296273a trunk: merge UBAC.

Authored and Committed by Chris PeBenito 15 years ago
361 files changed. 9051 lines added. 13508 lines removed.
Changelog
file modified
+2 -0
Makefile
file modified
+5 -0
README
file modified
+3 -0
Rules.modular
file modified
+1 -1
Rules.monolithic
file modified
+1 -1
build.conf
file modified
+4 -0
config/appconfig-mcs/default_contexts
file modified
+1 -1
config/appconfig-mcs/root_default_contexts
file modified
+1 -1
config/appconfig-mcs/staff_u_default_contexts
file modified
+1 -1
config/appconfig-mcs/unconfined_u_default_contexts
file modified
+1 -1
config/appconfig-mcs/user_u_default_contexts
file modified
+1 -1
config/appconfig-mls/default_contexts
file modified
+1 -1
config/appconfig-mls/root_default_contexts
file modified
+1 -1
config/appconfig-mls/staff_u_default_contexts
file modified
+1 -1
config/appconfig-mls/unconfined_u_default_contexts
file modified
+1 -1
config/appconfig-mls/user_u_default_contexts
file modified
+1 -1
config/appconfig-standard/default_contexts
file modified
+1 -1
config/appconfig-standard/root_default_contexts
file modified
+1 -1
config/appconfig-standard/staff_u_default_contexts
file modified
+1 -1
config/appconfig-standard/unconfined_u_default_contexts
file modified
+1 -1
config/appconfig-standard/user_u_default_contexts
file modified
+1 -1
policy/constraints
file modified
+187 -27
policy/global_tunables
file modified
+2 -20
policy/modules/admin/acct.te
file modified
+2 -3
policy/modules/admin/alsa.te
file modified
+2 -5
policy/modules/admin/amanda.if
file modified
+0 -6
policy/modules/admin/amanda.te
file modified
+4 -3
policy/modules/admin/amtu.if
file modified
+0 -6
policy/modules/admin/amtu.te
file modified
+3 -1
policy/modules/admin/anaconda.te
file modified
+2 -2
policy/modules/admin/apt.if
file modified
+0 -6
policy/modules/admin/apt.te
file modified
+3 -1
policy/modules/admin/backup.if
file modified
+0 -6
policy/modules/admin/backup.te
file modified
+3 -1
policy/modules/admin/bootloader.if
file modified
+1 -7
policy/modules/admin/bootloader.te
file modified
+4 -9
policy/modules/admin/certwatch.if
file modified
+0 -6
policy/modules/admin/certwatch.te
file modified
+2 -0
policy/modules/admin/consoletype.if
file modified
+0 -6
policy/modules/admin/consoletype.te
file modified
+3 -1
policy/modules/admin/ddcprobe.if
file modified
+0 -6
policy/modules/admin/ddcprobe.te
file modified
+2 -1
policy/modules/admin/dmesg.te
file modified
+2 -3
policy/modules/admin/dmidecode.if
file modified
+0 -6
policy/modules/admin/dmidecode.te
file modified
+3 -3
policy/modules/admin/dpkg.if
file modified
+1 -7
policy/modules/admin/dpkg.te
file modified
+2 -5
policy/modules/admin/firstboot.if
file modified
+0 -6
policy/modules/admin/firstboot.te
file modified
+10 -9
policy/modules/admin/kismet.if
file modified
+0 -6
policy/modules/admin/kismet.te
file modified
+3 -1
policy/modules/admin/kudzu.if
file modified
+0 -6
policy/modules/admin/kudzu.te
file modified
+3 -4
policy/modules/admin/logrotate.if
file modified
+0 -6
policy/modules/admin/logrotate.te
file modified
+3 -3
policy/modules/admin/logwatch.te
file modified
+3 -3
policy/modules/admin/mrtg.te
file modified
+3 -4
policy/modules/admin/netutils.if
file modified
+0 -30
policy/modules/admin/netutils.te
file modified
+6 -1
policy/modules/admin/portage.if
file modified
+2 -14
policy/modules/admin/portage.te
file modified
+5 -4
policy/modules/admin/prelink.if
file modified
+0 -6
policy/modules/admin/prelink.te
file modified
+3 -1
policy/modules/admin/quota.if
file modified
+0 -6
policy/modules/admin/quota.te
file modified
