File history - rpms/selinux-policy - src.fedoraproject.org

dontaudit sandbox sending signals to itself. This can happen when they are running at different mcs.

Dan Walsh • 13 years ago

3235a8b

Fix mozilla_run_plugin interface

Dan Walsh • 13 years ago

039c65f

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

596d86a

Fix fusefs handling

Dan Walsh • 13 years ago

55e9f0e

Fix version of mediawiki policy

Miroslav Grepl • 13 years ago

d4d13d2

Alllow vpnc to be able to read /root/.cert

Miroslav Grepl • 13 years ago

1369273

Add policy for mediawiki

Miroslav Grepl • 13 years ago

0def274

Start adding support for use_fusefs_home_dirs

Dan Walsh • 13 years ago

d1c6ba2

Allow unconfined_t to transition to alsa_t to make sure labels stay correct

Dan Walsh • 13 years ago

ddd1cca

Allow sudo to send signals to any domains the user could have transitioned to.

Dan Walsh • 13 years ago

b45aaab

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 13 years ago

20f707c

Allow nsplugin to sendto itself dgrams

Dan Walsh • 13 years ago

f6e966f

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 13 years ago

79bff2b

Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 13 years ago

4e6b3f6

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

fd595eb

Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home

Dan Walsh • 13 years ago

5212892

Allow haze to connect to yahoo chat and messenger port tcp:5050.

Dominick Grift • 13 years ago

e66aa74

Allow guest to run ps command on its processes by allowing it to read /proc

Dan Walsh • 13 years ago

24ea653

Allow firewallgui to sys_rawio which seems to be required to setup masqerading

Dan Walsh • 13 years ago

fb52482

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

f7307c6

Allow rpc.quota to do quotamod

Dan Walsh • 13 years ago

7cfb935

Move c2s to run in jabber_router_t domain

Miroslav Grepl • 13 years ago

df488ed

Merge branch 'base'

Dominick Grift • 13 years ago

ff9b16d

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 13 years ago

71f455a

Use permission sets where possible.

Dominick Grift • 13 years ago

7d1f564

XML summary fixes.

Dominick Grift • 13 years ago

7832131

Redundant brace nothing to expand here.

Dominick Grift • 13 years ago

a25335e

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 13 years ago

4781493

Source is x_domain and not xserver_t. Moving to x_domain local policy.

Dominick Grift • 13 years ago

e2d9aa2

The process and capability IPC goes on top of local policy.

Dominick Grift • 13 years ago

568349b

Redundant: Included userdom_user_home_content already has this.

Dominick Grift • 13 years ago

daed45f

Remove stray semi-colon.

Dominick Grift • 13 years ago

6aa632a

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

aaf8a67

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 13 years ago

8b858f2

Redundant: Included inetd_service_domain has this.

Dominick Grift • 13 years ago

ce6df09

Support network connect mysql DB.

Dominick Grift • 13 years ago

fae9473

There is already an optional policy block for daemontools. Join the two.

Dominick Grift • 13 years ago

5492a18

Consistent ordering of declarations.

Dominick Grift • 13 years ago

9444a13

Use domtrans_pattern where possible.

Dominick Grift • 13 years ago

3c4ffa3

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

1e2abee

This is no declaration. Moving to local policy.

Dominick Grift • 13 years ago

39178aa

These were duplicate TE rules.

Dominick Grift • 13 years ago

09873e5

Internal interaction goes before external interface calls.

Dominick Grift • 13 years ago

1507cc2

These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.

Dominick Grift • 13 years ago

86225e1

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

54590ac

More typos

Dan Walsh • 13 years ago

e027e93

fix typo

Dan Walsh • 13 years ago

fad6297

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

55bffb7

Allow consolehelper to read fonts and config files in user homedir

Dan Walsh • 13 years ago

7c94a3a

This is git system content.

Dominick Grift • 13 years ago

730ec51

Search parent directory to be able to interact with targets content.

Dominick Grift • 13 years ago

78ea2ab

Merge branch 'base'

Dominick Grift • 13 years ago

a5ea149

Make hal a dbus_system_domain

Dan Walsh • 13 years ago

f4dc198

Use permission sets where possible.

Dominick Grift • 13 years ago

ac5201e

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

cefe9f9

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

18f2a72

Use permission sets where possible.

Dominick Grift • 13 years ago

0f7c400

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 13 years ago

c2b2d22

The process and capability IPC goes on top of local policy.

Dominick Grift • 13 years ago

1b39dec

This permission is already allowed by included mmap_file_perms.

Dominick Grift • 13 years ago

8725d63

Source is postdrop and not local. Moving to postdrop local policy section.

Dominick Grift • 13 years ago

11ad1da

Internal interaction goes before external interface calls.

Dominick Grift • 13 years ago

a7b40a9

These are not declarations move them to local policy section.

Dominick Grift • 13 years ago

f6e8660

Redundant: All domains are allowed this access by default.

Dominick Grift • 13 years ago

9bd8847

Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.

Dominick Grift • 13 years ago

6d18557

Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)

Dominick Grift • 13 years ago

46d4106

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 13 years ago

a8fbd94

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

5d82597

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 13 years ago

6ed3f15

XML summary fixes.

Dominick Grift • 13 years ago

148e08d

Use filetrans_pattern.

Dominick Grift • 13 years ago

3a3e7db

Use stream connect pattern.

Dominick Grift • 13 years ago

44f8aa1

Redundant brace nothing to expand here.

Dominick Grift • 13 years ago

8bde5ef

Make git daemon executable file an application executable file.

Dominick Grift • 13 years ago

96d3c0d

Search parent directory to be able to interact with targets content.

Dominick Grift • 13 years ago

08c4bb0

These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.

Dominick Grift • 13 years ago

38039ab

Move calls to external interfaces below policy that governs internal interaction.

Dominick Grift • 13 years ago

02687a7

The capability IPC goes on top of the local policy.

Dominick Grift • 13 years ago

d542026

This is a duplicate declaration.

Dominick Grift • 13 years ago

b952f95

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 13 years ago

ef521e9

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

68ac47d

This is not required here.

Dominick Grift • 13 years ago

0bdd855

Youre not allowed to directly use external types.

Dominick Grift • 13 years ago

82c9715

Redundant: All deamons are already allowed this access by default.

Dominick Grift • 13 years ago

59c544a

Redundant: Included init_daemon_domain already has this.

Dominick Grift • 13 years ago

edcc8aa

Use permission sets where possible.

Dominick Grift • 13 years ago

1dfc76f

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

9a0f799

Redundant: Is already permitted by included rw_chr_file_perms.

Dominick Grift • 13 years ago

9c7f2af

Use permission sets where possible.

Dominick Grift • 13 years ago

72ba80b

Allow boinc projects to execute java

Miroslav Grepl • 13 years ago

b0a5fc3

Merge branch 'base'

Dominick Grift • 13 years ago

fc0d3d5

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

f262674

XML summary fixes.

Dominick Grift • 13 years ago

6123464

Use brace extension where possible.

Dominick Grift • 13 years ago

0eef2ca

Use permission sets where possible.

Dominick Grift • 13 years ago

69d1431

Type zarafa_server_t is not a file type.

Dominick Grift • 13 years ago

5ce19e3

This is a role capability.

Dominick Grift • 13 years ago

e130679

Redundant: Included files_search_var_lib already permits access to list generic var directories.

Dominick Grift • 13 years ago

7bc4e83

Search parent directory to be able to interact with targets content.

Dominick Grift • 13 years ago

ddbd71a

Missing required type.

Dominick Grift • 13 years ago

5a98a53

Use stream connect pattern.

Dominick Grift • 13 years ago

d696185

Allow users to ptrace and send any signal to their pyzor agent.

Dominick Grift • 13 years ago

b85c14f

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

6cd6ed3

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

2a72457

Move this to were the other is and where it should be.

Dominick Grift • 13 years ago

3507be9

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

2528a2d

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 13 years ago

b46b3ad

This is not a role capability.

Dominick Grift • 13 years ago

30bbb6a

Fixed badly chosen type of interface for some interfaces

Miroslav Grepl • 13 years ago

d15b40a

Redundant: This is already allowed by included admin_pattern for mpd_var_lib_t.

Dominick Grift • 13 years ago

6ec59cc

Redundant: This is already permitted by included manage_dirs_pattern.

Dominick Grift • 13 years ago

a053765

Added for use in admin interfaces with admin_patterns for lock types..

Dominick Grift • 13 years ago

cbd9541

These are duplicates and redundants.

Dominick Grift • 13 years ago

7a37620

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

8e3f53a

Use list instead of search in admin interfaces.

Dominick Grift • 13 years ago

61f4064

This is a role capability.

Dominick Grift • 13 years ago

55c2e0e

XML summary fixes.

Dominick Grift • 13 years ago

8ab34f0

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

624f2f4

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

8f0b746

This is not a role capability.

Dominick Grift • 13 years ago

f6bed42

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

23952de

This permission is included with mmap_file_perms.

Dominick Grift • 13 years ago

6c99405

Allow piranha domains to create their pid directory with their pid file type.

Dominick Grift • 13 years ago

3cc747a

Implement oident admin.

Dominick Grift • 13 years ago

c4786dd

Wrong type required.

Dominick Grift • 13 years ago

f9c2fa5

Use permission sets where possible.

Dominick Grift • 13 years ago

f66acfd

Redundant; unused interface plus ypbind_t is not a pid file type.

Dominick Grift • 13 years ago

db775a3

Search parent directory to be able to interact with targets content.

Dominick Grift • 13 years ago

ce87242

Onlt distro redhat currently implements admin_home_t.

Dominick Grift • 13 years ago

dc47bf2

This type is not required here.

Dominick Grift • 13 years ago

4e8c698

Missing required type.

Dominick Grift • 13 years ago

d017064

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

1976ddd

Allow users to ptrace and send any signal to their lpd agent.

Dominick Grift • 13 years ago

e8ea772

Reduntant: getattr_sock_files_pattern already permit this.

Dominick Grift • 13 years ago

c0ad94b

Reduntant: stream_connect_pattern already permits this.

Dominick Grift • 13 years ago

1c45e20

Reduntant: unused, use hal_read_state instead if possible.

Dominick Grift • 13 years ago

74d74b9

Use stream connect pattern.

Dominick Grift • 13 years ago

bece7c4

I made a mistake in 618ce85f8644651501724947b134855e9e827a74, but as it turns out this interface is not required at all.

Dominick Grift • 13 years ago

ab33cc0

Use permission sets where possible.

Dominick Grift • 13 years ago

9fa4def

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

4b1644f

XML summary fixes.

Dominick Grift • 13 years ago

3c484f5

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 13 years ago

86f9f96

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

6bb4d40

This is a role capability.

Dominick Grift • 13 years ago

25e284d

Tunable and optional policy goes below.

Dominick Grift • 13 years ago

f6bcb24

Use entry_file as entry_point to domain transition.

Dominick Grift • 13 years ago

b11ba46

Move system type alias statements to system declarations.

Dominick Grift • 13 years ago

28fdb87

Add file context specification for HOME_DIR/\.gitaliases. May not be required but cannot hurt either.

Dominick Grift • 13 years ago

b5d5518

Use can_exec.

Dominick Grift • 13 years ago

618ce85

Search parent directory to be able to interact with targets content.

Dominick Grift • 13 years ago

1e92803

This is not a role capability.

Dominick Grift • 13 years ago

89bb445

Allow users to ptrace and send any signal to their bluetooth helper agent.

Dominick Grift • 13 years ago

dd0d453

Class is supposed to be fifo_file according to summary.

Dominick Grift • 13 years ago

2d6615c

Use domtrans_pattern.

Dominick Grift • 13 years ago

eb0e0bc

Use stream connect pattern.

Dominick Grift • 13 years ago

0293695

Clean up (network) connect DB.

Dominick Grift • 13 years ago

9b26005

Boolean declarations go above.

Dominick Grift • 13 years ago

7fa5a68

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

c5eae5f

This is a leftover from refpolicy implementation of this functionality.

Dominick Grift • 13 years ago

1b1f7d0

No need for httpd_builtin_scripting to be set for httpd_t to be allowed to read files.

