• This patch includes the ugliness to get sun's jre plugin to work in Mozilla. (otherwize mozilla crashes).
• Removed distro_gentoo checks around proc_net since we want these also.
• Futzed around with userhelper so that mozilla can run it.
• Cleaned up stunnel.te so it should be usable for gentoo and other distributions.
• Some cleanup of apache to allow starting of apache with ssl keys
• Includes modification to global_macros to extract out network_macros.te

network_macros.te includes

can_network - with all the current functionaility

I added

can_network_server (Has listen and accept, both udp and tcp)
can_network_server_udp
can_network_server_tcp

can_network_client (Has connect, both udp and tcp)

can_network_udp - Same as can_network but only for udp can_network_tcp - Same as can_network but only for tcp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



text/x-patch attachment: policy-small.patch