Fix bug #512676 - Enable create/bind on SELinux netlink socket for run_init

The run_init code calls avc_* functions, but the following failure
occurs:

~# run_init rc-service nfs status
Authenticating swift.
run_init: avc.c:74: avc_context_to_sid_raw: Assertion `avc_running' failed.
Segmentation fault

AVC denials are shown related to the netlink_selinux_socket class
(create/bind privileges) and signal (possibly to handle failure).

Allowing them has the run_init code run properly again.
Adding dropbox_port_t (tcp/udp 17500)
netlink_selinux_socket, not selinux_netlink_socket
Update corenetwork.if after regeneration
New policy module for Dropbox

https://www.dropbox.com/

Signed-off-by: Jason Zaman <jason@perfinion.com>
Gentoo additions for the Dropbox module

Signed-off-by: Jason Zaman <jason@perfinion.com>
Some restructuring
Add dropbox role for unprivileged user
Fix bug #512146 - buildtool must be bin_t or apache-tools build fails
Fix bug #511966 - clamav fails to start due to wrong label on /var/run/clamav (thanks to Alexander Wetzel)
xserver_t needs to ender dirs labeled xdm_var_run_t

The LightDM application stores its xauth file in a subdirectory
(/var/run/lightdm/root) which is labeled as xdm_var_run_t. As a result,
X11 (xserver_t) needs search rights to this location.

With this setup, X is run as follows:
  /usr/bin/X :0 -auth /var/run/lightdm/root/:0

Changes since v1:
- Use read_files_pattern instead of separate allow rules

Signed-off-by: Jason Zaman <jason@perfinion.com>
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Enable rcs2log location for all distributions

Currently, the /usr/share/cvs/contrib/rcs2log is only labeled as bin_t
for redhat distributions. Moving this to the general one as it is also
in use on other distributions

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bump for rcs2log and xserver updates from Sven Vermeulen.
Allow init to execute shutdown

In many inittabs, there's a line like
"ca:12345:ctrlaltdel:/sbin/shutdown -h now" which triggers a shutdown or
a reboot on Ctrl+Alt+Del.
Allow xdm_t to transition to shutdown_t domain

Several DMs offer the possibility to shutdown the system. I personally
don't think a bool is neccessary for this permission, but I wouldn't
oppose one either.
Module version bump for shutdown transitions from Luis Ressel.
Fix misspelling

Fix misspelling using  http://github.com/lyda/misspell-check

Signed-off-by: Elia Pinto <gitter.spiros@gmail.com>
Remove firstboot_rw_t as FC5 has been gone for a long time.
Module version bump for firstboot_rw_t alias removal.
Module version bump for dropbox port from Sven Vermeulen.