Commits - rpms/selinux-policy - src.fedoraproject.org

- Add interface for postgesql_filetrans_name_content to make sure lo

Miroslav Grepl • 10 years ago

7e4bbf3

* Thu Nov 15 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97

Miroslav Grepl • 10 years ago

6dd5dc5

- httpd needs to send signull to openshift init script

Miroslav Grepl • 10 years ago

4dea06b

* Fri Nov 1 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95

Miroslav Grepl • 10 years ago

c6beb7e

- Add httpd_verify_dns boolean

Miroslav Grepl • 10 years ago

9ac3bc4

- Add labeling for mcollectived

Miroslav Grepl • 10 years ago

639e804

Add additional fixes to make build working

Miroslav Grepl • 10 years ago

00145e1

Add missing gen_tunable(httpd_run_stickshift, false)

Miroslav Grepl • 10 years ago

c25ab3c

- Fix httpd_stickshift boolean

Miroslav Grepl • 10 years ago

1e59306

Remove pwauth_domtrans which is not used in F16

Miroslav Grepl • 10 years ago

d7f9279

* Fri Oct 12 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-92

Miroslav Grepl • 10 years ago

0ab0cdb

- Allow postfix to connect to spampd

Miroslav Grepl • 11 years ago

3563687

* Mon Jul 2 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90

Miroslav Grepl • 11 years ago

b89174f

- Allow systemd to read tmp_t link files

Miroslav Grepl • 11 years ago

a3cd830

* Fri May 4 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-

Miroslav Grepl • 11 years ago

748e21a

* Wed Apr 25 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87

Miroslav Grepl • 11 years ago

e937162

* Tue Apr 24 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86

Miroslav Grepl • 11 years ago

dc0e77c

* Fri Apr 20 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0

Miroslav Grepl • 11 years ago

aba88ad

* Wed Apr 18 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8

Miroslav Grepl • 11 years ago

56c8871

* Mon Apr 16 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8

Miroslav • 11 years ago

e550e27

Fix jockey.if

Miroslav Grepl • 11 years ago

39be1dc

More fixes, look at spec file

Miroslav • 11 years ago

4d5e284

Add userdom_rw_inherited_user_tmp_files() interface

Miroslav Grepl • 11 years ago

f1e1a20

Fix typo

Miroslav Grepl • 11 years ago

77697cb

Remove duplicate declaration

Miroslav Grepl • 11 years ago

6f00307

* Fri Apr 6 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82

Miroslav Grepl • 11 years ago

a13ca31

Add mysql_read_home_content() interface

Miroslav Grepl • 11 years ago

fcc8115

Fix typo in modules-targeted.conf

Miroslav Grepl • 11 years ago

1e0cfc1

* Wed Mar 13 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-81

Miroslav Grepl • 11 years ago

514305e

- Add own type for rdate port

Miroslav Grepl • 11 years ago

4ed0303

Allow sandbox_server to send signals

Miroslav • 11 years ago

61cec9a

* Wed Mar 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79

Miroslav • 11 years ago

b3a28ad

* Wed Feb 29 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-78

Miroslav Grepl • 11 years ago

f30b43f

Remove duplicate file name transition

Miroslav Grepl • 11 years ago

871b575

Fix mysql interface naming

Miroslav Grepl • 11 years ago

2292766

* Mon Feb 27 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77

Miroslav Grepl • 11 years ago

3b8b033

Fix typos

Miroslav • 11 years ago

a0a4dcd

* Mon Feb 20 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76

Miroslav Grepl • 11 years ago

b962371

- Add logging_syslogd_use_tty boolea

Miroslav • 11 years ago

0717336

- Add httpd_can_connect_zabbix boolean

Miroslav • 11 years ago

22af8f3

- Backport colord policy from F17

Miroslav Grepl • 11 years ago

7be3280

- Allow deltacloudd dac_override, setuid, setgid caps