Dominick Grift • 13 years ago

bbdbce3

Change this functionality to our implementation of this functionality.

Dominick Grift • 13 years ago

c53b75b

Remove accedentlay added ~ files

Dan Walsh • 13 years ago

8c47ad0

Add vnstat policy

Dan Walsh • 13 years ago

0a394bf

Fixes for cluster policy

Miroslav Grepl • 13 years ago

be5142f

Merge upstream

Dan Walsh • 13 years ago

14ffaf8

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

a55bb56

This is a role capability.

Dominick Grift • 13 years ago

9c9e4c8

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

0dacd04

Requires system_r role.

Dominick Grift • 13 years ago

23ac318

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 13 years ago

2f94f46

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

2de2341

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 13 years ago

819518c

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

dcf8746

Use permission sets where possible.

Dominick Grift • 13 years ago

59c0340

Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Dominick Grift • 13 years ago

ba6db03

XML summary ffixes.

Dominick Grift • 13 years ago

b35d259

Search parent directory to be able to interact with target content.

Dominick Grift • 13 years ago

f926621

Allow users to ptrace and send any kind of signal to spamassassin agents.

Dominick Grift • 13 years ago

4ff4ddf

This type is not required here.

Dominick Grift • 13 years ago

c5caddd

This is not a role capability.

Dominick Grift • 13 years ago

b0e9aaa

Use relabel permission sets where possible.

Dominick Grift • 13 years ago

a3d20a3

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 13 years ago

9a2fd7d

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 13 years ago

50e8575

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 13 years ago

f416df7

Redundant: domtrans_pattern includes these.

Dominick Grift • 13 years ago

a87e8f7

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 13 years ago

d0b7562

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 13 years ago

5ebd1a5

Whitespace, newline and tab fixes.

Dominick Grift • 13 years ago

2d102f8

Tunable, optional, if(n)def block go below.

Dominick Grift • 13 years ago

60d27bf

Use stream_connect_pattern.

Dominick Grift • 13 years ago

2e2a24e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

4d71bc3

Use relabel permission sets where possible.

Dominick Grift • 13 years ago

83029ff

Add missing admin_patterns to rpcbind_admin.

Dominick Grift • 13 years ago

4ec4a49

Use stream connect pattern.

Dominick Grift • 13 years ago

ac13ad9

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

ad42454

Reduntant: Is already included with userdom_search_user_home_dirs.

Dominick Grift • 13 years ago

87cd6ee

Access to get attributes of target pppd_t domain is included with ps_process_pattern.

Dominick Grift • 13 years ago

4eaffd2

Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.

Dominick Grift • 13 years ago

39e118b

Allow pads_admin to search parent directories to be able to interact with pads content.

Dominick Grift • 13 years ago

1215dfb

XML summary fix.

Dominick Grift • 13 years ago

d183137

Access to get attributes of target accountsd_t domain is included with ps_process_pattern.

Dominick Grift • 13 years ago

dcbbeea

Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.

Dominick Grift • 13 years ago

b6d0a79

Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.

Dominick Grift • 13 years ago

eb12bc3

Use the stream_connect_pattern.

Dominick Grift • 13 years ago

f386b90

Allow mpd_admin to manage mpd tmpfs content.

Dominick Grift • 13 years ago

c5e7db7

Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.

Dominick Grift • 13 years ago

0ba923e

Redundant: mpd_search_lib already includes files_search_var_lib.

Dominick Grift • 13 years ago

0ab4152

Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.

Dominick Grift • 13 years ago

7d34935

Allow icecast_admin to ptrace and signal the icecast_t domain.

Dominick Grift • 13 years ago

aa5baa9

This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.

Dominick Grift • 13 years ago

4b81a55

Permission to search proc_t directories is required to be able to read abrt state.

Dominick Grift • 13 years ago

7d36c9f

Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.

Dominick Grift • 13 years ago

b36824e

Replace some type statements by comma delimiters.

Dominick Grift • 13 years ago

cf152b4

Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.

Dominick Grift • 13 years ago

47cf98d

Type system_cronjob_var_run_t is not required here.

Dominick Grift • 13 years ago

5ecaaca

Types crontab_exec_t, cron_spool_t and user_cron_spool_t are required here.

Dominick Grift • 13 years ago

beb9c35

Permission to search generic pid directories is included with files_pid_filetrans.

Dominick Grift • 13 years ago

d8d33a1

Use ps_process_pattern to read state. Permission to seach proc_t directories is required to read automount state.

Dominick Grift • 13 years ago

0540e22

Type xenstored_var_run_t is required here.

Dominick Grift • 13 years ago

cb76ff4

Type print_spool_t is not required here.

Dominick Grift • 13 years ago

8c0a06a

Add the ability to send audit messages to confined admin policies

Dan Walsh • 13 years ago

9461b60

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 13 years ago

3b0a9c7

Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710

Chris PeBenito • 13 years ago

fee4864

radvd patch from Dan Walsh

Jeremy Solt • 13 years ago

792d448

snort patch from Dan Walsh

Jeremy Solt • 13 years ago

dc7cc4d

stunnel patch from Dan Walsh

Jeremy Solt • 13 years ago

c20842c

zabbix patch from Dan Walsh

Jeremy Solt • 13 years ago

622c63b

zebra patch from Dan Walsh

Jeremy Solt • 13 years ago

bf40792

awstats patch from Dan Walsh

Jeremy Solt • 13 years ago

4f95198

certmaster patch from Dan Walsh

Jeremy Solt • 13 years ago

e9bf16d

pcscd patch from Dan Walsh

Jeremy Solt • 13 years ago

dc1db54

postgresql patch from Dan Walsh

Jeremy Solt • 13 years ago

17759c7

postgrey patch from Dan Walsh

Jeremy Solt • 13 years ago

cf87233

prelude patch from Dan Walsh

Jeremy Solt • 13 years ago

a59e50c

certwatch patch from Dan Walsh

Jeremy Solt • 13 years ago

f3c5e77

firstboot patch from Dan Walsh

Jeremy Solt • 13 years ago

5afc3d3

smoltclient patch from Dan Walsh

Jeremy Solt • 13 years ago

689d954

amavis patch from Dan Walsh

Jeremy Solt • 13 years ago

b8097d6

arpwatch patch from Dan Walsh

Jeremy Solt • 13 years ago

5b082e4

canna patch from Dan Walsh

Jeremy Solt • 13 years ago

b0d8d59

certmonger patch from Dan Walsh

Jeremy Solt • 13 years ago

c6c63f6

courier patch from Dan Walsh

Jeremy Solt • 13 years ago

483be01

dcc patch from Dan Walsh

Jeremy Solt • 13 years ago

67effb0

style change to djbdns.te

Jeremy Solt • 13 years ago

a831710

fetchmail patch from Dan Walsh

Jeremy Solt • 13 years ago

c4fbfae

icecast patch from Dan Walsh

Jeremy Solt • 13 years ago

01c4413

nslcd patch from Dan Walsh

Jeremy Solt • 13 years ago

2a2b6a7

nut patch from Dan Walsh

Jeremy Solt • 13 years ago

5271920

openct patch from Dan Walsh

Jeremy Solt • 13 years ago

c17ad38

Unconditional staff and user oidentd home config access from Dominick Grift.

Chris PeBenito • 13 years ago

25d796e

Access for confined users to oidentd user home content is unconditional.

Dominick Grift • 13 years ago

941e3db

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

6dfe56b

add labeling for /root/.debug

Dan Walsh • 13 years ago

43a0339

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 13 years ago

d7f2020

Fixes for vmware-host policy

Miroslav Grepl • 13 years ago

323c9f1

Allow a couple of sandbox issues.

Dan Walsh • 13 years ago

c2dae98

Add labels for /lib/readahead.

Dan Walsh • 13 years ago

4251ae1

Fix gnome_setattr_config_home

Dan Walsh • 13 years ago

5ef740e

Fix some names in passenger policy

Dan Walsh • 13 years ago

3034a8d

Move passenger policy to services

Miroslav Grepl • 13 years ago

94820e4

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

536f28a

Fix boolean descriptions

Dan Walsh • 13 years ago

1a40cbf

Allow dovecot-deliver to create tmp files

Miroslav Grepl • 13 years ago

3a32126

- Add passenger policy

Miroslav Grepl • 13 years ago

d7de04f

Fix cert calls in telepath, boinc, kerberos

Dan Walsh • 13 years ago

366396d

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

cab9bc9

rename mdadm_map_t to mdadm_var_run_t

Dan Walsh • 13 years ago

d7544f0

More fixes for mozilla_plugin_t

Dan Walsh • 13 years ago

0b8f4cf

Module version bumps for cert patch.

Chris PeBenito • 13 years ago

da12b54

Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.

Chris PeBenito • 13 years ago

e9d6dfb

Implement miscfiles_cert_type().

Dominick Grift • 13 years ago

8340621

Allow hugetlbfs_t to be on device_t file system

Dan Walsh • 13 years ago

1a82786

Module version bump for 8296eb2.

Chris PeBenito • 13 years ago

8fbea56

raid tools now store pid file and sock_file in /dev/md for early boot.

Dan Walsh • 13 years ago

e81afdf

fixes for openvpn suggested by dgrift

Dan Walsh • 13 years ago

8e47c02

Allow mozilla_plugin to create nsplugin_home_t directories

Dan Walsh • 13 years ago

da07333

Remove unallocated tty access in amanda since it was originally there for the old targeted policy, and now all roles have a user tty type.

Chris PeBenito • 13 years ago

9c2c774

Clean up Anaconda policy.

Dominick Grift • 13 years ago

36c6e47

Clean up Amtu module.

Dominick Grift • 13 years ago

e021463

Clean up Amanda module.

Dominick Grift • 13 years ago

8296eb2

add policy for ajaxterm

Dan Walsh • 13 years ago

5f5963b

add policy for ajaxterm

Dan Walsh • 13 years ago

4c38170

allow sudo to create sudo_db_t dirs

Dan Walsh • 13 years ago

d46a2b0

Allow crond to manage user_spool_cron_t link files

Dan Walsh • 13 years ago

ee4b1e0

Allow sudo domains to manage /var/db/sudo

Dan Walsh • 13 years ago

b36c20b

Allow virt_domains to exec qumu_exec_t, add boolean to allow svirt_t to connect to x

Dan Walsh • 13 years ago

a75a591

Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t

Dan Walsh • 13 years ago

dfe675b

Cleanup warnings

Dan Walsh • 13 years ago

5dd0c28

add sametime port definition

Dan Walsh • 13 years ago

4432db4

Fix apache interface

Dan Walsh • 13 years ago

689bfef

fix bad patch in xserver

Dan Walsh • 13 years ago

f79af26

Fix gnome interface definitions

Dan Walsh • 13 years ago

aa760a2

add sametime port definition

Dan Walsh • 13 years ago

e51122d

fix typo in xserver_stream_connect

Dan Walsh • 13 years ago

0745e42

cleanup alsa patch to match upstream

Dan Walsh • 13 years ago

36d83cb

Eliminate extras alsa_read_home interface

Dan Walsh • 13 years ago

4192c80

Any app that executes service command will not do a getattr of all mounted file systems

Dan Walsh • 13 years ago

8187343

Allow apps that use pam to connect to init_t

Dan Walsh • 13 years ago

c16ffd1

Fix pootle

Dan Walsh • 13 years ago

db87998

Allow iptables to read shorewall tmp files

Dan Walsh • 13 years ago

f5b49a5

Merge with upsteam

Dan Walsh • 13 years ago

f00ba23

Merge branches 'master', 'master' and 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

cdda8fe

Allow gpg_pinentry_t to use fifo files of apps that transition to gpg_agent

Dan Walsh • 13 years ago

ef98a37

Module version bumps for b7ceb34 5675107 e411968 eca7eb3.

Chris PeBenito • 13 years ago

28d96f0

Rearrange alsa interfaces.

Chris PeBenito • 13 years ago

eca7eb3

Implement alsa_home_t for asoundrc. Clean up Alsa module.

Dominick Grift • 13 years ago

e411968

Libcgroup moved the cgroup directory to /sys/fs/cgroup.

