Hide cosmetic denials

Package-Manager: portage-2.1.9.42/cvs/Linux x86_64

5 files changed, 61 insertions, 3 deletions

diff --git a/sec-policy/selinux-mysql/ChangeLog b/sec-policy/selinux-mysql/ChangeLog
index a315e77a67b0..3ad166fb5d6d 100644
--- a/sec-policy/selinux-mysql/ChangeLog
+++ b/sec-policy/selinux-mysql/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sec-policy/selinux-mysql
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/ChangeLog,v 1.32 2011/02/05 12:07:11 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/ChangeLog,v 1.33 2011/04/16 13:35:40 blueness Exp $
+
+*selinux-mysql-2.20101213-r1 (16 Apr 2011)
+
+  16 Apr 2011; Anthony G. Basile <blueness@gentoo.org>
+  +files/fix-services-mysql-r1.patch, +selinux-mysql-2.20101213-r1.ebuild:
+  Hide cosmetic denials
 
 *selinux-mysql-2.20101213 (05 Feb 2011)
 
diff --git a/sec-policy/selinux-mysql/Manifest b/sec-policy/selinux-mysql/Manifest
index e32c0a798e78..98cdc6633f81 100644
--- a/sec-policy/selinux-mysql/Manifest
+++ b/sec-policy/selinux-mysql/Manifest
@@ -1,10 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+AUX fix-services-mysql-r1.patch 369 RMD160 c58f12abfce3fcab4df20db65bd2f019975acd3e SHA1 797745c23948a0ba800d9b351a0357f463460671 SHA256 30d984d5f6e5f37ca7803efdcf0f3f5dca701d2597c681899ba9de4db3a10c31
 DIST refpolicy-2.20090730.tar.bz2 489840 RMD160 d1d157a5ad243edd5d216504ed697f128420e8c1 SHA1 af479258b4e78b8bd7aa2a23dead49f4d61a552f SHA256 745077f6db86646458fe65df82eaa6ffc8491752e511d2a7397f4b46bd478f03
 DIST refpolicy-2.20091215.tar.bz2 502893 RMD160 d4951a3d2025630734c4664dca0cc8297a354275 SHA1 3a64189cda00475d60b70ed0876b3e297ad463c6 SHA256 8c264680d130e7d0e0a49ee80d54a3fbdf083bc341c7f7516b5edef34e222ca5
 DIST refpolicy-2.20101213.tar.bz2 559450 RMD160 4858f792f4db5b179de6fb8419a626c29d59bdd3 SHA1 0e881e99b8950a358eadc44633551ca10f12eaee SHA256 b691ee8f6066cc19bb0d4384fe3be277d97d22e9d4ac2db0c252065e8c3535de
 DIST refpolicy-20080525.tar.bz2 336603 RMD160 c4e846a5506164f8c89994df4bbd05b396f60639 SHA1 7764f2f6c60a530abb461256335b70a288bb65f9 SHA256 122a12924ef7b1348d676214590a0ed92960fbde053ea5a666e5179e0fd66ab2
 EBUILD selinux-mysql-2.20090730.ebuild 352 RMD160 52862ccf5afdcd24d6f3e666e3cceb43f2df39b0 SHA1 215c0b5e7594658dd8d882cb6238355275abb3d2 SHA256 496306761f759f41bef0b15686e5de949f1840ff79c976ed87e508ff1c766a70
 EBUILD selinux-mysql-2.20091215.ebuild 352 RMD160 08451d194d80a9a5c75cc42f2138365cd21b3127 SHA1 fe034e291f6530eac89bcc8fa70fe6fdfe963d62 SHA256 893b684d3d3343b8c2767dbb6c933c8aae61ee22e71f81b337f3861511dea88f
+EBUILD selinux-mysql-2.20101213-r1.ebuild 410 RMD160 dfef0afa24e50ff8fbc24c121297e0762e72c8ee SHA1 281b0398ff46b2f0dab003312a8a71af4aaeb576 SHA256 b699f1394590fe5f748cdc2a57e8b34ab6ef56b9d637ef8990c2c841543ec95c
 EBUILD selinux-mysql-2.20101213.ebuild 352 RMD160 5106c725d22452b04557a91afaa69aa5f5bda1b6 SHA1 01a1eaefac240a45987ee6fbd292ed3b7dcf4929 SHA256 e4e5d52550daec9f87679d8a3515930641c1176ddb899729c0187a687da3ca2a
