2011-08-23 10:37:18

by sven.vermeulen

Subject: [refpolicy] [PATCH 1/1] ip6?tables-multi is combined in xtables-multi

Since april, the *-multi applications offered through iptables are combined
through a single binary called xtables-multi. The previous commands are now
symbolic links towards this application.

Signed-off-by: Sven Vermeulen <[email protected]>
---
policy/modules/system/iptables.fc | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/policy/modules/system/iptables.fc b/policy/modules/system/iptables.fc
index 05fb364..14cffd2 100644
--- a/policy/modules/system/iptables.fc
+++ b/policy/modules/system/iptables.fc
@@ -12,6 +12,7 @@
/sbin/ipvsadm -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
/sbin/ipvsadm-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
+/sbin/xtables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)

/usr/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
/usr/sbin/iptables -- gen_context(system_u:object_r:iptables_exec_t,s0)
--
1.7.3.4

2011-08-24 12:55:21

by cpebenito

Subject: [refpolicy] [PATCH 1/1] ip6?tables-multi is combined in xtables-multi

On 08/23/11 06:37, Sven Vermeulen wrote:
> Since april, the *-multi applications offered through iptables are combined
> through a single binary called xtables-multi. The previous commands are now
> symbolic links towards this application.
>
> Signed-off-by: Sven Vermeulen <[email protected]>
> ---
> policy/modules/system/iptables.fc | 1 +
> 1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/policy/modules/system/iptables.fc b/policy/modules/system/iptables.fc
> index 05fb364..14cffd2 100644
> --- a/policy/modules/system/iptables.fc
> +++ b/policy/modules/system/iptables.fc
> @@ -12,6 +12,7 @@
> /sbin/ipvsadm -- gen_context(system_u:object_r:iptables_exec_t,s0)
> /sbin/ipvsadm-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
> /sbin/ipvsadm-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
> +/sbin/xtables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
>
> /usr/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
> /usr/sbin/iptables -- gen_context(system_u:object_r:iptables_exec_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com