Dominick Grift • 13 years ago

5675107

Do not try to relabel the contents of the /dev/shm directory.

Dominick Grift • 13 years ago

b7ceb34

Fix mmap_zero patch

Dan Walsh • 13 years ago

b631f26

Allow certmaster to read usr_t files. All python apps are going to need this.

Dan Walsh • 13 years ago

a668127

cleanup mmap_low merge with upstream

Dan Walsh • 13 years ago

3a2e888

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

cbadf72

define /sys/fs/cgroup as a <<none>> file system

Dan Walsh • 13 years ago

02fb4a0

Module version bump and changelog entry for conditional mmap_zero patch.

Chris PeBenito • 13 years ago

785ee79

Fix mmap_zero assertion violation in xserver.

Chris PeBenito • 13 years ago

a1b4205

Allow all X apps to use direct dri if user_direct_dri boolean is turned on

Dan Walsh • 13 years ago

09686dc

firstboot is leaking a netlink_route socket into iptables. We need to dontaudit

Dan Walsh • 13 years ago

0352752

1/1] Make the ability to mmap zero conditional where this is fapplicable.

Dominick Grift • 13 years ago

623e4f0

Fix sandbox tcp_socket calls to create_stream_socket_perms

Dan Walsh • 13 years ago

c6fa935

Allow qmail to use uucpd

Dan Walsh • 13 years ago

4fccad9

Add Miroslav Grepl patch for jabberd, adding new type for jabberd router.

Dan Walsh • 13 years ago

5fb4db5

Allow prelink to read dbus config/Broken

Dan Walsh • 13 years ago

3fdb12d

Apply Dominick Grift typo fixes

Dan Walsh • 13 years ago

5537e55

Allow hald to transition to netutils

Dan Walsh • 13 years ago

079779a

merge latest upstream

Dan Walsh • 13 years ago

898c0de

Dontaudit signals from sandbox domains to domains that transition to them

Dan Walsh • 13 years ago

ddcd5d6

Dontaudit socket leaks when running semanage code

Dan Walsh • 13 years ago

8c8a10f

Fix spelling mistake

Dan Walsh • 13 years ago

73f7d4f

More fixes

Dan Walsh • 13 years ago

c71f02c

Policy fixes

Dan Walsh • 13 years ago

2d4a79a

More fixes

Dan Walsh • 13 years ago

ac498fa

Latest fixes

Dan Walsh • 13 years ago

08e567d

Update f14

Dan Walsh • 13 years ago

9561b0a

Fixes for f14

Dan Walsh • 13 years ago

4765a59

ditto

Dan Walsh • 13 years ago

46c24a3

whoya

Dan Walsh • 13 years ago

aae38f0

Update f14

Dan Walsh • 13 years ago

2968e06

Fix policy

Dan Walsh • 13 years ago

18549c2

reset

Dan Walsh • 13 years ago

507000a

Modified amanda

Dan Walsh • 13 years ago

8f4ec14

Reset base

Dan Walsh • 13 years ago

09154bd

Modify amanda

Dan Walsh • 13 years ago

e15d0e7

F14

Dan Walsh • 13 years ago

0aa4ecc

F14

Dan Walsh • 13 years ago

f9c5576

F14

Dan Walsh • 13 years ago

e5e9b7b

Rebase constraints

Dan Walsh • 13 years ago

a61cba6

Go with upstream

Dan Walsh • 13 years ago

9afb2b1

Update f14

Dan Walsh • 13 years ago

a947daf

Latest f14

Dan Walsh • 13 years ago

83eff06

UPdate for f14 policy

Dan Walsh • 13 years ago

3eaa993

Module version bumps and changelog for devtmpfs patchset.

Chris PeBenito • 13 years ago

76a9fe9

Trivial tweaks to devtmpfs patches.

Chris PeBenito • 13 years ago

0d24805

Early devtmpfs access

Jeremy Solt • 13 years ago

2fc79f1

Move devtmpfs to devices from filesystem

Jeremy Solt • 13 years ago

d6e1ef2

Dbadm updates from KaiGai Kohei.

Chris PeBenito • 13 years ago

c62f1be

Part of gnome patch from Dan Walsh.

Chris PeBenito • 13 years ago

ab8f919

Additional kdumpgui cleanup.

Chris PeBenito • 13 years ago

a9539a0

Policy for system-config-kdump gui from Dan Walsh

Jeremy Solt • 13 years ago

46fc0d3

system-config-samba dbus service policy from Dan Walsh

Jeremy Solt • 13 years ago

68e615e

roles patch from Dan Walsh to move unwanted interface calls into a ifndef

Jeremy Solt • 13 years ago

c87e150

Remove unnecessary require on cgroup_admin().

Chris PeBenito • 13 years ago

00ca404

Whitespace fixes on cgroup.

Chris PeBenito • 13 years ago

d687db9

Confine /sbin/cgclear.

Dominick Grift • 13 years ago

61d7ee5

System layer xml fixes.

Dominick Grift • 13 years ago

a0546c9

Services layer xml files.

Dominick Grift • 13 years ago

288845a

Fix corecmd_dontaudit_exec_all_executables doc.

Chris PeBenito • 13 years ago

97b990f

Kernel layer xml fixes.

Dominick Grift • 13 years ago

705f70f

Fix usermanage_kill_passwd() parameter doc.

Chris PeBenito • 13 years ago

19ff039

Admin layer xml fixes.

Dominick Grift • 13 years ago

77e4b55

apps: domain { allowed to transition, allowed access, to not audit }.

Dominick Grift • 13 years ago

03b8666

Accountsd cleanup.

Chris PeBenito • 13 years ago

8da8897

Move accountsd to services.

Chris PeBenito • 13 years ago

d0eebed

accountsd policy from Dan Walsh

Jeremy Solt • 13 years ago

c4834a0

Docs standardizing on the role portion of run interfaces. Additional docs cleanup.

Chris PeBenito • 13 years ago

a7ee7f8

MojoMojo from Lain Arnell.

Chris PeBenito • 13 years ago

9d4395a

Interface documentation standardization patch from Dan Walsh.

Chris PeBenito • 13 years ago

a72e42f

Virtio disk file context update from Mika Pfluger.

Chris PeBenito • 13 years ago

27eeb64

Take virtio disks into account.

Mika Pflüger • 13 years ago

b3f7203

Module version bump for 5563d4c.

Chris PeBenito • 13 years ago

64ef2df

Removing seutil_domtrans_setsebool from anaconda patch - it doesn't exist

Jeremy Solt • 13 years ago

5563d4c

anaconda patch from Dan Walsh

Jeremy Solt • 13 years ago

b0a6f1b

Increase bindreservport range to 512-1024 in corenetwork, from Dan Walsh.

Chris PeBenito • 13 years ago

21fdee9

Fix JIT usage for freshclam.

Chris PeBenito • 13 years ago

29f3bfa

Remove some redundant attributes from user_home_t.

Dominick Grift • 13 years ago

48c3c37

Module version bump for fa1847f.

Chris PeBenito • 13 years ago

4b76ea5

Add files_poly_member() to userdom_user_home_content() Remove redundant files_poly_member() calls.

Dominick Grift • 13 years ago

fa1847f

Add missing ubac constraints on pulseaudio.

Chris PeBenito • 13 years ago

f7ffe6c

Remove old rbacsep role statements.

Chris PeBenito • 13 years ago

c14aebd

VMWare patch from Dan Walsh.

Chris PeBenito • 13 years ago

072857c

Whitespace fix in userhelper.

Chris PeBenito • 13 years ago

f1618ff

RPM patch from Dan Walsh.

Chris PeBenito • 13 years ago

b70dfcd

Whitespace fixes in RPM.

Chris PeBenito • 13 years ago

2d839c6

Add shutdown from Dan Walsh.

Chris PeBenito • 13 years ago

7e265a8

Add livecd from Dan Walsh.

Chris PeBenito • 13 years ago

b841dff

Remove ethereal module since the application was renamed to wireshark due to trademark issues.

Chris PeBenito • 13 years ago

08690c8

Make spamassassin optional for milter, from Russell Coker.

Chris PeBenito • 13 years ago

3c4e9fc

Remove duplicate/redundant rules, from Russell Coker.

Chris PeBenito • 13 years ago

bca0cdb

Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role().

Chris PeBenito • 13 years ago

1db1836

GPG patch from Dan Walsh.

Chris PeBenito • 13 years ago

a3b0dc5

Usermanage patch from Dan Walsh.

Chris PeBenito • 13 years ago

3bcfe5b

Guest patch from Dan Walsh.

Chris PeBenito • 13 years ago

cad4224

Module version bump for a7521af.

Chris PeBenito • 13 years ago

ab62f3f

firstboot patch from Dan Walsh

Jeremy Solt • 13 years ago

a7521af

fix cgroup_admin

Dominick Grift • 13 years ago

7e5463b

Module version bump for 5f04c91.

Chris PeBenito • 14 years ago

caf1666

gitosis patch from Dan Walsh

Jeremy Solt • 14 years ago

5f04c91

Module version bump for b5d89d0.

Chris PeBenito • 14 years ago

ab4f820

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

b5d89d0

Create_lnk_perms fix from Russell Coker.

Chris PeBenito • 14 years ago

155635e

Minor tweaks and module version bump for a00fc1c.

Chris PeBenito • 14 years ago

113d2e0

hddtemp fixes.

Dominick Grift • 14 years ago

a00fc1c

WM patch from Dan Walsh.

Chris PeBenito • 14 years ago

0cec649

Rearrage interfaces in filesystem.

Chris PeBenito • 14 years ago

3c79f95

Slocate patch from Dan Walsh.

Chris PeBenito • 14 years ago

eab2cc8

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

2c207df

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fd3a80

Podsleuth patch from Dan Walsh.

Chris PeBenito • 14 years ago

1ff703f

Mplayer patch from Dominick Grift through Dan Walsh.

Chris PeBenito • 14 years ago

8a24097

Mozilla patch from Dan Walsh.

Chris PeBenito • 14 years ago

3c1e8ff

Cpufreqselector patch from Dan Walsh.

Chris PeBenito • 14 years ago

ae1b7de

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

a99f69f

Vbetool patch from Dan Walsh.

Chris PeBenito • 14 years ago

e08ac5a

Sudo patch from Dan Walsh.

Chris PeBenito • 14 years ago

3835c39

Su patch from Dan Walsh.

Chris PeBenito • 14 years ago

f7e3410

Shorewall patch from Dan Walsh.

Chris PeBenito • 14 years ago

b9be5cc

Quota patch from Dan Walsh.

Chris PeBenito • 14 years ago

5116faa

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

a9ef84b

Netutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

9a4d292

Kismet patch from Dan Walsh.

Chris PeBenito • 14 years ago

10c0104

Mcelog patch from Dan Walsh.

Chris PeBenito • 14 years ago

e89f04f

Consoletype patch from Dan Walsh.

Chris PeBenito • 14 years ago

0e30bca

Alsa patch from Dan Walsh

Chris PeBenito • 14 years ago

88a574d

Acct patch from Dan Walsh.

Chris PeBenito • 14 years ago

4db7790

Whitespace change: drop unnecessary blank line at the start of .te files.

Chris PeBenito • 14 years ago

48f99a8

AFS patch from Dan Walsh.

Chris PeBenito • 14 years ago

5c942ce

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

b521229

Files patch from Dan Walsh.

Chris PeBenito • 14 years ago

48e0aa8

Terminal patch from Dan Walsh.

Chris PeBenito • 14 years ago

135b1b4

Module version bump for cgroup patchset.

Chris PeBenito • 14 years ago

c54e7d6

Clean up cgroup. Rename cgconfigparser to cgconfig.

Chris PeBenito • 14 years ago

53f9abb

Remove cgroup_t usage in cgroup_admin() since it is not owned by the module.

Chris PeBenito • 14 years ago

0041a78

Rearrange cgroup interfaces in filesystem.

Chris PeBenito • 14 years ago

860c05d

Whitespace fixes in cgroup and init.

Chris PeBenito • 14 years ago

04dcd73

How users interact with cgroup.

