refpolicy: Replace 2.2014120 with release 2.20151208.

This was mostly straight forward. Had to refresh a single patch:
poky-policy-fix-new-SELINUXMNT-in-sys.patch

Signed-off-by: Philip Tricca <flihp@twobit.us>

49 files changed, 31 insertions, 75 deletions

diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/ftp-add-ftpd_t-to-mlsfilewrite.patch b/recipes-security/refpolicy/refpolicy-2.20151208/ftp-add-ftpd_t-to-mlsfilewrite.patch
index 49da4b6..49da4b6 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/ftp-add-ftpd_t-to-mlsfilewrite.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/ftp-add-ftpd_t-to-mlsfilewrite.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-clock.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-clock.patch
index 3ff8f55..3ff8f55 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-clock.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-clock.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-corecommands.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-corecommands.patch
index 24b67c3..24b67c3 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-corecommands.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-corecommands.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-dmesg.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-dmesg.patch
index db4c4d4..db4c4d4 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-dmesg.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-dmesg.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-bind.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-bind.patch
index 59ba5bc..59ba5bc 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-bind.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-bind.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_login.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_login.patch
index 427181e..427181e 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_login.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_login.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_resolv.conf.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_resolv.conf.patch
index 80cca67..80cca67 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_resolv.conf.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_resolv.conf.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_shadow.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_shadow.patch
index 29ac2c3..29ac2c3 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_shadow.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_shadow.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_su.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_su.patch
index b0392ce..b0392ce 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fix-real-path_su.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fix-real-path_su.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fstools.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fstools.patch
index 9c45694..9c45694 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-fstools.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-fstools.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-ftpwho-dir.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-ftpwho-dir.patch
index a7d434f..a7d434f 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-ftpwho-dir.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-ftpwho-dir.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-iptables.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-iptables.patch
index 89b1547..89b1547 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-iptables.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-iptables.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-mta.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-mta.patch
index bbd83ec..bbd83ec 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-mta.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-mta.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-netutils.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-netutils.patch
index b45d03e..b45d03e 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-netutils.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-netutils.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-nscd.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-nscd.patch
index 1db328c..1db328c 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-nscd.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-nscd.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-rpm.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-rpm.patch
index 7ba3380..7ba3380 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-rpm.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-rpm.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-screen.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-screen.patch
index 3218194..3218194 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-screen.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-screen.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-ssh.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-ssh.patch
index 9aeb3a2..9aeb3a2 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-ssh.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-ssh.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-su.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-su.patch
index 358e4ef..358e4ef 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-su.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-su.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-subs_dist.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-subs_dist.patch
index cfec7d9..cfec7d9 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-subs_dist.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-subs_dist.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-sysnetwork.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-sysnetwork.patch
index 64f497d..64f497d 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-sysnetwork.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-sysnetwork.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-udevd.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-udevd.patch
index c6c19be..c6c19be 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-udevd.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-udevd.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_hostname.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_hostname.patch
index cedb5b5..cedb5b5 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_hostname.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_hostname.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_sysklogd.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_sysklogd.patch
index 868ee6b..868ee6b 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_sysklogd.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_sysklogd.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_sysvinit.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_sysvinit.patch
index 3a617d8..3a617d8 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-fc-update-alternatives_sysvinit.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-fc-update-alternatives_sysvinit.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-bsdpty_device_t.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-bsdpty_device_t.patch
index 9a3322f..9a3322f 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-bsdpty_device_t.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-bsdpty_device_t.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-syslogd_t-symlink.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-syslogd_t-symlink.patch
index aa9734a..aa9734a 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-syslogd_t-symlink.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-syslogd_t-symlink.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-tmp-symlink.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-tmp-symlink.patch
index 210c297..210c297 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-tmp-symlink.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-tmp-symlink.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-cache-symlink.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-cache-symlink.patch
index 18a92dd..18a92dd 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-cache-symlink.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-cache-symlink.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink-apache.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink-apache.patch
index 8bc40c4..8bc40c4 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink-apache.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink-apache.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch
index cbf0f7d..cbf0f7d 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink.patch
index b06f3ef..b06f3ef 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-rules-for-var-log-symlink.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-rules-for-var-log-symlink.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-syslogd_t-to-trusted-object.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-syslogd_t-to-trusted-object.patch
index 92b1592..92b1592 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-add-syslogd_t-to-trusted-object.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-add-syslogd_t-to-trusted-object.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-nfsd-to-exec-shell-commands.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-nfsd-to-exec-shell-commands.patch
index e77a730..e77a730 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-nfsd-to-exec-shell-commands.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-nfsd-to-exec-shell-commands.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-setfiles_t-to-read-symlinks.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-setfiles_t-to-read-symlinks.patch
index 9ef61b4..9ef61b4 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-setfiles_t-to-read-symlinks.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-setfiles_t-to-read-symlinks.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-sysadm-to-run-rpcinfo.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-sysadm-to-run-rpcinfo.patch
index ec3dbf4..ec3dbf4 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-allow-sysadm-to-run-rpcinfo.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-allow-sysadm-to-run-rpcinfo.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-don-t-audit-tty_device_t.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-don-t-audit-tty_device_t.patch
index 82370d8..82370d8 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-don-t-audit-tty_device_t.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-don-t-audit-tty_device_t.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-dmesg-to-use-dev-kmsg.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-dmesg-to-use-dev-kmsg.patch
index d6c8dbf..d6c8dbf 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-dmesg-to-use-dev-kmsg.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-dmesg-to-use-dev-kmsg.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-new-SELINUXMNT-in-sys.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-new-SELINUXMNT-in-sys.patch
index 302a38f..7e92b64 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-new-SELINUXMNT-in-sys.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-new-SELINUXMNT-in-sys.patch
@@ -14,8 +14,10 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
  policy/modules/kernel/selinux.if |   34 ++++++++++++++++++++++++++++++++--
  1 file changed, 32 insertions(+), 2 deletions(-)
 
