- support for capability context from vserver in selinux

Changed files:
    libselinux-vcontext-selinux.patch -> 1.1
    libselinux.spec -> 1.52

diff --git a/libselinux-vcontext-selinux.patch b/libselinux-vcontext-selinux.patch
new file mode 100644 (file)
index 0000000..64099ff
--- /dev/null
+++ b/libselinux-vcontext-selinux.patch
@@ -0,0 +1,22 @@
+--- libselinux/src/av_perm_to_string.h 2006-03-20 05:53:29.000000000 +0000
++++ libselinux/src/av_perm_to_string.h 2007-01-12 02:06:17.278580000 +0000
+@@ -123,6 +123,7 @@
+     S_(SECCLASS_CAPABILITY, CAPABILITY__LEASE, "lease")
+     S_(SECCLASS_CAPABILITY, CAPABILITY__AUDIT_WRITE, "audit_write")
+     S_(SECCLASS_CAPABILITY, CAPABILITY__AUDIT_CONTROL, "audit_control")
++    S_(SECCLASS_CAPABILITY, CAPABILITY__CONTEXT, "vserver_context")
+     S_(SECCLASS_PASSWD, PASSWD__PASSWD, "passwd")
+     S_(SECCLASS_PASSWD, PASSWD__CHFN, "chfn")
+     S_(SECCLASS_PASSWD, PASSWD__CHSH, "chsh")
+--- libselinux/include/selinux/av_permissions.h        2006-03-20 05:53:29.000000000 +0000
++++ libselinux/include/selinux/av_permissions.h        2007-01-12 02:07:24.624890000 +0000
+@@ -565,6 +565,7 @@
+ #define CAPABILITY__LEASE                         0x10000000UL
+ #define CAPABILITY__AUDIT_WRITE                   0x20000000UL
+ #define CAPABILITY__AUDIT_CONTROL                 0x40000000UL
++#define CAPABILITY__CONTEXT                       0x80000000UL
+ 
+ #define PASSWD__PASSWD                            0x00000001UL
+ #define PASSWD__CHFN                              0x00000002UL
+--- libselinux-1.32./src/av_perm_to_string.h   2007-01-12 03:32:09.413722000 +0100
++++ libselinux-1.32/src/av_perm_to_string.h    2007-01-12 03:29:48.363722000 +0100

diff --git a/libselinux.spec b/libselinux.spec
index 521957ba2341d257bfb77d329662848927a74d3d..4ad94d17546935032361becfe830379bbd644cf5 100644 (file)
--- a/libselinux.spec
+++ b/libselinux.spec
@@ -12,6 +12,7 @@ License:      Public Domain
 Group:         Libraries
 Source0:       http://www.nsa.gov/selinux/archives/%{name}-%{version}.tgz
 # Source0-md5: eac812a6f35e0e04ddad307abd21d014
+Patch0:                %{name}-vcontext-selinux.patch
 URL:           http://www.nsa.gov/selinux/
 BuildRequires: glibc-devel >= 6:2.3
 BuildRequires: libsepol-devel >= 1.14
@@ -110,6 +111,7 @@ Wi
 
 %prep
 %setup -q
+%patch0 -p1
 
 # "-z defs" doesn't mix with --as-needed when some object needs symbols from
 # ld.so (because of __thread variable in this case)