Commits - rpms/selinux-policy - src.fedoraproject.org

rpms / selinux-policy

Overview Files Commits Branches Forks Releases

Monitoring status:

Bugzilla Assignee:

Fedora:: zpytela
EPEL:: zpytela

Commits 503

This branch contains 67 commits not in the main branch rawhide

Bump release to -221.

Miroslav Grepl • 4 years ago

cb85251

* Mon Oct 17 2016 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-221

Miroslav Grepl • 4 years ago

ec8dddb

- Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)

Miroslav Grepl • 5 years ago

2b449e6

/usr/sbim/semanage has been moved to policycoreutils-python-utils package which needs to be require in Post section for selinux-policy-minumum package.

Miroslav Grepl • 5 years ago

2fc3e7c

- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)

Miroslav Grepl • 5 years ago

0e84535

We need to cop *.local policy files to keep local customizations also after upgrades between old and new module store location. BZ(#1279621).

Miroslav Grepl • 5 years ago

982e483

- Merge pull request #48 from lkundrak/contrib-openfortivpn

Miroslav Grepl • 5 years ago

db55b65

Add support for openfortivpn

Miroslav Grepl • 5 years ago

5c3fd59

- The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.

Miroslav Grepl • 5 years ago

02b3744

Update make-rhat-patches.sh to avoid git-checkout for patches creation.

Miroslav Grepl • 5 years ago

856e200

Update config.tgz to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.

Miroslav Grepl • 5 years ago

7eb3be8

- Add ipmievd policy creaed by vmojzis@redhat.com

Miroslav Grepl • 5 years ago

f5f6812

We should be able to do builds with neverallow check with new 2.4 userspace and fix the latest policy fixes.

Miroslav Grepl • 5 years ago

4d09730

- firewalld needs to relabel own config files. BZ(#1250537)

Miroslav Grepl • 5 years ago

d8af5a7

Activate kdbus.pp

Miroslav Grepl • 5 years ago

cd118e5

Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.

Miroslav Grepl • 5 years ago

57b06e2

- Fix bogus line in logrotate.fc.

Miroslav Grepl • 5 years ago

4e49e36

Use userdom_rw_user_tmp_files() instead of userdom_rw_user_tmpfs_files() in gluster.te

Miroslav Grepl • 5 years ago

1bee2dd

- Allow glusterd to interact with gluster tools running in a user domain

Miroslav Grepl • 5 years ago

66628ce

- We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 5 years ago

8f46225

We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 5 years ago

19cd06e

See Changelog for all changes.

Miroslav Grepl • 5 years ago

5bcffd3

Update selinux-policy.spec to show how to create policy patches from https://github.com/fedora-selinux/selinux-policy

Miroslav Grepl • 5 years ago

26e9deb

commit 702978bda4b2106615a16d15ec58f80d7facd0ab

Miroslav Grepl • 5 years ago

0a3c59c

Turn on rolekit in F22

Miroslav Grepl • 5 years ago

b97a0c7

Make build working

Miroslav Grepl • 6 years ago

525ad65

- Allow systemd-networkd to be running as dhcp client.

Miroslav Grepl • 6 years ago

650be6a

- Allow du running in logwatch_t read hwdata.

Miroslav Grepl • 6 years ago

0399c8b

* Mon Aug 4 2014 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-71

Miroslav Grepl • 6 years ago

0bd1c47

- Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.

Miroslav Grepl • 6 years ago

c950f2d

- Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow user

Miroslav Grepl • 6 years ago

540429c

- Revert labeling back to /var/run/systemd/initctl/fifo

Miroslav Grepl • 6 years ago

6683373

- If I can create a socket I need to be able to set the attributes

Miroslav Grepl • 6 years ago

682896c

- Allow swift to use tcp/6200 swift port

Miroslav Grepl • 6 years ago

24862fd

Fix spec file issues

Miroslav Grepl • 6 years ago

e00cf0a

permissivedomains.pp should not be in MLS

Miroslav Grepl • 6 years ago

9c9e4dd

* Fri Jun 20 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-61

Miroslav Grepl • 6 years ago

211fb99

* Thu Jun 19 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-60

Miroslav Grepl • 6 years ago

c04c318

Clean up modules-targeted-{contrib,base}.conf from dups.

Miroslav Grepl • 6 years ago

13bbbdb

Merge user_tmp patches to base patches

Miroslav Grepl • 6 years ago

c629d27

* Tue Jun 17 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.+- Allow system_bus_types to use stream_sockets inherited

Miroslav Grepl • 6 years ago

1c0c710

- Add mozilla_plugin_use_bluejeans boolean

Miroslav Grepl • 6 years ago

a629498

- Allow staff_t to communicate and run docker

Miroslav Grepl • 6 years ago

686a380

- Add decl for cockip port

Miroslav Grepl • 6 years ago

0ddb744

- geard seems to do a lot of relabeling

Miroslav Grepl • 6 years ago

cccaf8f

Bump version

Miroslav Grepl • 6 years ago

7768984

* Tue May 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-

Miroslav Grepl • 6 years ago

dfbb9ac

- Added iotop policy. Thanks William Brown

Miroslav Grepl • 6 years ago

dbf4ab8

- More rules for gears and openshift

Miroslav Grepl • 6 years ago

6fbf460

rpms / selinux-policy

Source Code

Commits 503