---- a/policy/modules/kernel/selinux.if
-+++ b/policy/modules/kernel/selinux.if
+Index: refpolicy/policy/modules/kernel/selinux.if
+===================================================================
+--- refpolicy.orig/policy/modules/kernel/selinux.if
++++ refpolicy/policy/modules/kernel/selinux.if
 @@ -58,6 +58,10 @@ interface(`selinux_get_fs_mount',`
                 type security_t;
         ')
@@ -27,7 +29,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         # starting in libselinux 2.0.5, init_selinuxmnt() will
         # attempt to short circuit by checking if SELINUXMNT
         # (/selinux) is already a selinuxfs
-@@ -84,6 +88,7 @@ interface(`selinux_dontaudit_get_fs_moun
+@@ -88,6 +92,7 @@ interface(`selinux_dontaudit_get_fs_moun
                 type security_t;
         ')
  
@@ -35,7 +37,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         # starting in libselinux 2.0.5, init_selinuxmnt() will
         # attempt to short circuit by checking if SELINUXMNT
         # (/selinux) is already a selinuxfs
-@@ -109,6 +114,8 @@ interface(`selinux_mount_fs',`
+@@ -117,6 +122,8 @@ interface(`selinux_mount_fs',`
                 type security_t;
         ')
  
@@ -44,7 +46,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         allow $1 security_t:filesystem mount;
  ')
  
-@@ -128,6 +135,8 @@ interface(`selinux_remount_fs',`
+@@ -136,6 +143,8 @@ interface(`selinux_remount_fs',`
                 type security_t;
         ')
  
@@ -53,7 +55,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         allow $1 security_t:filesystem remount;
  ')
  
-@@ -146,6 +155,8 @@ interface(`selinux_unmount_fs',`
+@@ -154,6 +163,8 @@ interface(`selinux_unmount_fs',`
                 type security_t;
         ')
  
@@ -62,24 +64,24 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         allow $1 security_t:filesystem unmount;
  ')
  
-@@ -164,6 +175,8 @@ interface(`selinux_getattr_fs',`
+@@ -172,6 +183,8 @@ interface(`selinux_getattr_fs',`
                 type security_t;
         ')
  
 +       dev_getattr_sysfs_dirs($1)
 +       dev_search_sysfs($1)
         allow $1 security_t:filesystem getattr;
- ')
  
-@@ -183,6 +196,7 @@ interface(`selinux_dontaudit_getattr_fs'
+        dev_getattr_sysfs($1)
+@@ -194,6 +207,7 @@ interface(`selinux_dontaudit_getattr_fs'
                 type security_t;
         ')
  
 +       dev_dontaudit_search_sysfs($1)
         dontaudit $1 security_t:filesystem getattr;
- ')
  
-@@ -202,6 +216,7 @@ interface(`selinux_dontaudit_getattr_dir
+        dev_dontaudit_getattr_sysfs($1)
+@@ -216,6 +230,7 @@ interface(`selinux_dontaudit_getattr_dir
                 type security_t;
         ')
  