Dominick Grift • 14 years ago

e2b9add

How libgroup init scripts interact with libcgroup.

Dominick Grift • 14 years ago

73f0985

add libcg policy.

Dominick Grift • 14 years ago

ddf8213

cgroup in filesystem.

Dominick Grift • 14 years ago

c0c635b

Kernel patch from Dan Walsh.

Chris PeBenito • 14 years ago

60f04fc

Devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb7cadd

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

46c0e57

Storage patch from Dan Walsh.

Chris PeBenito • 14 years ago

8f0de5d

Fix duplicate lines in kudzu.

Chris PeBenito • 14 years ago

2a29628

Bump module versions for release.

Chris PeBenito • 14 years ago

29af4c1

Fix deprecated interface usage in rhel4 block in su.if.

Chris PeBenito • 14 years ago

91cbcc6

Module version bump for 904f3d8.

Chris PeBenito • 14 years ago

3d95ca2

Module version bump for 1184392 and more.

Chris PeBenito • 14 years ago

7934ac1

Module version bump for 7942f7f.

Chris PeBenito • 14 years ago

ca28376

Module version bump for 383bd32.

Chris PeBenito • 14 years ago

bdf5e19

Module version bump for 9e28f74.

Chris PeBenito • 14 years ago

213d35a

Module version bump for f61ef24.

Chris PeBenito • 14 years ago

63583f4

Module version bump for d5170e5.

Chris PeBenito • 14 years ago

c789f82

Module version bump for cb1df6a.

Chris PeBenito • 14 years ago

d53a972

readahead patch from Dan Walsh

Jeremy Solt • 14 years ago

d8642ca

Fix deprecated interface usage that crept into lvm.if.

Chris PeBenito • 14 years ago

fe74f71

Move line in logrotate; module version bump.

Chris PeBenito • 14 years ago

ff1cae1

Remove redundant optional and libs_* calls in clogd.

Chris PeBenito • 14 years ago

a107f87

Module version bump for 51ad76f.

Chris PeBenito • 14 years ago

dcb7227

whitespace fix for clogd

Jeremy Solt • 14 years ago

6430c79

clogd policy from Dan Walsh

Jeremy Solt • 14 years ago

6055ab8

whitespace fixes for cluster suite patch

Jeremy Solt • 14 years ago

7a8e6a8

Removed unnecessary comments

Jeremy Solt • 14 years ago

21d23c8

Redhat Cluster Suite Policy from Dan Walsh

Jeremy Solt • 14 years ago

538cf9a

logrotate patch from Dan Walsh

Jeremy Solt • 14 years ago

b8c9879

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

fdc0d0f

dnsmasq patch from Dan Walsh

Jeremy Solt • 14 years ago

37194ac

Replace apache_delete_cache with apache_delete_cache_files in tmpreaper.te

Jeremy Solt • 14 years ago

2483d7a

tmpreaper patch from Dan Walsh

Jeremy Solt • 14 years ago

8daddcf

Remove call to nagios_rw_inherited_tmp_files

Jeremy Solt • 14 years ago

7605d27

netutils patch from Dan Walsh

Jeremy Solt • 14 years ago

44dc1b9

Remove nagios_rw_inherited_tmp_files interface

Jeremy Solt • 14 years ago

4ac0cd3

Nagios patch from Dan Walsh

Jeremy Solt • 14 years ago

99bbe34

Create type and allow squid to manage its own tmpfs files

Jeremy Solt • 14 years ago

599e8ff

squid patch from Dan Walsh

Jeremy Solt • 14 years ago

d86c098

remove rules for nx_server_home_ssh_t since they are already provided by the ssh template

Jeremy Solt • 14 years ago

fb543d0

nx patch from Dan Walsh

Jeremy Solt • 14 years ago

316cdb1

Postfix patch from Dan Walsh.

Chris PeBenito • 14 years ago

d9e4cbd

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

9fe1b54

Sendmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

9ea85ea

Procmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

b276e36

MTA patch from Dan Walsh.

Chris PeBenito • 14 years ago

e19b8d1

SSH patch from Dan Walsh.

Chris PeBenito • 14 years ago

088b65e

Cups patch from Dan Walsh.

Chris PeBenito • 14 years ago

4e698b0

Remove excessive permission in udev_manage_rules_files() and move the interface up in the .if file. Module version bump for d56b33a.

Chris PeBenito • 14 years ago

e2c9450

Create new interface and type for managing /etc/udev/rules.d

Chris Richards • 14 years ago

d56b33a

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

1b2f08e

Plymouthd policy from Dan Walsh.

Chris PeBenito • 14 years ago

e9e43f0

Hal patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0c2cae

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

2e4e39d

Java patch from Dan Walsh.

Chris PeBenito • 14 years ago

84940a0

CVS patch from Dan Walsh.

Chris PeBenito • 14 years ago

299db70

SETroubleshoot patch from Dan Walsh.

Chris PeBenito • 14 years ago

bcc6e65

Asterisk patch from Dan Walsh.

Chris PeBenito • 14 years ago

ada61e1

Munin patch from Dan Walsh.

Chris PeBenito • 14 years ago

24e0b9b

RPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

1607040

Minor fixes on a2524cf. Module version bump.

Chris PeBenito • 14 years ago

27afb97

Whitespace fixes on cobbler.

Chris PeBenito • 14 years ago

aeb7a4e

cobbler patch from Dan Walsh

Jeremy Solt • 14 years ago

a2524cf

Cyrus patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb3fc9e

Clamav patch from Dan Walsh.

Chris PeBenito • 14 years ago

4804cd4

Dovecot patch from Dan Walsh.

Chris PeBenito • 14 years ago

d8eb3c7

Networkmanager patch from Dan Walsh.

Chris PeBenito • 14 years ago

baea7b1

Add kernel access to devtmpfs. Also add workround while devtmpfs is tmpfs_t instead of device_t.

Chris PeBenito • 14 years ago

03a6e03

Consolekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

a3108c6

Arpwatch patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0076a1

Dbus patch from Dan Walsh.

Chris PeBenito • 14 years ago

98ac986

Devicekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

61738f1

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

857d37e

Add trusted object condition to unix socket connectto/sendto, to fix label translation.

Chris PeBenito • 14 years ago

3b72786

Add networking rules for spamd to connect to mysql/postgresql over the network, from Chris St. Pierre.

Chris PeBenito • 14 years ago

87a9469

Add missing secmark rules in ntop, from Dominick Grift.

Chris PeBenito • 14 years ago

45696ab

FTP patch from Dan Walsh.

Chris PeBenito • 14 years ago

a53c6c6

Module version bump for 34838aa.

Chris PeBenito • 14 years ago

d7ebbd9

Samba patch from Dan Walsh

Jeremy Solt • 14 years ago

34838aa

bootmisc init script, 2nd try

Chris Richards • 14 years ago

9b3e798

Lircd patch from Dan Walsh.

Chris PeBenito • 14 years ago

05a2e3e

Add DenyHosts from Dan Walsh.

Chris PeBenito • 14 years ago

e07fbc0

Djbdns patch from Dan Walsh.

Chris PeBenito • 14 years ago

44b3808

Module version bump and extra comments for 194d61f.

Chris PeBenito • 14 years ago

4a8bd01

modutils patch for update-modules

Chris Richards • 14 years ago

194d61f

Module version bump for 8c38fba.

Chris PeBenito • 14 years ago

78352db

allow syslog-ng to setrlimit

Chris Richards • 14 years ago

8c38fba

Module version bump for 4b121a5.

Chris PeBenito • 14 years ago

5c3274d

Additional whitespace fix in nis.

Chris PeBenito • 14 years ago

4687992

Style changes

Jeremy Solt • 14 years ago

f49fc19

nis patch from Dan Walsh

Jeremy Solt • 14 years ago

4b121a5

Additional whitespace fixes in certmonger.

Chris PeBenito • 14 years ago

da59404

Fix some whitespace and style issues.

Jeremy Solt • 14 years ago

0e5494a

certmonger policy from Dan Walsh

Jeremy Solt • 14 years ago

33793ec

Module version bump for 4f7b413.

Chris PeBenito • 14 years ago

86ff008

Remove excess white space from ntop.te

Jeremy Solt • 14 years ago

e6e2a76

Ntop policy from Dan Walsh

Jeremy Solt • 14 years ago

4f7b413

Module version bump for 46e16a2.

Chris PeBenito • 14 years ago

9875971

Move optional policy to correct location for style

Jeremy Solt • 14 years ago

d86d4f6

kerberos patch from Dan Walsh

Jeremy Solt • 14 years ago

01bfe1d

Use port range notation in corenetwork where it makes sense.

Chris PeBenito • 14 years ago

46e16a2

Clean up output of generated corenetwork.te.

Chris PeBenito • 14 years ago

3829eec

Fix network_port() in corenetwork to correctly handle port ranges.

Chris PeBenito • 14 years ago

85e71c8

[BUGFIX] lack of type transition on dbadm domain (Re: dbadm.pp is not available in selinux-policy package)

KaiGai Kohei • 14 years ago

ec8d32c

Module version bump for 5d3214f and 795b733.

Chris PeBenito • 14 years ago

23ad802

pcscd patch from Dan Walsh: manage pub files and fifo files

Jeremy Solt • 14 years ago

795b733

gpsd path from Dan Walsh

Jeremy Solt • 14 years ago

5d3214f

Add devtmpfs labeling.

Chris PeBenito • 14 years ago

e399e3a

Move kernel_request_load_module(gssd_t) to the proper place.

Dominick Grift • 14 years ago

91b12ad

Fix requires for apache tmp interfaces.

Dominick Grift • 14 years ago

6d9925c

Portreserve patch from Dan Walsh.

Chris PeBenito • 14 years ago

b577852

PPP patch from Dan Walsh.

Chris PeBenito • 14 years ago

38db49c

Rpc patch from Dan Walsh.

Chris PeBenito • 14 years ago

372acd0

Whitespace fixes on Apache.

Chris PeBenito • 14 years ago

20fa703

Module version bump for 170a46d, f8b3b7f, and a49a82c.

Chris PeBenito • 14 years ago

da0608b

Tweak for 170a46d.

Chris PeBenito • 14 years ago

b7d3db1

snort patch from Dan Walsh

Jeremy Solt • 14 years ago

a49a82c

Nut policy from Dan Walsh

Jeremy Solt • 14 years ago

f8b3b7f

memcached patch from Dan Walsh

Jeremy Solt • 14 years ago

170a46d

Second part of Apache patch from Dan Walsh.

Chris PeBenito • 14 years ago

60def66

First part of apache patch from Dan Walsh: file context changes, including renaming script ro/ra/rw files.

Chris PeBenito • 14 years ago

83caba3

Tor patch from Dan Walsh.

Chris PeBenito • 14 years ago

25d81d2

Sssd patch from Dan Walsh.

Chris PeBenito • 14 years ago

2b93b88

Add usbmuxd from Dan Walsh.

Chris PeBenito • 14 years ago

ee2d2dd

Vhostmd from Dan Walsh.

Chris PeBenito • 14 years ago

6d4dbd2

Module version bumps for c586c1b, dcbb332, 4c05dff, 84ce9c3, 2b012ba, and 1868383.

Chris PeBenito • 14 years ago

bf54d5b

Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c.

Chris PeBenito • 14 years ago

ad0071b

Smokeping policy from Dan Walsh

Jeremy Solt • 14 years ago

f3c346c

pulseaudio patch from Dan Walsh

Jeremy Solt • 14 years ago

1868383

ksmtuned policy from Dan Walsh

Jeremy Solt • 14 years ago

d279dd6

Prelude patch from Dan Walsh

Jeremy Solt • 14 years ago

2b012ba

Bluetooth patch (sys_admin and debugfs) from Dan Walsh

Jeremy Solt • 14 years ago

84ce9c3

avahi patch from Dan Walsh

Jeremy Solt • 14 years ago

4c05dff

chronyd patch from Dan Walsh

Jeremy Solt • 14 years ago

dcbb332

Give dcc setgid from Dan Walsh

Jeremy Solt • 14 years ago

c586c1b

Module version bump for c37d843.