 EBUILD selinux-mysql-20080525.ebuild 348 RMD160 7cd28cb7b9edab5a5f5833596c9fca80aefcf349 SHA1 e17c51eba3457899faa34826591c5bb4d65b4e70 SHA256 6201f73f5bd2a36f974be4bd839ed6b83451637ef18cd56ce68e2746a8a6d2ea
-MISC ChangeLog 4871 RMD160 1a740f0c4fd86b607eca49b584191907666cc98b SHA1 06094a8a9903acc02a606b7697cea1367c1dc64d SHA256 a8e92ea2f1ee46b8faafda59989563d02b0c170a4a3898cf292150a0f2db4276
+MISC ChangeLog 5070 RMD160 df01800ef6ea3126b5b8ede05a8603ffc0919dc4 SHA1 a4cce3b7027945656d497d30f45613170ff31ecc SHA256 2714aa59baf51823579075c30d1db1b163837814fdc5c8bdce61251e69e3b9f5
 MISC metadata.xml 229 RMD160 ad4c2e469ac849e049e02bd54c75aad499571eed SHA1 e04718705db3fba22dd6f5aa2b98549c475470e9 SHA256 63c90fb389e4e69c858a4b4a30c8246e571e01e5cd05faa6609e494035abc653
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+
+iEUEAREIAAYFAk2pmzYACgkQl5yvQNBFVTW9QwCfVeVInC5Ft2JbiV2USESEaV9E
+ngAAmIrRot7WMFHGgbH6nRKDMJ5dhJs=
+=U+3M
+-----END PGP SIGNATURE-----
diff --git a/sec-policy/selinux-mysql/files/fix-services-mysql-r1.patch b/sec-policy/selinux-mysql/files/fix-services-mysql-r1.patch
new file mode 100644
index 000000000000..05e6e7f58e01
--- /dev/null
+++ b/sec-policy/selinux-mysql/files/fix-services-mysql-r1.patch
@@ -0,0 +1,13 @@
+--- services/mysql.te	2010-08-03 15:11:06.000000000 +0200
++++ services/mysql.te	2011-04-13 17:57:57.369000043 +0200
+@@ -136,6 +136,10 @@
+ 	corenet_sendrecv_all_client_packets(mysqld_t)
+ ')
+ 
++tunable_policy(`gentoo_try_dontaudit',`
++	dontaudit mysqld_t self:capability dac_read_search;
++')
++
+ optional_policy(`
+ 	daemontools_service_domain(mysqld_t, mysqld_exec_t)
+ ')
diff --git a/sec-policy/selinux-mysql/selinux-mysql-2.20101213-r1.ebuild b/sec-policy/selinux-mysql/selinux-mysql-2.20101213-r1.ebuild
new file mode 100644
index 000000000000..b6f42bd35e0d
--- /dev/null
+++ b/sec-policy/selinux-mysql/selinux-mysql-2.20101213-r1.ebuild
@@ -0,0 +1,13 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/selinux-mysql-2.20101213-r1.ebuild,v 1.1 2011/04/16 13:35:40 blueness Exp $
+
+MODS="mysql"
+IUSE=""
+
+inherit selinux-policy-2
+
+DESCRIPTION="SELinux policy for mysql"
+
+KEYWORDS="~amd64 ~x86"
+POLICY_PATCH="${FILESDIR}/fix-services-mysql-r1.patch"
diff --git a/sec-policy/selinux-postfix/Manifest b/sec-policy/selinux-postfix/Manifest
index 9f547bb718d5..f120fd71e382 100644
--- a/sec-policy/selinux-postfix/Manifest
+++ b/sec-policy/selinux-postfix/Manifest
@@ -1,4 +1,9 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
 AUX fix-services-postfix-r1.patch 4146 RMD160 84d2f75dd8bae5ece03a29c90b8f3e12e6741b41 SHA1 76583050136ef3ffa70219a425c1d23fae527448 SHA256 2deac08168286051c3faedc801388e8de87ff5241b76294ea10a520209ff747d
+AUX fix-services-postfix-r2.patch 4642 RMD160 bb091ab247388cdc9c6d4b9eb7cbfb96fbcf3341 SHA1 3f974d4d8cd33fc139047aa2b9a6acf52359b652 SHA256 686bb4c980e0a24a7b5d86815e1bcb3cbf35f522a83e7acee3fad82e2cbfe073
+AUX fix-services-postfix-r3.patch 4683 RMD160 157237a835eb49cbf15036d58e931581eade399d SHA1 8d8e91a43d47a1e7103626829ce4ba9bfd70b333 SHA256 9dde1c068ca098fdbd9c8592b6a2675ce1a432139c6965fc9f0d46ee45797bed