@@ -87,7 +89,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dontaudit $1 security_t:dir getattr;
  ')
  
-@@ -220,6 +235,7 @@ interface(`selinux_search_fs',`
+@@ -234,6 +249,7 @@ interface(`selinux_search_fs',`
                 type security_t;
         ')
  
@@ -95,7 +97,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dev_search_sysfs($1)
         allow $1 security_t:dir search_dir_perms;
  ')
-@@ -239,6 +255,7 @@ interface(`selinux_dontaudit_search_fs',
+@@ -253,6 +269,7 @@ interface(`selinux_dontaudit_search_fs',
                 type security_t;
         ')
  
@@ -103,7 +105,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dontaudit $1 security_t:dir search_dir_perms;
  ')
  
-@@ -258,6 +275,7 @@ interface(`selinux_dontaudit_read_fs',`
+@@ -272,6 +289,7 @@ interface(`selinux_dontaudit_read_fs',`
                 type security_t;
         ')
  
@@ -111,7 +113,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dontaudit $1 security_t:dir search_dir_perms;
         dontaudit $1 security_t:file read_file_perms;
  ')
-@@ -279,6 +297,7 @@ interface(`selinux_get_enforce_mode',`
+@@ -293,6 +311,7 @@ interface(`selinux_get_enforce_mode',`
                 type security_t;
         ')
  
@@ -119,23 +121,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
         allow $1 security_t:file read_file_perms;
-@@ -313,6 +332,7 @@ interface(`selinux_set_enforce_mode',`
-                bool secure_mode_policyload;
-        ')
- 
-+       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -345,6 +365,7 @@ interface(`selinux_load_policy',`
-                bool secure_mode_policyload;
-        ')
- 
-+       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -375,6 +396,7 @@ interface(`selinux_read_policy',`
+@@ -361,6 +380,7 @@ interface(`selinux_read_policy',`
                 type security_t;
         ')
  
@@ -143,35 +129,23 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
         allow $1 security_t:file read_file_perms;
-@@ -440,8 +462,8 @@ interface(`selinux_set_generic_booleans'
+@@ -426,6 +446,7 @@ interface(`selinux_set_generic_booleans'
                 type security_t;
         ')
  
 +       dev_getattr_sysfs_dirs($1)
         dev_search_sysfs($1)
--
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
  
-@@ -482,8 +504,8 @@ interface(`selinux_set_all_booleans',`
+        allow $1 security_t:dir list_dir_perms;
+@@ -463,6 +484,7 @@ interface(`selinux_set_all_booleans',`
                 bool secure_mode_policyload;
         ')
  
 +       dev_getattr_sysfs_dirs($1)
         dev_search_sysfs($1)
--
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 { boolean_type -secure_mode_policyload_t }:file rw_file_perms;
-        allow $1 secure_mode_policyload_t:file read_file_perms;
-@@ -528,6 +550,7 @@ interface(`selinux_set_parameters',`
-                attribute can_setsecparam;
-        ')
  
-+       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -552,6 +575,7 @@ interface(`selinux_validate_context',`
+@@ -522,6 +544,7 @@ interface(`selinux_validate_context',`
                 type security_t;
         ')
  
@@ -179,7 +153,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
         allow $1 security_t:file rw_file_perms;
-@@ -574,6 +598,7 @@ interface(`selinux_dontaudit_validate_co
+@@ -544,6 +567,7 @@ interface(`selinux_dontaudit_validate_co
                 type security_t;
         ')
  
@@ -187,7 +161,7 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dontaudit $1 security_t:dir list_dir_perms;
         dontaudit $1 security_t:file rw_file_perms;
         dontaudit $1 security_t:security check_context;
-@@ -595,6 +620,7 @@ interface(`selinux_compute_access_vector
+@@ -565,6 +589,7 @@ interface(`selinux_compute_access_vector
                 type security_t;
         ')
  
@@ -195,34 +169,16 @@ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
         dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
         allow $1 security_t:file rw_file_perms;
-@@ -617,6 +643,7 @@ interface(`selinux_compute_create_contex
+@@ -660,6 +685,13 @@ interface(`selinux_compute_user_contexts
                 type security_t;
         ')
  
