From mboxrd@z Thu Jan 1 00:00:00 1970 From: guido@trentalancia.com (Guido Trentalancia) Date: Mon, 24 Jan 2011 01:43:40 +0100 Subject: [refpolicy] [PATCH/RFC 0/19]: patch set to update the git reference policy In-Reply-To: <4D397E26.4090904@tresys.com> References: <1295397630.3377.10.camel@tesla.lan> <4D383627.60804@tresys.com> <1295544776.4702.16.camel@tesla.lan> <4D397E26.4090904@tresys.com> Message-ID: <1295829820.3862.59.camel@tesla.lan> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Hello again ! I am resubmitting the changes that I proposed a few days ago for the latest reference policy. There are a few additions and now the patch has been split into a set of 19 logical patches. However, there might be unavoidable dependencies between a few patches. I have applied the patches in the following order (and I cannot guarantee that they can still be applied in a different order, especially because of the above mentioned dependencies, e.g. on new interfaces): 1/19: refpolicy-git-18012011-update-file-contexts.patch 2/19: refpolicy-git-18012011-update-dbus-messaging.patch 3/19: refpolicy-git-18012011-update-readahead.patch 4/19: refpolicy-git-18012011-update-cpufreqselector.patch 5/19: refpolicy-git-18012011-update-mount.patch 6/19: refpolicy-git-18012011-update-kernel-new-interfaces.patch 7/19: refpolicy-git-18012011-update-sysadm-role.patch 8/19: refpolicy-git-18012011-update-dbus.patch 9/19: refpolicy-git-18012011-update-devicekit.patch 10/19: refpolicy-git-18012011-update-networkmanager.patch 11/19: refpolicy-git-18012011-update-setroubleshoot.patch 12/19: refpolicy-git-18012011-update-smartmon.patch 13/19: refpolicy-git-18012011-update-authlogin.patch 14/19: refpolicy-git-18012011-update-logging.patch 15/19: refpolicy-git-18012011-update-selinuxutil.patch 16/19: refpolicy-git-18012011-update-sysnetwork-new-interface.patch 17/19: refpolicy-git-18012011-update-sysnetwork-hal-read-pid-files.patch 18/19: refpolicy-git-18012011-update-consolekit.patch 19/19: refpolicy-git-18012011-update-plymouth.patch In general, this is a starting point, because I could not test all available modules, but in the future I might submit other patches for other modules. I have only tested the resulting policy with the following build configuration: TYPE=mcs DISTRO=redhat MONOLITHIC=n UBAC=n however I don't expect many issues with other kinds of builds. As already explained, the patch set aims to update some permissions needed on a modern generic Linux system. I have not used any specific distribution and all packages are in general latest upstream versions. Thanks very much for your attention and for your time. The patch set follows in separate messages to the Reference Policy mailing list having the subject "[PATCH/RFC x/19]: patch set to update the git reference policy", with the integer x varying from 1 to 19. Regards, Guido Trentalancia