+2 -1
policy/modules/admin/readahead.te
file modified
+2 -3
policy/modules/admin/rpm.if
file modified
+3 -9
policy/modules/admin/rpm.te
file modified
+3 -6
policy/modules/admin/su.if
file modified
+24 -41
policy/modules/admin/su.te
file modified
+1 -1
policy/modules/admin/sudo.if
file modified
+22 -37
policy/modules/admin/sudo.te
file modified
+1 -3
policy/modules/admin/tripwire.if
file modified
+0 -24
policy/modules/admin/tripwire.te
file modified
+9 -1
policy/modules/admin/tzdata.if
file modified
+0 -6
policy/modules/admin/tzdata.te
file modified
+3 -1
policy/modules/admin/updfstab.te
file modified
+3 -3
policy/modules/admin/usbmodules.if
file modified
+0 -6
policy/modules/admin/usbmodules.te
file modified
+3 -1
policy/modules/admin/usermanage.if
file modified
+3 -33
policy/modules/admin/usermanage.te
file modified
+11 -11
policy/modules/admin/vpn.if
file modified
+1 -7
policy/modules/admin/vpn.te
file modified
+3 -3
policy/modules/apps/ada.if
file modified
+0 -6
policy/modules/apps/ada.te
file modified
+3 -1
policy/modules/apps/calamaris.te
file modified
+2 -2
policy/modules/apps/cdrecord.if
file modified
+14 -168
policy/modules/apps/cdrecord.te
file modified
+109 -2
policy/modules/apps/ethereal.fc
file modified
+1 -1
policy/modules/apps/ethereal.if
file modified
+22 -217
policy/modules/apps/ethereal.te
file modified
+119 -2
policy/modules/apps/evolution.fc
file modified
+3 -3
policy/modules/apps/evolution.if
file modified
+62 -814
policy/modules/apps/evolution.te
file modified
+613 -6
policy/modules/apps/games.if
file modified
+15 -147
policy/modules/apps/games.te
file modified
+145 -30
policy/modules/apps/gift.fc
file modified
+1 -1
policy/modules/apps/gift.if
file modified
+23 -174
policy/modules/apps/gift.te
file modified
+139 -3
policy/modules/apps/gnome.fc
file modified
+3 -3
policy/modules/apps/gnome.if
file modified
+31 -128
policy/modules/apps/gnome.te
file modified
+62 -2
policy/modules/apps/gpg.fc
file modified
+1 -1
policy/modules/apps/gpg.if
file modified
+31 -325
policy/modules/apps/gpg.te
file modified
+232 -9
policy/modules/apps/irc.fc
file modified
+3 -3
policy/modules/apps/irc.if
file modified
+12 -128
policy/modules/apps/irc.te
file modified
+96 -2
policy/modules/apps/java.if
file modified
+21 -169
policy/modules/apps/java.te
file modified
+124 -7
policy/modules/apps/loadkeys.if
file modified
+0 -6
policy/modules/apps/loadkeys.te
file modified
+3 -1
policy/modules/apps/lockdev.if
file modified
+15 -61
policy/modules/apps/lockdev.te
file modified
+32 -2
policy/modules/apps/mono.te
file modified
+3 -3
policy/modules/apps/mozilla.fc
file modified
+5 -5
policy/modules/apps/mozilla.if
file modified
+50 -477
policy/modules/apps/mozilla.te
file modified
+250 -3
policy/modules/apps/mplayer.fc
file modified
+1 -1
policy/modules/apps/mplayer.if
file modified
+30 -448
policy/modules/apps/mplayer.te
file modified
+293 -5
policy/modules/apps/podsleuth.te
file modified
+2 -2
policy/modules/apps/qemu.if
file modified
+3 -7
policy/modules/apps/qemu.te
file modified
+1 -1
policy/modules/apps/rssh.if
file modified
+23 -98
policy/modules/apps/rssh.te
file modified
+73 -5
policy/modules/apps/screen.fc
file modified
+1 -1
policy/modules/apps/screen.if
file modified
+40 -58
policy/modules/apps/screen.te
file modified
+18 -1
policy/modules/apps/thunderbird.fc
file modified
+1 -1
policy/modules/apps/thunderbird.if
file modified
+31 -351
policy/modules/apps/thunderbird.te
file modified
+213 -2
policy/modules/apps/tvtime.if
file modified
+19 -115
policy/modules/apps/tvtime.te
file modified
+86 -4