 DIST refpolicy-2.20090730.tar.bz2 489840 RMD160 d1d157a5ad243edd5d216504ed697f128420e8c1 SHA1 af479258b4e78b8bd7aa2a23dead49f4d61a552f SHA256 745077f6db86646458fe65df82eaa6ffc8491752e511d2a7397f4b46bd478f03
 DIST refpolicy-2.20091215.tar.bz2 502893 RMD160 d4951a3d2025630734c4664dca0cc8297a354275 SHA1 3a64189cda00475d60b70ed0876b3e297ad463c6 SHA256 8c264680d130e7d0e0a49ee80d54a3fbdf083bc341c7f7516b5edef34e222ca5
 DIST refpolicy-2.20101213.tar.bz2 559450 RMD160 4858f792f4db5b179de6fb8419a626c29d59bdd3 SHA1 0e881e99b8950a358eadc44633551ca10f12eaee SHA256 b691ee8f6066cc19bb0d4384fe3be277d97d22e9d4ac2db0c252065e8c3535de
@@ -6,7 +11,16 @@ DIST refpolicy-20080525.tar.bz2 336603 RMD160 c4e846a5506164f8c89994df4bbd05b396
 EBUILD selinux-postfix-2.20090730.ebuild 360 RMD160 f5c64dc404c84fdab8686c3eba0fda12ab8ff5b1 SHA1 35659a9619160e3ac5cf98e863d8ec269811faa3 SHA256 e5df37aec971499ecd38bff25c97d516b6f044b63784836857def19e245e6e90
 EBUILD selinux-postfix-2.20091215.ebuild 360 RMD160 c7bc9aefea1e99dc152be0d11499328e5593349f SHA1 4c31b4192b486ec634ad41fd55e81453d9271702 SHA256 cb4fd40e948be42ed132ba0e0810a153e0a6c587dbb7f82ab3521a6e42fd544c
 EBUILD selinux-postfix-2.20101213-r1.ebuild 421 RMD160 a57c67182e195869f1d42104729e51ae7bace168 SHA1 b286dfe78f43abf4ea9ce6f39a95bc4770a8a76f SHA256 690320c2d2ef1052d29b1f94e376975d4087ba1c141a569ade47278d2c781f8d
+EBUILD selinux-postfix-2.20101213-r2.ebuild 421 RMD160 ea4c5ee4a297a4773ad8fb18992e6ab805f16abb SHA1 71b82d7b0a9aa532030abbd4bd0fde65a458bf12 SHA256 fe3716609acedd2823fa471862339b22b9faf2f7730891d4cb849b3022ec2b84
+EBUILD selinux-postfix-2.20101213-r3.ebuild 421 RMD160 8075f5ee1bddea9d2338646a4ba42d5192ad55d5 SHA1 0dcaf5a8235647bf3302b74f203933c0afed8b87 SHA256 c9be040183d51495e802054e2046631670204e687743157803b2aa2610b2e4f0
 EBUILD selinux-postfix-2.20101213.ebuild 360 RMD160 2447e4b784a33d27f7709abcf6ca9c6d7841da14 SHA1 3e2ec5ead94147e7d19e3ecfe1ae968c6bf4c784 SHA256 12032945a7fcb02e8ef7941cdef7f0badd8bfd18727d2adee01427e68f76fb43
 EBUILD selinux-postfix-20080525.ebuild 356 RMD160 6f8631c30c1f9521d06bd60f48a6569a990adebf SHA1 1b5bb4f3e700beb99c5e6088008d636c4d061fac SHA256 c119bd8004bc8487e992014ef266a0de4eeb9bb1cca394cadf39b3913b043cfe
-MISC ChangeLog 5155 RMD160 304e98ba1778c85acbfe8afd1284f084d871d9fb SHA1 0d0ac55755c6fda5f0b074c05488ca1f32e26df3 SHA256 6e150489a5dd8d26066d3893d0b70d5da2bbaceadc0c16ca67dc721b5f1c8f97
+MISC ChangeLog 5544 RMD160 e54b5762c6e0560fdfbb12bd511b8d214014b6e9 SHA1 5859093ad58d87973a0fc43356b00b4f2be8c5bd SHA256 3889e7e4c5a17afef9da9bf64d68258bf7174ab18a94c2a49e849665ba9c4c3a
 MISC metadata.xml 231 RMD160 a74f4d0ea728b9b1293a4245404ac2f86343cde4 SHA1 e442d59cd349944548484d3274d6c0e00086056f SHA256 459b7eb495b910e93d0bc072cc141a3aed301b3142940b6371d4473254257475
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+
+iEYEAREIAAYFAk2pnE4ACgkQl5yvQNBFVTWf3QCdFq27e7PjWCJgKPKbW0TwD7Fl
+hVAAn1m7K1u/g1RTLO1pmln14DJD4Zka
+=M/Rx
+-----END PGP SIGNATURE-----