Miroslav • 11 years ago

c1c5a56

+* Wed Jan 4 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71

Miroslav • 11 years ago

c33872f

Fix typo

Miroslav • 11 years ago

db8c840

- Allow systemctl running as logrotate_t to connect to private systemd socket

Miroslav • 11 years ago

b942ea9

- Fix bug in the boinc policy

Miroslav • 11 years ago

5412665

- sssd needs sys_admin capability

Miroslav • 11 years ago

2a01431

+- Add httpd_can_connect_ldap() interface

Miroslav • 11 years ago

cb24e58

- Add fixes for xguest package

Miroslav • 11 years ago

7ced2aa

- Allow abrt to getattr on blk files

Miroslav • 11 years ago

61e73f0

- Use fs_use_xattr for squashf

Miroslav • 11 years ago

efa1438

- Change port 9050 to tor_socks_port_t and then allow openvpn to connect to i

Miroslav • 11 years ago

347e5d1

- Add fs_read_fusefs_dirs interface

Miroslav • 11 years ago

0685f04

- Needs to require new version policycoreutils

Miroslav • 11 years ago

47d8d57

- Needs to require new version checkpolicy

Miroslav • 11 years ago

7e1e8e1

+- Allow spamd to send mail

Miroslav • 11 years ago

66b865a

Add temporary fix until new checkpolicy

Miroslav • 11 years ago

d36f322

- Allow mcelog_t to create dir and file in /var/run and label it cor

Miroslav • 11 years ago

d8e6ff6

Temporary disabled rules with "~" until new checkpolicy is stable

Miroslav • 11 years ago

d0054fd

- We need to treat port_t and unreserved_port_t as generic_port types

Miroslav • 11 years ago

2447e7e

Temporary fix libs_filetrans_named_content() interface

Miroslav • 11 years ago

ff88173

- Add ssh_dontaudit_search_home_dir

Miroslav • 11 years ago

325f094

- Add more MCS fixes to make sandbox working

Miroslav • 11 years ago

276e387

- MCS fixes

Miroslav • 11 years ago

6036991

- Make nvidia* to be labeled correctly

Miroslav • 11 years ago

2b48e08

- Fix abrt_manage_cache() interface

Miroslav • 11 years ago

d11c0f5

bump release version

Miroslav • 11 years ago

87e49a7

- Check in fixed for Chrome nacl support

Miroslav • 11 years ago

ac98bc6

- Begin removing qemu_t domain, we really no longer need this domain.

Miroslav • 11 years ago

8becee1

- Allow policykit to talk to the systemd via dbus

Miroslav • 11 years ago

0dbb129

- Change bootstrap name to nacl

Miroslav • 11 years ago

8e106fa

- Allow named to connect to dirsrv by default

Miroslav • 11 years ago

82188c2

- Fixes for cloudform policies which need to connect to random ports

Miroslav • 11 years ago

d51ae9d

- Policy update should not modify local contexts

Miroslav • 11 years ago

5115556

- Policy update should not modify local contexts

Miroslav • 11 years ago

84fb84f

Remove patch1

Miroslav • 11 years ago

17ec3ab

file_contexts.subs shouldn't be erased on an update

Miroslav • 11 years ago

7f740ef

Allow systemd_passwd to talk to sock_files in systemd_passwd_var_run_t directories

Dan Walsh • 11 years ago

04b40f1

Bump version

Miroslav • 11 years ago

2c5d51c

Remove tzdata policy

Miroslav • 11 years ago

a864730

Remove tzdata policy in modules-* and add fix to spec file

Miroslav • 11 years ago

e0e140b

- Add labeling for udev

Miroslav • 11 years ago

0c7e380

* Wed Oct 19 2011 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-43

Miroslav • 11 years ago

815b8ef

- Add fixes for nova-stack policy

Miroslav • 11 years ago

1ec0034

+- Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the dom

Miroslav • 11 years ago

ad94e39

- Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)

Miroslav • 11 years ago

af0ca49

Dont check mtime, md5 and size for config files in poliyc

Dan Walsh • 11 years ago

9fe6071

Need to turn on chrome_sandbox_t transition in order to dontaudit access to mmap_zero