policy/modules/apps/uml.fc
file modified
+1 -1
policy/modules/apps/uml.if
file modified
+41 -171
policy/modules/apps/uml.te
file modified
+126 -4
policy/modules/apps/userhelper.if
file modified
+32 -51
policy/modules/apps/userhelper.te
file modified
+3 -1
policy/modules/apps/usernetctl.if
file modified
+6 -12
policy/modules/apps/usernetctl.te
file modified
+2 -2
policy/modules/apps/vmware.fc
file modified
+3 -3
policy/modules/apps/vmware.if
file modified
+15 -150
policy/modules/apps/vmware.te
file modified
+149 -6
policy/modules/apps/webalizer.if
file modified
+0 -6
policy/modules/apps/webalizer.te
file modified
+3 -2
policy/modules/apps/wine.if
file modified
+0 -6
policy/modules/apps/wine.te
file modified
+3 -1
policy/modules/apps/wireshark.fc
file modified
+1 -1
policy/modules/apps/wireshark.if
file modified
+23 -210
policy/modules/apps/wireshark.te
file modified
+116 -2
policy/modules/apps/yam.if
file modified
+0 -6
policy/modules/apps/yam.te
file modified
+3 -4
policy/modules/roles/auditadm.if
file modified
+20 -15
policy/modules/roles/auditadm.te
file modified
+146 -7
policy/modules/roles/secadm.if
file modified
+20 -14
policy/modules/roles/secadm.te
file modified
+140 -8
policy/modules/roles/staff.if
file modified
+14 -126
policy/modules/roles/staff.te
file modified
+145 -5
policy/modules/roles/sysadm.if
file modified
+20 -364
policy/modules/roles/sysadm.te
file modified
+198 -76
policy/modules/roles/unprivuser.if
file modified
+14 -308
policy/modules/roles/unprivuser.te
file modified
+141 -1
policy/modules/services/afs.te
file modified
+5 -5
policy/modules/services/aide.if
file modified
+0 -6
policy/modules/services/aide.te
file modified
+3 -1
policy/modules/services/amavis.te
file modified
+3 -3
policy/modules/services/apache.fc
file modified
+1 -1
policy/modules/services/apache.if
file modified
+51 -107
policy/modules/services/apache.te
file modified
+52 -18
policy/modules/services/apcupsd.te
file modified
+2 -3
policy/modules/services/apm.te
file modified
+4 -5
policy/modules/services/arpwatch.te
file modified
+2 -3
policy/modules/services/asterisk.te
file modified
+2 -3
policy/modules/services/audioentropy.te
file modified
+2 -3
policy/modules/services/automount.te
file modified
+2 -3
policy/modules/services/avahi.te
file modified
+3 -4
policy/modules/services/bind.if
file modified
+0 -6
policy/modules/services/bind.te
file modified
+5 -4
policy/modules/services/bluetooth.if
file modified
+24 -95
policy/modules/services/bluetooth.te
file modified
+85 -8
policy/modules/services/canna.te
file modified
+2 -3
policy/modules/services/clockspeed.if
file modified
+0 -7
policy/modules/services/clockspeed.te
file modified
+3 -1
policy/modules/services/comsat.te
file modified
+3 -3
policy/modules/services/consolekit.te
file modified
+4 -4
policy/modules/services/courier.te
file modified
+4 -6
policy/modules/services/cron.fc
file modified
+1 -1
policy/modules/services/cron.if
file modified
+185 -258
policy/modules/services/cron.te
file modified
+279 -119
policy/modules/services/cups.te
file modified
+9 -11
policy/modules/services/cyphesis.te
file modified
+2 -2
policy/modules/services/cyrus.if
file modified
+0 -1
policy/modules/services/cyrus.te
file modified
+2 -4
policy/modules/services/dante.te
file modified
+2 -3
policy/modules/services/dbus.fc
file modified
+2 -2
policy/modules/services/dbus.if
file modified
+48 -94
policy/modules/services/dbus.te
file modified
+17 -8
policy/modules/services/dcc.if
file modified
+0 -18
policy/modules/services/dcc.te
file modified
+10 -7
policy/modules/services/ddclient.te
file modified
