diff -ru policy-1.14/domains/program/unused/lvm.te selinux-policy-default-1.14/domains/program/unused/lvm.te --- policy-1.14/domains/program/unused/lvm.te 2004-06-24 22:48:00.000000000 +1000 +++ selinux-policy-default-1.14/domains/program/unused/lvm.te 2004-07-02 12:59:06.000000000 +1000 @@ -93,6 +93,7 @@ dontaudit lvm_t initctl_t:fifo_file getattr; dontaudit lvm_t sbin_t:file getattr; allow lvm_t lvm_control_t:chr_file rw_file_perms; +allow initrc_t lvm_control_t:chr_file unlink; dontaudit lvm_t var_run_t:dir getattr; allow lvm_t tmpfs_t:dir getattr; diff -ru policy-1.14/domains/program/unused/rpm.te selinux-policy-default-1.14/domains/program/unused/rpm.te --- policy-1.14/domains/program/unused/rpm.te 2004-06-17 23:33:14.000000000 +1000 +++ selinux-policy-default-1.14/domains/program/unused/rpm.te 2004-07-02 00:50:38.000000000 +1000 @@ -93,6 +93,8 @@ allow rpm_t sysfs_t:filesystem getattr; allow rpm_t tmpfs_t:filesystem getattr; dontaudit rpm_t domain:{ socket unix_dgram_socket udp_socket unix_stream_socket tcp_socket fifo_file rawip_socket packet_socket } getattr; +allow rpm_t fs_type:dir getattr; +allow rpm_t fs_type:filesystem getattr; # allow compiling and loading new policy create_dir_file(rpm_t, { policy_src_t policy_config_t }) diff -ru policy-1.14/file_contexts/program/postgresql.fc selinux-policy-default-1.14/file_contexts/program/postgresql.fc --- policy-1.14/file_contexts/program/postgresql.fc 2004-06-24 22:48:00.000000000 +1000 +++ selinux-policy-default-1.14/file_contexts/program/postgresql.fc 2004-07-03 00:18:45.000000000 +1000 @@ -1,5 +1,18 @@ # postgresql - ldap server /usr/lib(64)?/postgresql/bin/.* -- system_u:object_r:postgresql_exec_t +/usr/bin/postgres -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_dump -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_dumpall -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_resetxlog -- system_u:object_r:postgresql_exec_t +/etc/rc.d/init.d/postgresql -- system_u:object_r:postgresql_exec_t + +# not sure whether the following binaries need labelling +/usr/bin/createlang -- system_u:object_r:postgresql_exec_t +/usr/bin/droplang -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_encoding -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_id -- system_u:object_r:postgresql_exec_t +/usr/bin/pg_restore -- system_u:object_r:postgresql_exec_t + /var/lib/postgres(/.*)? system_u:object_r:postgresql_db_t /var/lib/pgsql(/.*)? system_u:object_r:postgresql_db_t /var/run/postgresql(/.*)? system_u:object_r:postgresql_var_run_t