Dan Walsh • 11 years ago

a9e66a8

- Fixes for bootloader policy

Miroslav • 11 years ago

189be65

- Allow virsh to read xenstored pid file

Miroslav • 11 years ago

7db75b3

- Allow nmbd to manage sock file in /var/run/nmbd

Miroslav • 11 years ago

a2ff5da

Turn off unconfined transitions

Dan Walsh • 11 years ago

c14289e

Add thumb to the modules files to support usage for confined users

Dan Walsh • 11 years ago

3faa645

- Allow logrotate setuid and setgid since logrotate is supposed to do it

Miroslav • 11 years ago

e02e8f0

- Stop complaining about leaked file descriptors during install

Miroslav • 12 years ago

d3dfcec

- Add support for Clustered Samba commands

Miroslav • 12 years ago

972757a

Fix spec file

Miroslav Grepl • 12 years ago

710a9d1

+- Change screen to use screen_domain attribute and allow screen_domains to read all process domain state

Miroslav • 12 years ago

513e3a1

+- Allow pwupdate to send mail

Miroslav • 12 years ago

379dc13

Add user_tty_device_t as a customizable_type so that restorecon -R -v /dev will not complain about it or modify the label

Dan Walsh • 12 years ago

578ba75

- Needs to require a new version of checkpolicy

Miroslav • 12 years ago

8e14c65

- systemd needs to read lnk files of systemd unit files

Miroslav • 12 years ago

cef8d3e

Make colord unconfined for RC1

Dan Walsh • 12 years ago

c6a7317

- Allow sanlock to manage virt lib files

Miroslav • 12 years ago

959516d

Make seusers configuration data

Dan Walsh • 12 years ago

ba0ec58

- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files

Miroslav • 12 years ago

c6618b7

- Allow collectd to read hardware state information

Miroslav • 12 years ago

2867c7b

- removing unconfined_notrans_t no longer necessary

Miroslav • 12 years ago

8d9e7e7

- For some reason chfn tries to stat all devices, dontaudit this

Miroslav • 12 years ago

a2f7d6a

- Add exim_exec_t label for /usr/sbin/exim_tidydb

Miroslav • 12 years ago

e4c2e13

- Add glance policy

Miroslav • 12 years ago

1d11433

Add glance module definition

Dan Walsh • 12 years ago

f7b9961

- Allow Postfix to deliver to Dovecot LMTP socket

Miroslav • 12 years ago

a8066ad

- Allow insmod_t to use fds leaked from devicekit

Miroslav • 12 years ago

ff6f661

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 12 years ago

304d396

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 12 years ago

2c6a4d3

- Add policy for sa-update being run out of cron jobs

Miroslav • 12 years ago

f212e8d

Do not do preinstall if there is not previous install

Dan Walsh • 12 years ago

8bbeb37

Hard code to MLSENABLED

Dan Walsh • 12 years ago

9ea66ff

- Turn on allow_domain_fd_use boolean on F16

Miroslav • 12 years ago

24f58d7

Add /etc/systemd to match label on /lib/systemd

Dan Walsh • 12 years ago

85034dd

Merge branch 'f16' of ssh://pkgs.fedoraproject.org/selinux-policy into f16

Dan Walsh • 12 years ago

31aa4ac

- livecd fixes

Miroslav • 12 years ago

a1cae79

Check for mls_enabled using pathon rather then by path

Dan Walsh • 12 years ago

e69db83

Cleanup spec file to match upstream

Dan Walsh • 12 years ago

3a6c287

Fix selinux-policy.spec to not print ugly rpmnew file

Dan Walsh • 12 years ago

ee6088d

Turn on allow_domain_fd_use boolean

Dan Walsh • 12 years ago

1ada97f

Fix fc_sort typo

Miroslav • 12 years ago

aee77a0

storage should be in base

Dan Walsh • 12 years ago

6809316

- Add cfengine policy

Miroslav • 12 years ago

ba5c3ab

- Add abrt_domain attribute

Miroslav • 12 years ago

1ed80a2

Fix spec typo

Miroslav • 12 years ago

8b78a9d

- Add sblim, uuidd policies

Miroslav • 12 years ago

e6657a2

Add uuidd module, remove kudzu, howl, hotplug

Dan Walsh • 12 years ago

1c96502

- init_t need setexec

Miroslav • 12 years ago

9e6acc6

rpms / selinux-policy

Commits 4789

rpms / selinux-policy

Source Code

Commits 4789