[rpms/icecream] epel10: - SELinux policy fix (current selinux-policy assigns port 8765 to LIRC).

[Michal Schmidt <michich@fedoraproject.org>]

A new commit has been pushed.

Repo   : rpms/icecream
Branch : epel10
Commit : 537608d9953a221508e512fc845b78da099a6e62
Author : Michal Schmidt <michich@fedoraproject.org>
Date   : 2010-03-25T20:10:54+00:00
Stats  : +10/-4 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/icecream/c/537608d9953a221508e512fc845b78da099a6e62?branch=epel10

Log:
- SELinux policy fix (current selinux-policy assigns port 8765 to LIRC).

---
diff --git a/icecream.spec b/icecream.spec
index 14a764e..5f43c1f 100644
--- a/icecream.spec
+++ b/icecream.spec
@@ -11,7 +11,7 @@
 
 Name:		icecream
 Version:	0.9.5
-Release:	1%{?dist}
+Release:	2%{?dist}
 Summary:	Distributed compiler
 
 Group:		Development/Tools
@@ -166,9 +166,9 @@ fixfiles -R %{name} restore ||:
 restorecon -R %{_localstatedir}/cache/icecream 2>/dev/null ||:
 restorecon %{_localstatedir}/log/iceccd 2>/dev/null ||:
 semanage port -a -t iceccd_port_t -p tcp 10245 2>/dev/null ||:
-semanage port -a -t icecc_scheduler_port_t -p tcp 8765 2>/dev/null ||:
+#semanage port -a -t icecc_scheduler_port_t -p tcp 8765 2>/dev/null ||:
 semanage port -a -t icecc_scheduler_port_t -p tcp 8766 2>/dev/null ||:
-semanage port -a -t icecc_scheduler_port_t -p udp 8765 2>/dev/null ||:
+#semanage port -a -t icecc_scheduler_port_t -p udp 8765 2>/dev/null ||:
 %endif
 # fi
 /sbin/chkconfig --add iceccd
@@ -238,6 +238,9 @@ rm -rf %{buildroot}
 %{_libdir}/pkgconfig/icecc.pc
 
 %changelog
+* Thu Mar 25 2010 Michal Schmidt <mschmidt@redhat.com> 0.9.5-2
+- SELinux policy fix (current selinux-policy assigns port 8765 to LIRC).
+
 * Thu Mar 25 2010 Michal Schmidt <mschmidt@redhat.com> 0.9.5-1
 - Upstream release 0.9.5.
   - new command 'icerun': serialize possibly resource-intensive tasks

diff --git a/icecream.te b/icecream.te
index 289b2fb..137eaa8 100644
--- a/icecream.te
+++ b/icecream.te
@@ -1,5 +1,5 @@
 
-policy_module(icecream,0.1.4)
+policy_module(icecream,0.1.5)
 
 ########################################
 #
@@ -107,6 +107,7 @@ corenet_udp_sendrecv_all_ports(iceccd_t)
 corenet_tcp_bind_generic_node(iceccd_t)
 allow iceccd_t iceccd_port_t:tcp_socket { name_bind };
 allow iceccd_t icecc_scheduler_port_t:tcp_socket { name_connect };
+corenet_tcp_connect_lirc_port(iceccd_t)
 
 corecmd_exec_bin(iceccd_t)
 corecmd_read_bin_symlinks(iceccd_t)
@@ -207,7 +208,9 @@ corenet_udp_sendrecv_all_ports(icecc_scheduler_t)
 corenet_tcp_bind_generic_node(icecc_scheduler_t)
 corenet_udp_bind_generic_node(icecc_scheduler_t)
 allow icecc_scheduler_t icecc_scheduler_port_t:tcp_socket { name_bind };
+corenet_tcp_bind_lirc_port(icecc_scheduler_t)
 allow icecc_scheduler_t icecc_scheduler_port_t:udp_socket { name_bind };
+corenet_udp_bind_lirc_port(icecc_scheduler_t)
 
 files_read_etc_files(icecc_scheduler_t)