 +       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -639,6 +666,7 @@ interface(`selinux_compute_member',`
-                type security_t;
-        ')
- 
 +       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -669,6 +697,7 @@ interface(`selinux_compute_relabel_conte
-                type security_t;
-        ')
- 
 +       dev_getattr_sysfs_dirs($1)
-        dev_search_sysfs($1)
-        allow $1 security_t:dir list_dir_perms;
-        allow $1 security_t:file rw_file_perms;
-@@ -690,6 +719,7 @@ interface(`selinux_compute_user_contexts
-                type security_t;
-        ')
- 
++       dev_getattr_sysfs_dirs($1)
++       dev_getattr_sysfs_dirs($1)
++       dev_getattr_sysfs_dirs($1)
 +       dev_getattr_sysfs_dirs($1)
         dev_search_sysfs($1)
         allow $1 security_t:dir list_dir_perms;
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch
index f04ebec..f04ebec 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-setfiles-statvfs-get-file-count.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-setfiles-statvfs-get-file-count.patch
index 0b8cc5d..0b8cc5d 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-setfiles-statvfs-get-file-count.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-setfiles-statvfs-get-file-count.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-seutils-manage-config-files.patch b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-seutils-manage-config-files.patch
index be33bf1..be33bf1 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/poky-policy-fix-seutils-manage-config-files.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/poky-policy-fix-seutils-manage-config-files.patch
diff --git a/recipes-security/refpolicy/refpolicy-2.20141203/refpolicy-update-for_systemd.patch b/recipes-security/refpolicy/refpolicy-2.20151208/refpolicy-update-for_systemd.patch
index 2ae4185..2ae4185 100644
--- a/recipes-security/refpolicy/refpolicy-2.20141203/refpolicy-update-for_systemd.patch
+++ b/recipes-security/refpolicy/refpolicy-2.20151208/refpolicy-update-for_systemd.patch
diff --git a/recipes-security/refpolicy/refpolicy-mcs_2.20141203.bb b/recipes-security/refpolicy/refpolicy-mcs_2.20151208.bb
index 062727b..062727b 100644
--- a/recipes-security/refpolicy/refpolicy-mcs_2.20141203.bb
+++ b/recipes-security/refpolicy/refpolicy-mcs_2.20151208.bb
diff --git a/recipes-security/refpolicy/refpolicy-minimum_2.20141203.bb b/recipes-security/refpolicy/refpolicy-minimum_2.20151208.bb
index b275821..b275821 100644
--- a/recipes-security/refpolicy/refpolicy-minimum_2.20141203.bb
+++ b/recipes-security/refpolicy/refpolicy-minimum_2.20151208.bb
diff --git a/recipes-security/refpolicy/refpolicy-mls_2.20141203.bb b/recipes-security/refpolicy/refpolicy-mls_2.20151208.bb
index 7388232..7388232 100644
--- a/recipes-security/refpolicy/refpolicy-mls_2.20141203.bb
+++ b/recipes-security/refpolicy/refpolicy-mls_2.20151208.bb
diff --git a/recipes-security/refpolicy/refpolicy-standard_2.20141203.bb b/recipes-security/refpolicy/refpolicy-standard_2.20151208.bb
index 3674fdd..3674fdd 100644
--- a/recipes-security/refpolicy/refpolicy-standard_2.20141203.bb
+++ b/recipes-security/refpolicy/refpolicy-standard_2.20151208.bb
diff --git a/recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb b/recipes-security/refpolicy/refpolicy-targeted_2.20151208.bb
index b169604..b169604 100644
--- a/recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb
+++ b/recipes-security/refpolicy/refpolicy-targeted_2.20151208.bb
diff --git a/recipes-security/refpolicy/refpolicy_2.20141203.inc b/recipes-security/refpolicy/refpolicy_2.20151208.inc
index d58ddea..ce90b13 100644
--- a/recipes-security/refpolicy/refpolicy_2.20141203.inc
+++ b/recipes-security/refpolicy/refpolicy_2.20151208.inc
@@ -1,8 +1,8 @@
 SRC_URI = "https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2;"
-SRC_URI[md5sum] = "69594ede341987904dc2a8b7f2129a93"
-SRC_URI[sha256sum] = "f438209c430d8a2d4ddcbe4bdd3edb46f6af7dc4913637af0b73c635e40c1522"
+SRC_URI[md5sum] = "7b1ca12e9ea0254508391559cb8f2c41"
+SRC_URI[sha256sum] = "2dd2f45a7132137afe8302805c3b7839739759b9ab73dd1815c01afe34ac99de"
 
-FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-2.20141203:"
+FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-2.20151208:"
 
 # Fix file contexts for Poky
 SRC_URI += "file://poky-fc-subs_dist.patch \