refpolicy_0.0.20080702-12 for lenny
Below are the changes. The problem with restarting daemons can be solved in
several ways, and the solution that I have implemented (as a default setting)
is not ideal for security - but usability is what we need by default.
With -11 a user who logs in as non-root, runs "su -" and then restarts cron
will find that their cron jobs don't run.
Please include this in Lenny.
refpolicy (2:0.0.20080702-12) unstable; urgency=low
.
* Allow procmail to deliver mail to the unconfined home directories if
daemon_access_unconfined_home is set.
* Add the audioentropy module for use with the randomsound package.
* Allow spamd_t the kill capability.
* Make the default range for MCS __default__ users be s0-s0:c0.c1023,
this fixes a problem with restarting daemons after logging in as non-root
and running "su -".
Reply to: