[DSE-Dev] refpolicy_2.20140421-3_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 29 Jun 2014 19:11:45 +1000
Source: refpolicy
Binary: selinux-policy-default selinux-policy-mls selinux-policy-src selinux-policy-dev selinux-policy-doc
Architecture: source all
Version: 2:2.20140421-3
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel at lists.alioth.debian.org>
Changed-By: Russell Coker <russell at coker.com.au>
Description:
 selinux-policy-default - Strict and Targeted variants of the SELinux policy
 selinux-policy-dev - Headers from the SELinux reference policy for building modules
 selinux-policy-doc - Documentation for the SELinux reference policy
 selinux-policy-mls - MLS (Multi Level Security) variant of the SELinux policy
 selinux-policy-src - Source of the SELinux reference policy for customization
Changes:
 refpolicy (2:2.20140421-3) unstable; urgency=medium
 .
   * Allow sysadm_t to read policy
   * Make systemd_login_list_pid_dirs() call init_search_pid_dirs() as it
     doesn't work without it
   * Added chromium/google-chrome policy
   * dev_getattr_sysfs(sysstat_t) for Debian cron job
   * Allow sysstat_t to manage it's log files
   * Allow dpkg_script_t to config all systemd services and get init status
   * Allow dpkg_script_t to dirmngr_admin
   * really added systemd_login_list_pid_dirs(system_dbusd_t) (somehow missed
     this last time)
   * Allow sshd to chat with systemd via dbus
   * Allow unconfined_t to restart services
   * systemd_write_inherited_logind_sessions_pipes(system_dbusd_t)
   * systemd_dbus_chat_logind(sshd_t)
   * Allow xend to read vm sysctls
   * Allow udev_t to manage xenfs_t files for xenstore-read
   * Allow system_dbusd_t systemd_login_read_pid_files access for
     /run/systemd/users/* files
   * Allow systemd_logind_t to stat tmpfs_t filesystems for /run/user
   * Remove the "genfscon selinuxfs" line from selinux.if in selinux-policy-dev
     to stop sepolgen-ifgen errors.
   * Make udev_relabelto_db() include lnk_file relabeling
   * Allow kernel_t to fs_search_tmpfs, selinux_compute_create_context, and
     kernel_read_unlabeled_state for booting without unconfined.pp
   * Allow system_cronjob_t to manage the apt cache
   * Allow modutils_read_module_config(init_t) and create cgroup_t links for
     strict config. Allow it to relabel from tmpfs_t symlinks
   * Allow init_run_all_scripts_domain (initrc_t) the service { status start
     stop } for all the daemon _initrc_exec_t scripts.
   * Allow sysadm_r to have domain system_mail_t for strict policy
   * Allow init_t to relabel device_t symlinks and pstore_t dirs, load kernel
     modules, manage init_var_run_t sock_files, read /usr, read /dev/urandom,
     systemd_manage_passwd_run, and domain_read_all_domains_state
Checksums-Sha1:
 2d0a86bdb4f55d81bed35e4cd14eca2b59895552 1758 refpolicy_2.20140421-3.dsc
 009ee151d0e35a13176c124b97e3cfcabbf485d8 71128 refpolicy_2.20140421-3.debian.tar.xz
 b4ae9fd6ecc9a4daec6685d1953ccdb6e8ed4920 2800446 selinux-policy-default_2.20140421-3_all.deb
 67d6948daa54734480b3a899a990b0ea0edeaf5d 2851542 selinux-policy-mls_2.20140421-3_all.deb
 81ef6b6f76c925993afa08dc0b81dd1c3c8158f8 1202722 selinux-policy-src_2.20140421-3_all.deb
 1281b41fd1f5643d39451b70c77a8b1e6cf0fd56 436260 selinux-policy-dev_2.20140421-3_all.deb
 0148f48a8cb765e6ab0910150d52439a36bfe369 412982 selinux-policy-doc_2.20140421-3_all.deb
Checksums-Sha256:
 2b524f9a889bb3acf335296ff1fccf26b3210aa388a7a5a92fde41d1dd41dcfa 1758 refpolicy_2.20140421-3.dsc
 8abada0a0291e7ecb539e1b8b3197a43705e28e879898950c8f13ede403ff130 71128 refpolicy_2.20140421-3.debian.tar.xz
 1c3be2de6b310ff3aef9c0ee1912123ca19674059f98baad5ebb1783c5d7cb91 2800446 selinux-policy-default_2.20140421-3_all.deb
 fba0afd74721a0d0f73da57e4628e6592bd0ed91e256804c3346d072451d9f52 2851542 selinux-policy-mls_2.20140421-3_all.deb
 bc50d6d98e5473d3660736320366c9abacbdaacd8602675c6576668d2fc12677 1202722 selinux-policy-src_2.20140421-3_all.deb
 4ff3d49ce3ffe94a8f0f1683a28347d87238964ea0c921d5cba6ccca20407a5c 436260 selinux-policy-dev_2.20140421-3_all.deb
 b742124b29c533e9505c01cb96ee7b1971274589905c9f2ea31e20bddbe708c9 412982 selinux-policy-doc_2.20140421-3_all.deb
Files:
 927023db57701b7cad5cc5be087cdea5 2800446 admin optional selinux-policy-default_2.20140421-3_all.deb
 027b75a8c713d4913869b03144e402ac 2851542 admin extra selinux-policy-mls_2.20140421-3_all.deb
 ba44fb327d8008139b1f52687fb813f0 1202722 admin optional selinux-policy-src_2.20140421-3_all.deb
 f2481b58b3b1934864a865cdb76b9bb0 436260 admin optional selinux-policy-dev_2.20140421-3_all.deb
 0640d8373d687fc01d06526456fbac62 412982 doc optional selinux-policy-doc_2.20140421-3_all.deb
 c8e657fc931fdf81ed6b38638f37ae73 1758 admin optional refpolicy_2.20140421-3.dsc
 92ed25bebce64e4a8a0de95738bd96f0 71128 admin optional refpolicy_2.20140421-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlOv2wUACgkQwrB5/PXHUlZblgCg2qClVI1LuPee6tdrfe4fVIRr
NsgAnRTMoIeU/dA+G+qJ4PK1zYQEzXH9
=CnzB
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.