Chris PeBenito • 14 years ago

7656af7

Minor bind XML tweaks.

Chris PeBenito • 14 years ago

be83112

bind patch from Dan Walsh

Jeremy Solt • 14 years ago

c37d843

Radvd patch from Dan Walsh.

Chris PeBenito • 14 years ago

390b8a8

Rdisc patch from Dan Walsh.

Chris PeBenito • 14 years ago

1b22152

Module version bump for 1d348bd.

Chris PeBenito • 14 years ago

6c40309

Afs needs sys_admin, sends signals, and resolves hostnames from Dan Walsh

Jeremy Solt • 14 years ago

1d348bd

Module version bump for 75c8a69.

Chris PeBenito • 14 years ago

df29613

gitosis read/manage lib interfaces from Dan Walsh

Jeremy Solt • 14 years ago

75c8a69

Sasl patch from Dan Walsh.

Chris PeBenito • 14 years ago

cf7eb08

Snmp patch from Dan Walsh.

Chris PeBenito • 14 years ago

449d206

Sysstat patch from Dan Walsh.

Chris PeBenito • 14 years ago

08d7c73

Telnet patch from Dan Walsh.

Chris PeBenito • 14 years ago

98ac3f5

Tuned patch from Dan Walsh.

Chris PeBenito • 14 years ago

461b53e

Virt patch from Dan Walsh.

Chris PeBenito • 14 years ago

7630200

Rename rtkit_schedule() to rtkit_scheduled().

Chris PeBenito • 14 years ago

064d1b4

Module version bump for ac19f1a.

Chris PeBenito • 14 years ago

e13a9ef

Module version bump for 9681df1.

Chris PeBenito • 14 years ago

c7a4cf3

Module version bump for d3b5907.

Chris PeBenito • 14 years ago

32103f2

Minor tweaks on icecast.

Chris PeBenito • 14 years ago

340af11

icecast policy from Dan Walsh

Jeremy Solt • 14 years ago

584dfac

rtkit patch from Dan Walsh:

Jeremy Solt • 14 years ago

ac19f1a

postgresql patch from Dan Walsh:

Jeremy Solt • 14 years ago

9681df1

openvpn needs ipc_lock capability, connects to http ports,

Jeremy Solt • 14 years ago

d3b5907

Tftp patch from Dan Walsh.

Chris PeBenito • 14 years ago

47293bd

Uucp patch from Dan Walsh.

Chris PeBenito • 14 years ago

788ba75

Zebra patch from Dan Walsh.

Chris PeBenito • 14 years ago

bed0a44

Libraries patch from Dan Walsh.

Chris PeBenito • 14 years ago

bc31d12

Xen patch from Dan Walsh.

Chris PeBenito • 14 years ago

0d86ea1

Getty patch from Dan Walsh.

Chris PeBenito • 14 years ago

b60df9f

Sysnetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fa92b8

Init patch from Dan Walsh.

Chris PeBenito • 14 years ago

ddd786e

Authlogin patch from Dan Walsh.

Chris PeBenito • 14 years ago

153ed87

Iptables patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fbcd77

Udev patch from Dan Walsh.

Chris PeBenito • 14 years ago

a124c0a

Logging patch from Dan Walsh.

Chris PeBenito • 14 years ago

7a8807b

Ipsec patch from Dan Walsh.

Chris PeBenito • 14 years ago

90e65fe

Modutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

d13c675

Kernel patch from Dan Walsh.

Chris PeBenito • 14 years ago

0417386

Domain patch from Dan Walsh.

Chris PeBenito • 14 years ago

1f6d975

Module version bump for 6a03548.

Chris PeBenito • 14 years ago

7b50b70

amavis uses uptime which reads utmp, and reads certs - from Dan Walsh

Jeremy Solt • 14 years ago

6a03548

Style fixes and module version bumps for 38fc1bd.

Chris PeBenito • 14 years ago

827060c

Likewise policy.

Dominick Grift • 14 years ago

38fc1bd

Module version bump for 414a570.

Chris PeBenito • 14 years ago

2a62db7

fetchmail executes programs in bin (uname), from Dan Walsh

Jeremy Solt • 14 years ago

414a570

Add additional documentation to kernel_request_load_module().

Chris PeBenito • 14 years ago

e8871c2

Module version bump for 935151a.

Chris PeBenito • 14 years ago

5911f3d

Module version bump for d12f18e.

Chris PeBenito • 14 years ago

c6491af

Module version bump for d7ec247.

Chris PeBenito • 14 years ago

9a59893

Module version bump for 591af7b.

Chris PeBenito • 14 years ago

9570fc1

Module version bump for ae07c9e.

Chris PeBenito • 14 years ago

ce693cb

Whitespace fixes in mailman.

Chris PeBenito • 14 years ago

1656bf7

Change kernel_load_module to kernel_request_load_module for howl from Dan Walsh

Jeremy Solt • 14 years ago

935151a

Change kernel_load_module to kernel_request_load_module from Dan Walsh

Jeremy Solt • 14 years ago

d12f18e

File context update for certmaster from Dan Walsh

Jeremy Solt • 14 years ago

d7ec247

file context updates from Dan Walsh

Jeremy Solt • 14 years ago

591af7b

Screen needs to setattr on user_ttydevice_t from Dan Walsh

Jeremy Solt • 14 years ago

ae07c9e

Whitespace fix for mcelog.

Chris PeBenito • 14 years ago

fad6e76

Module version bump for f7d413a.

Chris PeBenito • 14 years ago

fce868d

Rearrange interfaces in fail2ban.

Chris PeBenito • 14 years ago

bf140fc

Module version bump for 74b51e6.

Chris PeBenito • 14 years ago

580279d

Whitespace fixes for smoltclient.

Chris PeBenito • 14 years ago

6bc64c4

Module version bump for 3137148.

Chris PeBenito • 14 years ago

ba1c453

mcelog policy from Dan Walsh

Jeremy Solt • 14 years ago

1484157

fail2ban_stream_connect and fail2ban_rw_stream_sockets from Dan Walsh

Jeremy Solt • 14 years ago

f7d413a

Firstboot sends dbus messages from Dan Walsh

Jeremy Solt • 14 years ago

74b51e6

Policy for smolt sendProfile client from Dan Walsh

Jeremy Solt • 14 years ago

257a278

Run interface for ptchown from Dan Walsh

Jeremy Solt • 14 years ago

3137148

Module version bump for 1d3d00b.

Chris PeBenito • 14 years ago

37e2499

Module version bump for e172614.

Chris PeBenito • 14 years ago

ce0570d

Filesystem patch from Dan Walsh.

Chris PeBenito • 14 years ago

7af0e9b

Rearrange lines in alsa an mysql.

Chris PeBenito • 14 years ago

9e506eb

Whitespace cleanup on mysql.if.

Chris PeBenito • 14 years ago

e172614

Manage alsa writable config files interface from Dan Walsh

Jeremy Solt • 14 years ago

1d3d00b

mysql policy from Dan Walsh

Jeremy Solt • 14 years ago

12a6a53

Raid patch from Dan Walsh.

Chris PeBenito • 14 years ago

2f0e3a4

Iscsi and tgtd patches from Dan Walsh.

Chris PeBenito • 14 years ago

30496b1

Fstools patch from Dan Walsh.

Chris PeBenito • 14 years ago

939eaf2

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

d0a6df5

Module version bump for ddae1cc.

Chris PeBenito • 14 years ago

547d62e

Creates sock files in /tmp, reads network state. - From Dan Walsh

Jeremy Solt • 14 years ago

ddae1cc

Fix another corenetwork typo.

Chris PeBenito • 14 years ago

bd063de

Module version bump for 42fa15b.

Chris PeBenito • 14 years ago

6f9c3c4

Module version bump for 3fcdc39.

Chris PeBenito • 14 years ago

b193389

Module version bump for cf3da95.

Chris PeBenito • 14 years ago

5dac509

Minor style fixes.

Chris PeBenito • 14 years ago

e2e1b67

Logwatch looks for content in homedirs, reads samba shares - from Dan Walsh

Jeremy Solt • 14 years ago

42fa15b

shorewall log file from Dan Walsh

Jeremy Solt • 14 years ago

3fcdc39

Allow cdrecord_t to execute bin_t from Dan Walsh

Jeremy Solt • 14 years ago

cf3da95

Add back missing s0 on network_port().

Chris PeBenito • 14 years ago

4af2b3f

Guest patch from Dan Walsh.

Chris PeBenito • 14 years ago

09b92dc

Corenetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

9c709c4

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

4b23c67

Devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

0535173

Storage patch from Dan Walsh.

Chris PeBenito • 14 years ago

febc7fd

Fix cobbler_admin interface to require cobblerd_initrc_exec_t.

Dominick Grift • 14 years ago

183f79e

Corenetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

eeb7616

add write to manage_lnk_file_perms.

Chris PeBenito • 14 years ago

c9ab770

Module version bump for be47d75.

Chris PeBenito • 14 years ago

1112a5b

Module version bump for e1e78df.

Chris PeBenito • 14 years ago

ec0205f

Module version bump for 52b215f.

Chris PeBenito • 14 years ago

b7070a9

Module version bump for cf5e81d.

Chris PeBenito • 14 years ago

cb6385d

Module version bump for 96b7e9f.

Chris PeBenito • 14 years ago

c4faa1d

Module version bump for a005018.

Chris PeBenito • 14 years ago

812f30a

Add additional comments for e1e78df.

Chris PeBenito • 14 years ago

4931c57

hotplug transition to brctl from Dan Walsh

Jeremy Solt • 14 years ago

4d2680e

Seems reasonable that exim may need to manage these files when /etc/alternatives/mta points to exim

Jeremy Solt • 14 years ago

9a1f0d2

Domain transition for apmd to vbetool from Dan Walsh

Jeremy Solt • 14 years ago

15ae77b

gen_require typo fix in dbadm.if from Dan Walsh

Jeremy Solt • 14 years ago

6a9ef9e

Changed amavis_initrc_domtrans domain summary to match style.

Jeremy Solt • 14 years ago

a739053

Changed arpwatch_initrc_domtrans domain summary to match style.

Jeremy Solt • 14 years ago

6665c3c

Various arpwatch fixes.

Dominick Grift • 14 years ago

d783374

Modified apcupsd_initrc_domtrans interface summary to match style.

Jeremy Solt • 14 years ago

6eed0aa

Create apcupsd initrc domtrans. Call apcupsd initrc domtrans in apcupsd_admin. Remove obsolete require. Allow domains Various apcupsd fixes.

Dominick Grift • 14 years ago

eda6417

Fixed typo in gen_require for amavis_initrc_domtrans (Appears to be a copy/paste mistake).

Jeremy Solt • 14 years ago

3b81489

Various amavis fixes.

Dominick Grift • 14 years ago

88340b9

Improve documentation of udev_read_db().

Chris PeBenito • 14 years ago

402bbb9

Improve documentation of seutil_sigchld_newrole().

Chris PeBenito • 14 years ago

b675cec

Add examples to documentation of common corenetwork interfaces.

Chris PeBenito • 14 years ago

4a4436a

Module version bump for bf530f5.

Chris PeBenito • 14 years ago

a6bafb5

Various permission set fixes.

Dominick Grift • 14 years ago

bf530f5

Improve the documentation of application_domain().

Chris PeBenito • 14 years ago

b58db31

Improve the documentation of auth_use_nsswitch().

Chris PeBenito • 14 years ago

d24a7df

Improve the documentation of nis_use_ypbind().

Chris PeBenito • 14 years ago

0bbb165

Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files.

Dominick Grift • 14 years ago

4cb24ae

Improve documentation for userdomain interfaces:

Chris PeBenito • 14 years ago

c46376e

Improve the documentation of domain interfaces:

Chris PeBenito • 14 years ago

88daf12

Improve the documentation of ubac_constrained().

Chris PeBenito • 14 years ago

888d9e4

Improve the documentation of devices interfaces:

Chris PeBenito • 14 years ago

4e12649

Improve filesystem interfaces:

Chris PeBenito • 14 years ago

12f73d8

Module version bump for 03dd57f.

