srivasta@debian.org--lenny/refpolicy--debian--0.0--patch-12 In russell-20080929.diff In Manoj's topic-debadim branch In Russell's 2010-07-08 patch Little bit of this patch left after most was merged in r2630 * policy/modules/admin/dpkg.te: Added some stuff to allow debconf .config file interactions back to the user Index: policy/modules/admin/dpkg.te =================================================================== --- policy/modules/admin/dpkg.te.orig +++ policy/modules/admin/dpkg.te @@ -169,6 +169,8 @@ dpkg_domtrans_script(dpkg_t) # since the scripts aren't labeled correctly yet... allow dpkg_t dpkg_var_lib_t:file mmap_file_perms; +# This is used for running config files for debconf interactions +allow dpkg_t dpkg_tmp_t:file { execute execute_no_trans }; optional_policy(` apt_use_ptys(dpkg_t)