Merge branch 'master' of ssh://git.camperquake.de:22003/selinux

diff --git a/tf2/tf2.fc b/tf2/tf2.fc
index 76b842d..998b811 100644 (file)
--- a/tf2/tf2.fc
+++ b/tf2/tf2.fc
@@ -1,6 +1,7 @@
 /etank/games/tf2/tf2/bin(/.*)?                     --   gen_context(system_u:object_r:tf2_exec_t,s0)
 /etank/games/tf2/tf2/srcds_linux                   --   gen_context(system_u:object_r:tf2_exec_t,s0)
 /etank/games/tf2/tf2/tf/bin/server_srv.so          --   gen_context(system_u:object_r:tf2_exec_t,s0)
+/etank/games/tf2/Steam/linux32/steamclient.so      --   gen_context(system_u:object_r:tf2_exec_t,s0)
 /etank/games/tf2(/.*)?                                  gen_context(system_u:object_r:tf2_ro_t,s0)
 /etank/games/tf2/Steam/update.sh                        gen_context(system_u:object_r:usr_t,s0)
 /etank/games/tf2/tf2/steam_appid.txt                    gen_context(system_u:object_r:tf2_rw_t,s0)

diff --git a/tf2/tf2.te b/tf2/tf2.te
index 5f89c83..cce8993 100644 (file)
--- a/tf2/tf2.te
+++ b/tf2/tf2.te
@@ -1,4 +1,4 @@
-policy_module(tf2, 0.1.23)
+policy_module(tf2, 0.1.24)
 
 require {
     type default_t;
@@ -30,6 +30,7 @@ corenet_tcp_bind_generic_port(tf2_t)
 corenet_tcp_bind_generic_node(tf2_t)
 
 read_files_pattern(tf2_t, tf2_ro_t, tf2_ro_t)
+read_lnk_files_pattern(tf2_t, tf2_ro_t, tf2_ro_t)
 list_dirs_pattern(tf2_t, tf2_ro_t, tf2_ro_t)
 
 manage_files_pattern(tf2_t, tf2_rw_t, tf2_rw_t)