Chris PeBenito • 14 years ago

42f1b11

Fix auth_domtrans_chk_passwd to use read_file_perms to surpress open AVC denials.

Dominick Grift • 14 years ago

03dd57f

Improve the documentation of files interfaces:

Chris PeBenito • 14 years ago

7cf2858

Additional docs for logging_log_filetrans().

Chris PeBenito • 14 years ago

5fb5bf2

Improve the documentation of corenetwork interfaces

Chris PeBenito • 14 years ago

42eb0f1

Improve the documentation of unconfined_domain().

Chris PeBenito • 14 years ago

14e543c

Improve the documentation of logging_log_file() and logging_log_filetrans().

Chris PeBenito • 14 years ago

45185c0

Improve documentation of corecmd_exec_bin() and corecmd_exec_shell().

Chris PeBenito • 14 years ago

3a744d1

Improve the documentation of:

Chris PeBenito • 14 years ago

13f000d

Improve sysnet_read_config() documentation.

Chris PeBenito • 14 years ago

d688717

Switch sysnet_use_portmap(), sysnet_use_ldap(), and sysnet_dns_name_resolve() to use sysnet_read_config() rather thane explicit type usage.

Chris PeBenito • 14 years ago

81a0fb4

Improve documentation on kernel_read_system_state(), kernel_read_network_state(), and kernel_read_proc_symlinks().

Chris PeBenito • 14 years ago

7a0c0b4

Add additional documentation to files_type().

Chris PeBenito • 14 years ago

fd81345

Rearrange files interfaces.

Chris PeBenito • 14 years ago

6dadd39

Improve documentation on logging_send_syslog_msg().

Chris PeBenito • 14 years ago

6e48775

Improve documentation on files_read_etc_files().

Chris PeBenito • 14 years ago

fca4a96

Improve documentation on miscfiles_read_localization().

Chris PeBenito • 14 years ago

611bc93

Module version bump for cd17345.

Chris PeBenito • 14 years ago

d124921

Various abrt fixes.

Dominick Grift • 14 years ago

cd17345

Module version bump for 534e57b.

Chris PeBenito • 14 years ago

2040268

Various afs fixes.

Dominick Grift • 14 years ago

534e57b

mysqlmanagerd_var_run_t is not a domain type.

Dominick Grift • 14 years ago

6306637

Minor tweaks and module version bump for 68cda59.

Chris PeBenito • 14 years ago

1021460

Add MySQL Manager to MySQL policy module

Chris Richards • 14 years ago

68cda59

Automount patch from Dan Walsh.

Chris PeBenito • 14 years ago

1049180

Shorewall patch from Dan Walsh.

Chris PeBenito • 14 years ago

fa03ecc

Vbetool patch from Dan Walsh.

Chris PeBenito • 14 years ago

6ae29c7

Java patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fd0889

Mono patch from Dan Walsh.

Chris PeBenito • 14 years ago

1e0f483

Rename qemu_unconfined_t to unconfined_qemu_t.

Chris PeBenito • 14 years ago

a777957

Rearrage qemu.if.

Chris PeBenito • 14 years ago

8a1c9c5

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

72295e9

Add sectoolm by Miroslav Grepl.

Chris PeBenito • 14 years ago

29b580c

Wine patch from Dan Walsh.

Chris PeBenito • 14 years ago

4796d07

Useradd home dir creation fix from Gentoo.

Chris PeBenito • 14 years ago

6a9da24

Syslog fixes from Gentoo.

Chris PeBenito • 14 years ago

2f84a77

Clean up leaked portage file descriptors.

Chris PeBenito • 14 years ago

8b85019

Ssh key creation fix from Gentoo.

Chris PeBenito • 14 years ago

d08a3df

Utmp fix from Gentoo.

Chris PeBenito • 14 years ago

2c05132

Setfiles fix from Gentoo.

Chris PeBenito • 14 years ago

72c8a37

Mount usbfs fix from Gentoo.

Chris PeBenito • 14 years ago

679a63d

Move netlink route sockets from nsswitch to DNS name resolve.

Chris PeBenito • 14 years ago

aadcb96

Misc portage fixes.

Chris PeBenito • 14 years ago

15d80e3

Portage fixes for installing SELinux-aware programs.

Chris PeBenito • 14 years ago

05bd2f9

Xguest patch from Dan Walsh.

Chris PeBenito • 14 years ago

c06a445

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 14 years ago

6f30d7e

Chronyd from Miroslav Grepl.

Chris PeBenito • 14 years ago

a513794

Ccs patch from Dan Walsh.

Chris PeBenito • 14 years ago

3fb2b72

Clear xserver TODO.

Chris PeBenito • 14 years ago

0ab2c1e

Non-drawing X client support for consolekit.

Chris PeBenito • 14 years ago

6246e7d

Remove redundant conditional user_ping terminal rules.

Chris PeBenito • 14 years ago

1322a1a

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.

Chris PeBenito • 14 years ago

c3c753f

Sudo patch from Dan Walsh.

Chris PeBenito • 14 years ago

ed03a5b

Consoletype patch from Dan Walsh.

Chris PeBenito • 14 years ago

ca5dc2f

Hal patch from Dan Walsh.

Chris PeBenito • 14 years ago

21673b2

Virt/svirt patch from Dan Walsh.

Chris PeBenito • 14 years ago

3079cbc

Ktalk patch from Dan Walsh.

Chris PeBenito • 14 years ago

aa9e3b4

Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

16412e2

Misc fixes for 1031ee6.

Chris PeBenito • 14 years ago

27eab81

Module version number bump for 1031ee6.

Chris PeBenito • 14 years ago

7d2f967

Implement cobblerd policy.

Dominick Grift • 14 years ago

1031ee6

Userdomain patch from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

2d74365

Add nut from Stefan Schulze Frielinghaus and Miroslav Grepl.

Chris PeBenito • 14 years ago

e526fca

Add pyicqt from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

4ebfec7

Add dbadm, from KaiGai Kohei.

Chris PeBenito • 14 years ago

22a2874

Fix home_ssh_t usage.

Chris PeBenito • 14 years ago

edc2f7d

PPP patch from Dan Walsh.

Chris PeBenito • 14 years ago

82b5d29

SSH patch from Dan Walsh.

Chris PeBenito • 14 years ago

cde1507

Uucp patch from Dan Walsh.

Chris PeBenito • 14 years ago

fee5bb7

Sendmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

c155e04

Mailman patch from Dan Walsh.

Chris PeBenito • 14 years ago

3624ef7

Lircd patch from Dan Walsh.

Chris PeBenito • 14 years ago

8a8b24a

Courier patch from Dan Walsh.

Chris PeBenito • 14 years ago

07ba151

Inetd patch from Dan Walsh.

Chris PeBenito • 14 years ago

d2acef7

Avahi patch from Dan Walsh.

Chris PeBenito • 14 years ago

c292cb9

Fprintd patch from Dan Walsh.

Chris PeBenito • 14 years ago

00808a9

Fetchmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

ef6ea56

Exim patch from Dan Walsh.

Chris PeBenito • 14 years ago

84a45c9

Dovecot patch from Dan Walsh.

Chris PeBenito • 14 years ago

4dd84bb

Ddclient patch from Dan Walsh.

Chris PeBenito • 14 years ago

14c7865

DCC patch from Dan Walsh.

Chris PeBenito • 14 years ago

dcabb11

Cyrus patch from Dan Walsh.

Chris PeBenito • 14 years ago

30958fb

Clamav patch from Dan Walsh.

Chris PeBenito • 14 years ago

192fb87

Bluetooth patch from Dan Walsh.

Chris PeBenito • 14 years ago

c5155ac

Move rules from mta mailserver delivery from interface to .te to use the attribute.

Chris PeBenito • 14 years ago

96831fe

MTA patch from Dan Walsh.

Chris PeBenito • 14 years ago

9c40673

Tftp patch from Dan Walsh.

Chris PeBenito • 14 years ago

2650ca5

Sssd patch from Dan Walsh.

Chris PeBenito • 14 years ago

f3890b2

Snmp patch from Dan Walsh.

Chris PeBenito • 14 years ago

207c4d1

ntp patch from Dan Walsh.

Chris PeBenito • 14 years ago

82cdffc

gpsd patch from Dan Walsh.

Chris PeBenito • 14 years ago

f37b7bd

Tuned patch from Dan Walsh.

Chris PeBenito • 14 years ago

b11dcd4

Rpcbind patch from Dan Walsh.

Chris PeBenito • 14 years ago

ff785b9

Radvd patch from Dan Walsh.

Chris PeBenito • 14 years ago

733f494

Privoxy patch from Dan Walsh.

Chris PeBenito • 14 years ago

b36ae97

Prelude patch from Dan Walsh.

Chris PeBenito • 14 years ago

1232a50

PCSCD patch from Dan Walsh.

Chris PeBenito • 14 years ago

6df09cf

Nslcd patch from Dan Walsh.

Chris PeBenito • 14 years ago

2d59a82

Mysql patch from Dan Walsh.

Chris PeBenito • 14 years ago

80f0587

Modemmanager patch from Dan Walsh.

Chris PeBenito • 14 years ago

d3c612f

Milter patch from Dan Walsh.

Chris PeBenito • 14 years ago

0000b79

Memcached patch from Dan Walsh.

Chris PeBenito • 14 years ago

a322266

Kerneloops patch from Dan Walsh.

Chris PeBenito • 14 years ago

6aa333b

Kerberos patch from Dan Walsh.

Chris PeBenito • 14 years ago

e1b8b54

Irqbalance patch from Dan Walsh.

Chris PeBenito • 14 years ago

7d05af7

GPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

d7b98c8

Fail2ban patch from Dan Walsh.

Chris PeBenito • 14 years ago

ce8a71a

Certmaster patch from Dan Walsh.

Chris PeBenito • 14 years ago

bd21cb1

Bitlbee patch from Dan Walsh.

Chris PeBenito • 14 years ago

a7d6068

Amavis patch from Dan Walsh.

Chris PeBenito • 14 years ago

5894c3e

asterisk patch from Dan Walsh.

Chris PeBenito • 14 years ago

32f27a7

apm patch from Dan Walsh.

Chris PeBenito • 14 years ago

7e81399

afs patch from Dan Walsh.

Chris PeBenito • 14 years ago

41c139d

smartmon patch from Dan Walsh.

Chris PeBenito • 14 years ago

b84d6ec

Typo in policy/users

Justin P. Mattock • 14 years ago

3fe6f6a

Changelog and version bump for X object manager changes.

Chris PeBenito • 14 years ago

7fc72a0

Merge branch 'master' into xselinux

Chris PeBenito • 14 years ago

e331a05

Seunshare patch from Dan Walsh.

Chris PeBenito • 14 years ago

46b0373

Screen patch from Dan Walsh.

Chris PeBenito • 14 years ago

d7776f5

Podsleuth patch from Dan Walsh.

Chris PeBenito • 14 years ago

6394ea6

Mozilla patch from Dan Walsh.

Chris PeBenito • 14 years ago

b77daab

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

36ded4b

Calamaris patch from Dan Walsh.

Chris PeBenito • 14 years ago

962d6fb

Iptables and modutils patches from Dan Walsh.

Chris PeBenito • 14 years ago

7491a9e

Kismet and tzdata patches from Dan Walsh.

Chris PeBenito • 14 years ago

d913e79

RAID patch from Dan Walsh.

Chris PeBenito • 14 years ago

0cad9a7

Permission set updates from Dan Walsh.

Chris PeBenito • 14 years ago

c8d563f

Fstools and Xen patches from Dan Walsh.

Chris PeBenito • 14 years ago

77c71b5

Kdump reads the kernel core.

Chris PeBenito • 14 years ago

e21162e

UDEV patch from Dan Walsh.

Chris PeBenito • 14 years ago

837163c

IPSEC patch from Dan Walsh.

Chris PeBenito • 14 years ago

832c1be

Application patch from Dan Walsh.

Chris PeBenito • 14 years ago

5ed0617

Whitespace cleanup.