+2 -3
policy/modules/services/dhcp.te
file modified
+3 -4
policy/modules/services/distcc.te
file modified
+2 -3
policy/modules/services/dnsmasq.te
file modified
+2 -3
policy/modules/services/dovecot.fc
file modified
+0 -1
policy/modules/services/dovecot.te
file modified
+7 -4
policy/modules/services/exim.te
file modified
+7 -9
policy/modules/services/fetchmail.te
file modified
+2 -3
policy/modules/services/finger.te
file modified
+2 -4
policy/modules/services/ftp.if
file modified
+1 -49
policy/modules/services/ftp.te
file modified
+9 -7
policy/modules/services/gatekeeper.te
file modified
+2 -3
policy/modules/services/gpm.te
file modified
+2 -3
policy/modules/services/hal.te
file modified
+3 -4
policy/modules/services/howl.te
file modified
+2 -3
policy/modules/services/i18n_input.te
file modified
+2 -4
policy/modules/services/imaze.te
file modified
+2 -3
policy/modules/services/inetd.te
file modified
+2 -3
policy/modules/services/inn.te
file modified
+2 -3
policy/modules/services/ircd.te
file modified
+2 -3
policy/modules/services/irqbalance.te
file modified
+2 -3
policy/modules/services/jabber.te
file modified
+2 -3
policy/modules/services/kerberos.te
file modified
+3 -5
policy/modules/services/kerneloops.te
file modified
+2 -2
policy/modules/services/ldap.te
file modified
+2 -3
policy/modules/services/lpd.if
file modified
+16 -231
policy/modules/services/lpd.te
file modified
+145 -7
policy/modules/services/mailman.te
file modified
+4 -4
policy/modules/services/monop.te
file modified
+2 -3
policy/modules/services/mta.if
file modified
+13 -131
policy/modules/services/mta.te
file modified
+56 -4
policy/modules/services/munin.te
file modified
+2 -3
policy/modules/services/mysql.te
file modified
+2 -3
policy/modules/services/nagios.te
file modified
+2 -3
policy/modules/services/nessus.te
file modified
+2 -3
policy/modules/services/networkmanager.te
file modified
+6 -12
policy/modules/services/nis.te
file modified
+4 -7
policy/modules/services/nscd.if
file modified
+0 -6
policy/modules/services/nscd.te
file modified
+3 -3
policy/modules/services/nsd.te
file modified
+3 -4
policy/modules/services/ntop.te
file modified
+2 -3
policy/modules/services/ntp.te
file modified
+2 -4
policy/modules/services/oav.if
file modified
+0 -6
policy/modules/services/oav.te
file modified
+4 -3
policy/modules/services/oddjob.te
file modified
+7 -9
policy/modules/services/oident.fc
file modified
+1 -2
policy/modules/services/oident.if
file modified
+34 -51
policy/modules/services/oident.te
file modified
+7 -4
policy/modules/services/openct.te
file modified
+2 -3
policy/modules/services/openvpn.if
file modified
+0 -6
policy/modules/services/openvpn.te
file modified
+5 -3
policy/modules/services/pegasus.te
file modified
+2 -3
policy/modules/services/perdition.te
file modified
+2 -3
policy/modules/services/portmap.if
file modified
+0 -6
policy/modules/services/portmap.te
file modified
+3 -3
policy/modules/services/portslave.te
file modified
+2 -2
policy/modules/services/postfix.if
file modified
+0 -40
policy/modules/services/postfix.te
file modified
+3 -1
policy/modules/services/postgresql.if
file modified
+20 -41
policy/modules/services/postgresql.te
file modified
+23 -4
policy/modules/services/postgrey.te
file modified
+2 -3
policy/modules/services/ppp.if
file modified
+0 -12
policy/modules/services/ppp.te
file modified
+4 -8
policy/modules/services/privoxy.te
file modified
+3 -4
policy/modules/services/procmail.te
file modified
+8 -4
policy/modules/services/pxe.te
file modified
+2 -3
policy/modules/services/pyzor.fc
file modified
