From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8B0FD13908F for ; Sun, 5 Feb 2017 06:29:42 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D604421C039; Sun, 5 Feb 2017 06:29:41 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9769FE0D9B for ; Sun, 5 Feb 2017 06:29:41 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 875AB34162D for ; Sun, 5 Feb 2017 06:29:40 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id F06103DC6 for ; Sun, 5 Feb 2017 06:29:38 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1486276014.23dbbea7dd09110633f8b4aeb1707573f841aa90.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/Changelog X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 23dbbea7dd09110633f8b4aeb1707573f841aa90 X-VCS-Branch: master Date: Sun, 5 Feb 2017 06:29:38 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 79a52741-fdad-47b6-9107-a81b70bffbb2 X-Archives-Hash: a70ff2b14ad6388351a124e287a0c3bb commit: 23dbbea7dd09110633f8b4aeb1707573f841aa90 Author: Chris PeBenito ieee org> AuthorDate: Sat Feb 4 18:30:54 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sun Feb 5 06:26:54 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=23dbbea7 Update Changelog for release. policy/modules/contrib/Changelog | 114 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 114 insertions(+) diff --git a/policy/modules/contrib/Changelog b/policy/modules/contrib/Changelog index f143cb9..907847c 100644 --- a/policy/modules/contrib/Changelog +++ b/policy/modules/contrib/Changelog @@ -1,3 +1,117 @@ +* Sat Feb 04 2017 Chris PeBenito - 2.20170204 +Chris PeBenito (41): + Module version bump for patches from Jason Zaman. + authbind: Remove dead policy. + Module version bump for cups patch from Guido Trentalancia. + Merge pull request #29 from cgzones/deprecated_macros + Module version bump for Debian fprintd fc entry from Laurent Bigonville. + Module version bumps for openoffice patches from Guido Trentalancia. + Module version bumps for patches from Guido Trentalancia. + Merge pull request #30 from cgzones/trailing_whitespaces + Module version bumps for mozilla and gpg patches from Luis Ressel. + Module version bump for patches from Guido Trentalancia. + Module version bump for patches from Guido Trentalancia. + rtkit, wm: Remove calls to nonexistant interfaces. + Module version bumps for patches from Guido Trentalancia. + rtkit: enable dbus chat with xdm + Module version bump for patches from Guido Trentalancia. + Module version bump for xscreensaver patch from Guido Trentalancia. + Merge branch 'run_transition' of + git://github.com/cgzones/refpolicy-contrib + Module version bumps for /run fc changes from cgzones. + Module version bump for openoffice and wm patches from Guido Trentalancia. + Module version bump for patches from Guido Trentalancia. + Module version bump for wm patch from Guido Trentalancia. + Merge branch 'usr-fc' of + git://github.com/fishilico/selinux-refpolicy-contrib + Module version bump for fc updates from Nicolas Iooss. + Module version bump for patches from Guido Trentalancia. + Module version bump for capability2 fixes from Guido Trentalancia. + Module version bump for plymouth fix from Guido Trentalancia. + boinc: Update from Russell Coker. + Module version bump for mozilla update from Guido Trentalancia. + Merge pull request #47 from cgzones/dphysswap_module + Merge pull request #40 from cgzones/fakehwclock_module + Merge branch 'gpg_module' of git://github.com/cgzones/refpolicy-contrib + Merge branch 'irqbalance_module' of + git://github.com/cgzones/refpolicy-contrib + Merge branch 'loadkeys_module' of + git://github.com/cgzones/refpolicy-contrib + Module version bumps for patches from cgzones. + Merge branch 'exim_module' of git://github.com/cgzones/refpolicy-contrib + Merge branch 'screen_module' of git://github.com/cgzones/refpolicy-contrib + Module version bump for screen and exim changes from cgzones. + screen: Revert broken interface call. + cups: Move hplip_domtrans interface. + Module version bump for cups patch from Guido Trentalancia. + Bump module versions for release. + +Dominick Grift (1): + Re-add raid fc spec that must have been removed earlier by mistake + +Guido Trentalancia (29): + cups: descend "rw" directories when reading configuration files + Apache OpenOffice module (contrib policy part) + openoffice: rename two interfaces in openoffice and evolution + mozilla: extend dbus connection permissions + openoffice: permission to read user temporary files + xguest: restrict ability to execute files on noxattr filesystems + pulseaudio: update server and client permissions + mozilla: remove redundant pulseaudio interface calls + networkmanager: read user certs not user content (was enable + userdom_read_user_certs() throughout the policy) + Make several calls to mta interfaces optional + wm: update the window manager (wm) module and enable its role template + (v7) + rtkit: enable dbus chat with xdm + networkmanager: enable dbus chat with xdm + policykit: enable dbus chat with xdm + games: general update and improved pulseaudio integration + wm: improved integration with games + xscreensaver: update the module so that it can be effectively used + wm: properly set domain entrypoint in wm_application_domain() + openoffice: add writer support for sending email directly to multiple + recipients + contrib: use new genhomedircon template for username + contrib: extend wm ability to launch confined graphical applications + contrib: support the new interface to manage X session logs + networkmanager: dbus chat with cups + cups: add cups-browsed executable fc + devicekit: add new wake_alarm permission (capability2) + networkmanager: add new wake_alarm permission (capability2) + plymouth: use the correct running domain for the client + mozilla: execute evolution to send emails + cups: new interface to execute HPLIP applications in their own domain + +Jason Zaman (4): + pcscd: dbus and domain lookup + devicekit: fcontext for udisks2 + gnome: add gkeyring rules and fcontext + gpg: add new socket paths + +Laurent Bigonville (1): + Add debian path for fprintd daemon + +Luis Ressel (3): + gpg: Add filetrans for scdaemon socket and gpg-agent extra sockets + gpg.fc: Adjust whitespace + mozilla: Add miscfiles_dontaudit_setattr_fonts_cache_dirs() + +Nicolas Iooss (1): + Add file contexts for files in /usr/{lib,sbin} + +cgzones (10): + use domain_auto_transition_pattern instead of domain_auto_trans + remove trailing whitespaces + transition file contexts to /run + update loadkeys module + add fakehwclock module + add dphysswapfile module + update gpg module + update screen module + update irqbalance module + update exim module + * Sun Oct 23 2016 Chris PeBenito - 2.20161023 Adam Tkac (2): varnishncsa (varnishlog_t) reads localization files