Chris PeBenito • 14 years ago

dccbb80

ISCSI patch from Dan Walsh.

Chris PeBenito • 14 years ago

0f982da

Setrans patch from Dan Walsh.

Chris PeBenito • 14 years ago

0a119a0

LVM patch from Dan Walsh.

Chris PeBenito • 14 years ago

bd34ef7

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

9dfdd48

Files patch from Dan Walsh.

Chris PeBenito • 14 years ago

910b1d8

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

290aa8a

Filesystem patch from Dan Walsh.

Chris PeBenito • 14 years ago

f4b9dc3

Add terminal patch from Dan Walsh.

Chris PeBenito • 14 years ago

d6c3ed8

Add devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

b51e8e0

Add kernel patch from Dan Walsh

Chris PeBenito • 14 years ago

e276b8e

Add storage patch, from Dan Walsh.

Chris PeBenito • 14 years ago

53c73dc

Add module_request permission, from Dan Walsh.

Chris PeBenito • 14 years ago

deb5272

bump module versions for release.

Chris PeBenito • 14 years ago

ed3a1f5

additional cleanup for e877913.

Chris PeBenito • 14 years ago

e6d8fd1

adding puppet configuration management system

Craig Grube • 14 years ago

e877913

one further rearrangement of tgtd.

Chris PeBenito • 14 years ago

f272825

clean up 0bca409 and add changelog entry.

Chris PeBenito • 14 years ago

222d5b5

RESET tgtd daemon.

Matthew Ife • 14 years ago

0bca409

restore removed aliases.

Chris PeBenito • 14 years ago

9448ca6

Drop the xserver_unprotected interface.

Eamon Walsh • 14 years ago

5025a46

X Object Manager policy revisions to xserver.if.

Eamon Walsh • 14 years ago

5242ecc

X Object Manager policy revisions to xserver.te.

Eamon Walsh • 14 years ago

f267f85

add tuned from miroslav grepl.

Chris PeBenito • 14 years ago

b04669a

reorganize a92ee50

Chris PeBenito • 14 years ago

a1a45de

Implement screen-locking feature.

Dominick Grift • 14 years ago

a92ee50

Fix a typo of SElinux to SELinux.

Justin P. Mattock • 14 years ago

5b6bd09

add open to search_dir_perms.

Chris PeBenito • 14 years ago

7ca3f55

Add separate x_pointer and x_keyboard classes inheriting from x_device.

Eamon Walsh • 14 years ago

e4928c5

revise MCS constraints to use only MCS-specific attributes.

Chris PeBenito • 14 years ago

808341b

add seunshare from dan.

Chris PeBenito • 14 years ago

4be8dd1

add dkim from stefan schulze frielinghaus.

Chris PeBenito • 14 years ago

5a6b1fe

add gnomeclock from dan.

Chris PeBenito • 14 years ago

21b1d10

add rtkit from dan.

Chris PeBenito • 14 years ago

ed70158

clean up xscreensaver.

Chris PeBenito • 14 years ago

1d3b9e3

SELinux xscreensaver policy support

corentin.labbe • 14 years ago

31f9c10

add modemmanager from dan.

Chris PeBenito • 14 years ago

c141d83

add abrt from dan.

Chris PeBenito • 14 years ago

e3a90e3

rearrange readahead rules.

Chris PeBenito • 14 years ago

6af53d0

readahead patch from dan.

Chris PeBenito • 14 years ago

c1e5b19

nscd patch from dan.

Chris PeBenito • 14 years ago

937b2c4

cron patch from dan.

Chris PeBenito • 14 years ago

c61b350

prelink patch from dan.

Chris PeBenito • 14 years ago

163ddfa

nslcd policy from dan.

Chris PeBenito • 14 years ago

81bca10

term_write_all_terms() patch from Stefan Schulze Frielinghaus

Chris PeBenito • 14 years ago

f67bc91

add gitosis from miroslav grepl.

Chris PeBenito • 14 years ago

dbed953

cpufreqselector patch from dan.

Chris PeBenito • 14 years ago

634a13c

add an additional vmware host program.

Chris PeBenito • 14 years ago

f613717

screen patch from dan.

Chris PeBenito • 14 years ago

6fdef06

remove stale screen_dir_t references

Chris PeBenito • 14 years ago

72b834c

gpg patch from dan.

Chris PeBenito • 14 years ago

ca7fa52

openvpn patch from dan: Openvpn connects to cache ports and stores files in nfs and cifs directories.

Chris PeBenito • 14 years ago

f2f296b

Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.

Chris PeBenito • 14 years ago

93be4ba

add shorewall from dan.

Chris PeBenito • 14 years ago

625be1b

add kdump from dan.

Chris PeBenito • 14 years ago

71965a1

cdrecord patch from dan.

Chris PeBenito • 14 years ago

a4b6385

awstats patch from dan.

Chris PeBenito • 14 years ago

1a79193

certwatch patch from dan.

Chris PeBenito • 14 years ago

b2324fa

mrtg patch from dan.

Chris PeBenito • 14 years ago

b515ab0

add hddtemp from dan.

Chris PeBenito • 14 years ago

aa83007

add ptchown policy from dan.

Chris PeBenito • 14 years ago

aac56b1

pulseaudio patch from dan.

Chris PeBenito • 14 years ago

a3dd149

module version number bump for nscd patch.

Chris PeBenito • 14 years ago

6774578

nscd cache location changed from /var/db/nscd to /var/cache/nscd

Manoj Srivastava • 14 years ago

2a79deb

kismet patch from dan.

Chris PeBenito • 14 years ago

a9e9678

module version number bump for tun patches

Chris PeBenito • 14 years ago

aaff2fc

rename admin_tun_type to admindomain.

Chris PeBenito • 14 years ago

0be901b

reorganize tun patch changes.

Chris PeBenito • 14 years ago

bd75703

refpol: Policy for the new TUN driver access controls

Paul Moore • 14 years ago

9dc3cd1

refpol: Add the "tun_socket" object class flask definitions

Paul Moore • 14 years ago

333494f

patch from Eamon Walsh to remove useage of deprecated xserver interfaces.

Chris PeBenito • 14 years ago

4279891

deprecate userdom_xwindows_client_template

Chris PeBenito • 14 years ago

93c49bd

Remove excessive permissions in logging_send_syslog_msg(). Ticket #14.

Chris PeBenito • 14 years ago

fef5dcf

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Chris PeBenito • 14 years ago

e27827b

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

dbb7dd9

split dev_manage_dri_dev() into a manage and a filetrans interface.

Chris PeBenito • 14 years ago

6934745

reorganize dbus.fc.

Chris PeBenito • 14 years ago

0484277

module version bumps and changelog update for the previous 3 commits.

Chris PeBenito • 14 years ago

62c80e2

Gentoo dbus in libexec

LABBE Corentin • 14 years ago

0d700b0

portage need capability sys_nice

LABBE Corentin • 14 years ago

755c52b

Missing comma in policykit

LABBE Corentin • 14 years ago

58cc990

Debian policykit fixes from Martin Orr.

Chris PeBenito • 14 years ago

9099220

Fix unconfined_r use of unconfined_java_t.

Chris PeBenito • 14 years ago

b264824

Add missing x_device rules for XI2 functions, from Eamon Walsh.

Chris PeBenito • 14 years ago

4254cec

Add missing rules to make unconfined_cronjob_t a valid cron job domain.

Chris PeBenito • 14 years ago

2a77737

remove redundant xen_append_log() call in hostname.

Chris PeBenito • 14 years ago

97e4211

fix refpolicy ticket #48.

Chris PeBenito • 14 years ago

e51390d

Handle unix_chkpwd usage by useradd and groupadd; fixes ticket #49.

Chris PeBenito • 14 years ago

02e594d

Add missing compatibility aliases for xdm_xserver*_t types.

Chris PeBenito • 14 years ago

e335910

module version number bump for release 2.20090730 that was mistakenly omitted.

Chris PeBenito • 14 years ago

9570b28

fix ordering in sysnetwork.

Chris PeBenito • 14 years ago

d69616c

fix ordering in raid.

Chris PeBenito • 14 years ago

48bf639

fix ordering in pcmcia.

Chris PeBenito • 14 years ago

4b218bd

fix ordering in mount.

Chris PeBenito • 14 years ago

f0e959b

fix ordering in modutils.

Chris PeBenito • 14 years ago

54327d4

fix ordering of interface calls in lvm.

Chris PeBenito • 14 years ago

568efbe

fix ordering of interface calls in locallogin.

Chris PeBenito • 14 years ago

8cd1306

fix ordering of interface calls in iptables.

Chris PeBenito • 14 years ago

e6985f9

fix ordering of interface calls in init.

Chris PeBenito • 14 years ago

464ffa5

fix ordering of interface calls in hostname.

Chris PeBenito • 14 years ago

14d2822

fix ordering of interface calls in getty.

Chris PeBenito • 14 years ago

5b5300c

fix ordering of interface calls in fstools.

Chris PeBenito • 14 years ago

79ca728

fix ordering of interface calls in clock.

Chris PeBenito • 14 years ago

08638af

fix ordering of interface calls in authlogin.

Chris PeBenito • 14 years ago

2acba7b

fix ordering of interface calls in sudo.

Chris PeBenito • 14 years ago

9c47227

add bin_t labeling for gentoo dhcpcd-run-hooks location

Chris PeBenito • 14 years ago

78a9c28

openrc unfortunately mounts a tmpfs at /lib/rc

Chris PeBenito • 14 years ago

4c92f08

gentoo init script system uses tmpfs for state data

Chris PeBenito • 14 years ago

cfdbf36

gentoo init script system sends audit messages.

Chris PeBenito • 14 years ago

efa0acc

alsa file location update for debian, from Manoj.

Chris PeBenito • 14 years ago

3162277

whitespace fixes in apt.

Chris PeBenito • 14 years ago

2a4740c

clean up 6a192f70d42013fcbd4eefe1f35cab3de313cedb

Chris PeBenito • 14 years ago

b5aaa7b

Update apt/aptitude policy to add support for lock/log files

Manoj Srivastava • 14 years ago

6a192f7

pull most of fedora changes to rpc.

Chris PeBenito • 14 years ago

50458c8

pull most of fedora changes to samba.

Chris PeBenito • 14 years ago

0c89174

/dev/fuse should be s0 not mls_high

Chris PeBenito • 14 years ago

105e85a

pull in part of fedora mta changes

Chris PeBenito • 14 years ago

363e8fb

add fprintd module from dan.

Chris PeBenito • 14 years ago

20c3cce

add devicekit module from dan.

Chris PeBenito • 14 years ago

677c4c2

consolekit patch from dan.

Chris PeBenito • 14 years ago

4e7c0a9

automount patch from dan.

Chris PeBenito • 14 years ago

3332229

cups patch from dan.

Chris PeBenito • 14 years ago

8f3bddf

pull in apache_admin() from fedora

Chris PeBenito • 14 years ago

4be3e11

vmware patch from dan.

Chris PeBenito • 14 years ago

9155002

fix dbus type transition conflict.

Chris PeBenito • 14 years ago

423a4a3

sudo patch from dan.

Chris PeBenito • 14 years ago

41ea887

readahead patch from dan.

Chris PeBenito • 14 years ago

83f0b50

add missing userdom interfaces

Chris PeBenito • 14 years ago

4083191

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

c7ae9ae

snort patch from dan.

Chris PeBenito • 14 years ago

ebf3ec9

wm policy from dan

Chris PeBenito • 14 years ago

5f6c30f

oddjob patch from dan.

Chris PeBenito • 14 years ago

708a74a

kerneloops patch from dan

Chris PeBenito • 14 years ago

fa50187

hal patch from dan.

Chris PeBenito • 14 years ago

9de7c17

avahi patch from dan

Chris PeBenito • 14 years ago

fe1205a

dbus patch from dan

Chris PeBenito • 14 years ago

e044388

tmpreaper patch from dan.

Chris PeBenito • 14 years ago

5be35f2

mozilla patch from dan.

Chris PeBenito • 14 years ago

06625d3

add cpufreqselector from dan

Chris PeBenito • 14 years ago

f4962ab

remove read_default_t tunable

Chris PeBenito • 14 years ago

09516cb

podsleuth patch from dan.