+1 -1
policy/modules/services/pyzor.if
file modified
+19 -25
policy/modules/services/pyzor.te
file modified
+32 -15
policy/modules/services/qmail.if
file modified
+0 -43
policy/modules/services/qmail.te
file modified
+1 -1
policy/modules/services/radius.te
file modified
+2 -4
policy/modules/services/radvd.te
file modified
+2 -3
policy/modules/services/razor.fc
file modified
+1 -1
policy/modules/services/razor.if
file modified
+23 -83
policy/modules/services/razor.te
file modified
+88 -26
policy/modules/services/remotelogin.te
file modified
+2 -2
policy/modules/services/rhgb.te
file modified
+7 -9
policy/modules/services/ricci.te
file modified
+2 -2
policy/modules/services/rlogin.te
file modified
+3 -3
policy/modules/services/roundup.te
file modified
+2 -3
policy/modules/services/rpc.te
file modified
+4 -4
policy/modules/services/rshd.te
file modified
+2 -2
policy/modules/services/samba.if
file modified
+0 -56
policy/modules/services/samba.te
file modified
+26 -16
policy/modules/services/sasl.te
file modified
+2 -3
policy/modules/services/sendmail.te
file modified
+2 -3
policy/modules/services/setroubleshoot.te
file modified
+3 -3
policy/modules/services/slrnpull.te
file modified
+2 -3
policy/modules/services/smartmon.te
file modified
+2 -3
policy/modules/services/snmp.te
file modified
+2 -3
policy/modules/services/snort.te
file modified
+2 -3
policy/modules/services/soundserver.te
file modified
+2 -3
policy/modules/services/spamassassin.fc
file modified
+1 -1
policy/modules/services/spamassassin.if
file modified
+35 -331
policy/modules/services/spamassassin.te
file modified
+256 -10
policy/modules/services/speedtouch.te
file modified
+2 -3
policy/modules/services/squid.te
file modified
+2 -4
policy/modules/services/ssh.fc
file modified
+1 -1
policy/modules/services/ssh.if
file modified
+155 -243
policy/modules/services/ssh.te
file modified
+254 -22
policy/modules/services/stunnel.te
file modified
+2 -3
policy/modules/services/sysstat.te
file modified
+2 -2
policy/modules/services/telnet.te
file modified
+2 -2
policy/modules/services/tftp.te
file modified
+3 -3
policy/modules/services/timidity.te
file modified
+2 -2
policy/modules/services/transproxy.te
file modified
+2 -3
policy/modules/services/uptime.te
file modified
+2 -3
policy/modules/services/uwimap.te
file modified
+7 -4
policy/modules/services/virt.te
file modified
+2 -2
policy/modules/services/watchdog.te
file modified
+2 -3
policy/modules/services/xfs.te
file modified
+2 -3
policy/modules/services/xprint.te
file modified
+2 -3
policy/modules/services/xserver.fc
file modified
+8 -8
policy/modules/services/xserver.if
file modified
+287 -817
policy/modules/services/xserver.te
file modified
+542 -98
policy/modules/services/zebra.te
file modified
+2 -3
policy/modules/system/authlogin.if
file modified
+16 -163
policy/modules/system/authlogin.te
file modified
+60 -39
policy/modules/system/clock.if
file modified
+0 -6
policy/modules/system/clock.te
file modified
+1 -1
policy/modules/system/fstools.if
file modified
+0 -6
policy/modules/system/fstools.te
file modified
+2 -1
policy/modules/system/hostname.if
file modified
+0 -6
policy/modules/system/hostname.te
file modified
+1 -1
policy/modules/system/hotplug.te
file modified
+3 -4
policy/modules/system/init.if
file modified
+21 -6
policy/modules/system/init.te
file modified
+4 -5
policy/modules/system/ipsec.if
file modified
+0 -6
policy/modules/system/ipsec.te
file modified
+5 -4
policy/modules/system/iptables.if
file modified
+2 -8
policy/modules/system/iptables.te
file modified
+2 -1
policy/modules/system/libraries.if
