another SE Linux policy package for Lenny
The changes in these two releases (newer than my last request for unblocking)
close four bugs, and add some significant features in a noninvasive manner.
They also support fixing the cron policy (which previously doesn't work for
jobs other than system cron jobs).
Please unblock this for Lenny.
refpolicy (2:0.0.20080702-10) unstable; urgency=low
* Allow mailserver local delivery agent to manage_file_perm access to
mail_spool_t
Closes: #499218
* Build a module for xen, and make lvm support optional in it.
* Make the postinst link the xen, lvm, and pcmcia modules if appropriate.
* Added the clamav module to the policy.
* Wrote a new DKIM module.
* Allowed crontab to create directories under /tmp.
* Made unconfined_crond_t an alias for unconfined_t and made unconfined cron
jobs work.
* Built the NAGIOS module and include the suggested change from #493979.
NB I won't have time to do any testing of this so someone else will need
to deploy it on a fully functional NAGIOS system.
Closes: #493979
-- Russell Coker <russell@coker.com.au> Fri, 19 Sep 2008 22:25:00 +1000
refpolicy (2:0.0.20080702-9) unstable; urgency=low
* Allow the Postfix newaliases to create new /etc/aliases.db file so that
the postinst for Postfix can work.
* The last update broke unconfined_mail_t for systems not running postfix,
fixing that (thanks Martin Orr).
Closes: #499064
* Fix a check for syslogd being executable by logrotate (thanks
V<C3><A1>clav Ovsk).
Closes: #496809
-- Russell Coker <russell@coker.com.au> Tue, 16 Sep 2008 20:42:00 +1000
Reply to: