-08 13:54:34 +00:00
|
|
|
+++ policycoreutils-2.0.46/Makefile 2008-04-08 09:35:27.000000000 -0400
|
2006-11-14 16:03:27 +00:00
|
|
|
@@ -1,4 +1,4 @@
|
2007-12-19 17:55:58 +00:00
|
|
|
-SUBDIRS = setfiles semanage load_policy newrole run_init secon audit2allow audit2why scripts sestatus semodule_package semodule semodule_link semodule_expand semodule_deps setsebool po
|
|
|
|
+SUBDIRS = setfiles semanage load_policy newrole run_init secon audit2allow audit2why scripts sestatus semodule_package semodule semodule_link semodule_expand semodule_deps setsebool po gui
|
2006-11-14 16:03:27 +00:00
|
|
|
|
2007-12-19 17:55:58 +00:00
|
|
|
INOTIFYH = $(shell ls /usr/include/sys/inotify.h 2>/dev/null)
|
|
|
|
|
2008-04-08 13:54:34 +00:00
|
|
|
diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/restorecond/restorecond.c policycoreutils-2.0.46/restorecond/restorecond.c
|
2007-07-20 16:09:40 +00:00
|
|
|
--- nsapolicycoreutils/restorecond/restorecond.c 2007-07-16 14:20:41.000000000 -0400
|
2008-04-08 13:54:34 +00:00
|
|
|
+++ policycoreutils-2.0.46/restorecond/restorecond.c 2008-04-08 09:35:27.000000000 -0400
|
2006-11-29 17:48:22 +00:00
|
|
|
@@ -210,9 +210,10 @@
|
|
|
|
}
|
|
|
|
|
|
|
|
if (fsetfilecon(fd, scontext) < 0) {
|
|
|
|
- syslog(LOG_ERR,
|
|
|
|
- "set context %s->%s failed:'%s'\n",
|
|
|
|
- filename, scontext, strerror(errno));
|
|
|
|
+ if (errno != EOPNOTSUPP)
|
|
|
|
+ syslog(LOG_ERR,
|
|
|
|
+ "set context %s->%s failed:'%s'\n",
|
|
|
|
+ filename, scontext, strerror(errno));
|
|
|
|
if (retcontext >= 0)
|
|
|
|
free(prev_context);
|
|
|
|
free(scontext);
|
|
|
|
@@ -225,8 +226,9 @@
|
|
|
|
if (retcontext >= 0)
|
|
|
|
free(prev_context);
|
|
|
|
} else {
|
|
|
|
- syslog(LOG_ERR, "get context on %s failed: '%s'\n",
|
|
|
|
- filename, strerror(errno));
|
|
|
|
+ if (errno != EOPNOTSUPP)
|
|
|
|
+ syslog(LOG_ERR, "get context on %s failed: '%s'\n",
|
|
|
|
+ filename, strerror(errno));
|
|
|
|
}
|
|
|
|
free(scontext);
|
|
|
|
close(fd);
|
2008-04-08 13:54:34 +00:00
|
|
|
diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/semanage/semanage.8 policycoreutils-2.0.46/semanage/semanage.8
|
|
|
|
--- nsapolicycoreutils/semanage/semanage.8 2008-04-08 09:37:21.000000000 -0400
|
|
|
|
+++ policycoreutils-2.0.46/semanage/semanage.8 2008-04-08 09:35:46.000000000 -0400
|
|
|
|
@@ -3,7 +3,9 @@
|
|
|
|
semanage \- SELinux Policy Management tool
|
|
|
|
|
|
|
|
.SH "SYNOPSIS"
|
|
|
|
-.B semanage {login|user|port|interface|fcontext|translation} \-l [\-n]
|
|
|
|
+.B semanage {boolean|login|user|port|interface|fcontext|translation} \-{l|D} [\-n]
|
|
|
|
+.br
|
|
|
|
+.B semanage boolean \-{d|m} [\-T] boolean
|
|
|
|
.br
|
|
|
|
.B semanage login \-{a|d|m} [\-sr] login_name
|
|
|
|
.br
|
|
|
|
@@ -43,6 +45,9 @@
|
|
|
|
.I \-d, \-\-delete
|
|
|
|
Delete a OBJECT record NAME
|
|
|
|
.TP
|
|
|
|
+.I \-D, \-\-deleteall
|
|
|
|
+Remove all OBJECTS local customizations
|
|
|
|
+.TP
|
|
|
|
.I \-f, \-\-ftype
|
|
|
|
File Type. This is used with fcontext.
|
|
|
|
Requires a file type as shown in the mode field by ls, e.g. use -d to match only directories or -- to match only regular files.
|
|
|
|
diff --exclude-from=exclude --exclude=sepolgen-1.0.11 --exclude=gui --exclude=po -N -u -r nsapolicycoreutils/semanage/seobject.py policycoreutils-2.0.46/semanage/seobject.py
|
2008-03-20 12:43:37 +00:00
|
|
|
--- nsapolicycoreutils/semanage/seobject.py 2008-01-24 14:41:25.000000000 -0500
|
2008-04-08 13:54:34 +00:00
|
|
|
+++ policycoreutils-2.0.46/semanage/seobject.py 2008-04-08 09:35:27.000000000 -0400
|
2008-03-20 12:43:37 +00:00
|
|
|
@@ -464,7 +464,7 @@
|
|
|
|
def __init__(self, store = ""):
|
|
|
|
semanageRecords.__init__(self, store)
|
|
|
|
|
|
|
|
- def add(self, name, roles, selevel, serange, prefix):
|
|
|
|
+ def add(self, name, roles, selevel, serange, prefix = "user"):
|
|
|
|
if is_mls_enabled == 1:
|
|
|
|
if serange == "":
|
|
|
|
serange = "s0"
|