file modified
+0 -6
policy/modules/system/libraries.te
file modified
+2 -1
policy/modules/system/locallogin.te
file modified
+5 -6
policy/modules/system/logging.if
file modified
+0 -12
policy/modules/system/logging.te
file modified
+5 -6
policy/modules/system/lvm.if
file modified
+0 -6
policy/modules/system/lvm.te
file modified
+4 -6
policy/modules/system/modutils.if
file modified
+1 -19
policy/modules/system/modutils.te
file modified
+10 -12
policy/modules/system/mount.if
file modified
+1 -13
policy/modules/system/mount.te
file modified
+1 -1
policy/modules/system/netlabel.if
file modified
+0 -6
policy/modules/system/netlabel.te
file modified
+3 -1
policy/modules/system/pcmcia.if
file modified
+0 -6
policy/modules/system/pcmcia.te
file modified
+3 -3
policy/modules/system/raid.te
file modified
+3 -4
policy/modules/system/selinuxutil.if
file modified
+28 -54
policy/modules/system/selinuxutil.te
file modified
+10 -14
policy/modules/system/sysnetwork.if
file modified
+0 -12
policy/modules/system/sysnetwork.te
file modified
+5 -3
policy/modules/system/udev.te
file modified
+3 -3
policy/modules/system/unconfined.if
file modified
+2 -68
policy/modules/system/unconfined.te
file modified
+38 -48
policy/modules/system/userdomain.fc
file modified
+3 -3
policy/modules/system/userdomain.if
file modified
+805 -3335
policy/modules/system/userdomain.te
file modified
+39 -28
policy/modules/system/xen.te
file modified
+3 -3
policy/rolemap
file modified
+4 -9
support/Makefile.devel
file modified
+4 -0
    trunk: merge UBAC.
    
        
file modified
+2 -0
file modified
+5 -0
file modified
+3 -0
file modified
+1 -1
file modified
+1 -1
file modified
+4 -0
file modified
+187 -27
file modified
+2 -20
file modified
+2 -3
file modified
+2 -5
file modified
+0 -6
file modified
+3 -1
file modified
+0 -6
file modified
+3 -1
file modified
+1 -7
file modified
+2 -5
file modified
+3 -4
file modified
+3 -9
file modified
+3 -6
file modified
+24 -41
file modified
+1 -1
file modified
+22 -37
file modified
+1 -3
file modified
+1 -7
file modified
+3 -3
file modified
+0 -6
file modified
+3 -1
file modified
+14 -168
file modified
+109 -2
file modified
+22 -217
file modified
+119 -2
file modified
+62 -814
file modified
+15 -147
file modified
+145 -30
file modified
+1 -1
file modified
+23 -174
file modified
+139 -3
file modified
+3 -3
file modified
+31 -128
file modified
+62 -2
file modified
+1 -1
file modified
+31 -325
file modified
+232 -9
file modified
+3 -3
file modified
+12 -128
file modified
+96 -2
file modified
+21 -169
file modified
+124 -7
file modified
+15 -61
file modified
+3 -3
file modified
+50 -477
file modified
+250 -3
file modified
+30 -448
file modified
+293 -5
file modified
+3 -7
file modified
+1 -1
file modified
+23 -98
file modified
+73 -5
file modified
+40 -58
file modified
+18 -1
file modified
+19 -115
file modified
+86 -4
file modified
+1 -1
file modified
+41 -171
file modified
+126 -4
file modified
+15 -150
file modified
+149 -6
file modified
+0 -6
file modified
+3 -1
file modified
+23 -210
file modified
+0 -6
file modified
+3 -4
file modified
+20 -14
file modified
+140 -8
file modified
+14 -126
file modified
+145 -5
file modified
+20 -364
file modified
+198 -76
file modified
+185 -258
file modified
+279 -119
file modified
+48 -94
file modified
+16 -231
file modified
+145 -7
file modified
+13 -131
file modified
+155 -243
file modified
+254 -22
file modified
+287 -817
file modified
+21 -6
file modified
+0 -6
file modified
+4 -6
file modified
+805 -3335
file modified
+3 -3
file modified
+4 -9
file modified
+4 -0