Chris PeBenito • 14 years ago

5bb5ec1

afs client patch from dan.

Chris PeBenito • 14 years ago

13306f5

bluetooth patch from dan.

Chris PeBenito • 14 years ago

b93a7da

clamav patch from dan.

Chris PeBenito • 14 years ago

ad0aea5

mailman patch from dan.

Chris PeBenito • 14 years ago

92f08c7

ricci patch from dan.

Chris PeBenito • 14 years ago

1847443

fix policykit interface

Chris PeBenito • 14 years ago

d882246

gpg patch from dan

Chris PeBenito • 14 years ago

e4f73af

module version bump for 9b1907b217cb4c4d508b5130fcb6267e38182642

Chris PeBenito • 14 years ago

5271dd3

add pulseaudio from dan.

Chris PeBenito • 14 years ago

9b1907b

ppp patch from dan

Chris PeBenito • 14 years ago

7395f80

kerberos patch from dan

Chris PeBenito • 14 years ago

4aa0752

dnsmasq patch from dan.

Chris PeBenito • 14 years ago

8f17f7c

dhcp patch from dan

Chris PeBenito • 14 years ago

93d3008

policykit.if whitespace fix

Chris PeBenito • 14 years ago

af5374d

4 patches from dan.

Chris PeBenito • 14 years ago

adea587

add kismet and pulseaudio ports. fix sorting of ports.

Chris PeBenito • 14 years ago

edb7b90

add policykit from dan.

Chris PeBenito • 14 years ago

9e90ce3

fix bad varnishd interface names

Chris PeBenito • 14 years ago

b67201e

module version bump for f2583aa83b4f5c0081ac4caebffcc0a29401cf96

Chris PeBenito • 14 years ago

7694abd

Remove duplicate distro_redhat context

Manoj Srivastava • 14 years ago

f2583aa

5 patches from dan

Chris PeBenito • 14 years ago

ce6fee6

three debian patches from manoj

Chris PeBenito • 14 years ago

10b03f3

trunk: fix typo in guest role decl.

Chris PeBenito • 14 years ago

84d88df

trunk: update policycaps comments for sock_file open perm.

Chris PeBenito • 14 years ago

9ac9739

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

bb88161

trunk: add missing varnish port.

Chris PeBenito • 15 years ago

45b975d

trunk: pads from dan.

Chris PeBenito • 15 years ago

50824a9

trunk: prelude patch from dan.

Chris PeBenito • 15 years ago

46e2fa6

trunk: varnishd from dan.

Chris PeBenito • 15 years ago

267d9c6

trunk: whitespace fixes

Chris PeBenito • 15 years ago

3f67f72

trunk: 7 patches from dan.

Chris PeBenito • 15 years ago

20272c2

trunk: nis patch from dan.

Chris PeBenito • 15 years ago

c989807

trunk: add sssd from dan.

Chris PeBenito • 15 years ago

c017ee1

trunk: remove unnecessary semicolons after interface/template calls.

Chris PeBenito • 15 years ago

26410dd

trunk: Greylist milter from Paul Howarth.

Chris PeBenito • 15 years ago

c9c0d84

trunk: Allow unix_update to change the security attributes associate with files so

Chris PeBenito • 15 years ago

c7dc1c7

trunk: Misc fixes for unix_update from Brandon Whalen.

Chris PeBenito • 15 years ago

df28a0c

trunk: Add x_device permissions for XI2 functions, from Eamon Walsh.

Chris PeBenito • 15 years ago

95ea7d6

trunk: 10 patches from dan.

Chris PeBenito • 15 years ago

4551555

trunk: 1 patch from dan.

Chris PeBenito • 15 years ago

30425aa

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

a65fd90

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

731008a

trunk: MLS constraints for the x_selection class, from Eamon Walsh.

Chris PeBenito • 15 years ago

16fd1fd

trunk: add gpsd from miroslav grepl

Chris PeBenito • 15 years ago

cca4a21

trunk: 9 patches from dan.

Chris PeBenito • 15 years ago

63f0a71

trunk: add libjackserver.so textrel fc.

Chris PeBenito • 15 years ago

22894e3

trunk:

Chris PeBenito • 15 years ago

996779d

trunk:

Chris PeBenito • 15 years ago

e0ea7b1

trunk:

Chris PeBenito • 15 years ago

a01a4a7

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

80348b7

trunk: whitespace fix for squid.fc.

Chris PeBenito • 15 years ago

a47eb52

se-postgresql update from kaigai

Chris PeBenito • 15 years ago

350ed89

trunk: lircd from miroslav grepl

Chris PeBenito • 15 years ago

da3ed06

trunk: whitespace fixes.

Chris PeBenito • 15 years ago

c0f5fa0

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

3392356

trunk: Milter state directory patch from Paul Howarth.

Chris PeBenito • 15 years ago

0cf1d56

trunk: 5 modules from dan.

Chris PeBenito • 15 years ago

a5ef553

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

153fe24

trunk: module version bump for previous commit.

Chris PeBenito • 15 years ago

09125ae

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

d6605bc

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

42d567c

trunk: 14 patches from dan.

Chris PeBenito • 15 years ago

8f800d4

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

244b45d

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

3c9b2e9

trunk: add open perm to sock_file.

Chris PeBenito • 15 years ago

d3cdc3d

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

79a5a80

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

c90440a

trunk: add mysql db lnk_file transition.

Chris PeBenito • 15 years ago

e21bd28

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

da04234

trunk: fix typo in devices file contexts.

Chris PeBenito • 15 years ago

11c944f

trunk: storage patch from dan.

Chris PeBenito • 15 years ago

2c664e7

trunk: devices patch from dan.

Chris PeBenito • 15 years ago

7b76207

trunk: corecommands patch from dan.

Chris PeBenito • 15 years ago

be5aaeb

trunk: add nlmsg_tty_audit permission.

Chris PeBenito • 15 years ago

b4ad699

trunk: filesystem patch from dan.

Chris PeBenito • 15 years ago

c45fdad

trunk: add MLS constrains for ingress/egress permissions from Paul Moore.

Chris PeBenito • 15 years ago

e1a70f1

trunk: Drop write permission from fs_read_rpc_sockets().

Chris PeBenito • 15 years ago

156204a

trunk: remove unused udev_runtime_t type.

Chris PeBenito • 15 years ago

81fa19e

trunk: Patch for RadSec port from Glen Turner.

Chris PeBenito • 15 years ago

f3fcadf

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

f793142

trunk: add context contains to setrans.

Chris PeBenito • 15 years ago

c1e5011

trunk: Enable network_peer_controls policy capability from Paul Moore.

Chris PeBenito • 15 years ago

7722c29

trunk: btrfs from Paul Moore.

Chris PeBenito • 15 years ago

805f34e

trunk: Add db_procedure install permission from KaiGai Kohei.

Chris PeBenito • 15 years ago

466e22a

trunk: Add support for network interfaces with access controlled by a Boolean from the CLIP project.

Chris PeBenito • 15 years ago

019dfaf

trunk: add sysadm_entry_spec_domtrans_to() interface from clip.

Chris PeBenito • 15 years ago

64daa85

trunk: su fixes from clip.

Chris PeBenito • 15 years ago

9e7a338

trunk: add support for labeled booleans.

Chris PeBenito • 15 years ago

f0435b1

trunk: Remove node definitions and change node usage to generic nodes.

Chris PeBenito • 15 years ago

c126214

trunk: change network interface access from all to generic network interfaces.

Chris PeBenito • 15 years ago

668b309

trunk: fix certwatch version number.

Chris PeBenito • 15 years ago

59d5996

trunk: Add kernel_service access vectors, from Stephen Smalley.

Chris PeBenito • 15 years ago

347a701

trunk: bump module versions for release.

Chris PeBenito • 15 years ago

17ec8c1

trunk: Fix consistency of audioentropy and iscsi module naming.

Chris PeBenito • 15 years ago

3196971

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

9ff89c4

trunk: fix role change constraint.

Chris PeBenito • 15 years ago

f657cb1

trunk: whitespace fixes in xml blocks.

Chris PeBenito • 15 years ago

ff8f0a6

trunk: whitespace fix changing multiple spaces into tabs.

Chris PeBenito • 15 years ago

6073ea1

trunk: fix missing xml parameter.

Chris PeBenito • 15 years ago

a057e04

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

fb4826f

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

14c0edc

trunk: Debian file context fix for xen from Russell Coker.

Chris PeBenito • 15 years ago

b3eb124

trunk: add milter module from Paul Howarth.

Chris PeBenito • 15 years ago

b9e5238

trunk: a fix on the previous commit.

Chris PeBenito • 15 years ago

b3b607e

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

fcee22a

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

01e9e7d

trunk 2 patches from dan.

Chris PeBenito • 15 years ago

659c865

trunk: Xserver MLS fix from Eamon Walsh.

Chris PeBenito • 15 years ago

7f49194

trunk: fix logging admin interfaces.

Chris PeBenito • 15 years ago

7a4c282

trunk: fix disable ubac condition for process perms.

Chris PeBenito • 15 years ago

23d5ab8

trunk: 2 fixes from martin orr.

Chris PeBenito • 15 years ago

73c77e2

trunk: add omapi port for dhcpcd.

Chris PeBenito • 15 years ago

99282e6

trunk: 10 patches from dan.

Chris PeBenito • 15 years ago

5843d06

trunk: patch from Mike Edenfield to add udevadm fc entry.

Chris PeBenito • 15 years ago

27337d8

trunk: 7 patches from dan.

Chris PeBenito • 15 years ago

657c226

trunk: tweaks from russell and martin orr.

Chris PeBenito • 15 years ago

ba79698

trunk: add missing ubac module.

Chris PeBenito • 15 years ago

0003940

trunk: merge UBAC.

Chris PeBenito • 15 years ago

296273a

trunk: additional open fixes.

Chris PeBenito • 15 years ago

932c353

trunk: more open perm fixes.

Chris PeBenito • 15 years ago

82d2775

trunk: Move shared library calls from individual modules to the domain module.

Chris PeBenito • 15 years ago

6e68e6b

trunk: remove redundant shared lib calls.

Chris PeBenito • 15 years ago

2cca6b7

trunk: additional whitespace fixes.

Chris PeBenito • 15 years ago

2a98379

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 15 years ago

88cf0a9

trunk: Enable open permission checks policy capability.

Chris PeBenito • 15 years ago

0b36a21

trunk: Remove hierarchy from portage module as it is not a good example of hieararchy.

Chris PeBenito • 15 years ago

aea3f28

trunk: bump version numbers for release.

Chris PeBenito • 15 years ago

5d4f4b5

trunk: 8 patches from dan.

Chris PeBenito • 15 years ago

74993c4

trunk: a pile of misc fixes.

Chris PeBenito • 15 years ago

aa7c463

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

06099da

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 15 years ago

04d2861

trunk: 8 patches from dan.

Chris PeBenito • 15 years ago

967fd1b

trunk: 21 patches from dan.

Chris PeBenito • 15 years ago

e87221c

trunk: fix typo

Chris PeBenito • 15 years ago

ed8ae5e

trunk: 7 patches from dan, 1 from eamon.

Chris PeBenito • 15 years ago

12c61f3

trunk: add oident from dominick grift.

Chris PeBenito • 15 years ago

73edbc9

trunk: fix dupe fc.

Chris PeBenito • 15 years ago

6d8af27

trunk: firstboot update from dan.

Chris PeBenito • 15 years ago

4bdf192

trunk: readahead fix from dan.

Chris PeBenito • 15 years ago

bf9f348

trunk: cvs update from dan.

Chris PeBenito • 15 years ago

3daef69

trunk: remove stale pax class comments as that class was removed.

Chris PeBenito • 15 years ago

4a47550

trunk: init script for setrans.

Chris PeBenito • 15 years ago

88c02e0

trunk: rpcbind update from dan.

Chris PeBenito • 15 years ago

658f4d3

trunk: last bit of wpa_supplicant update from martin orr.

Chris PeBenito • 15 years ago

fd49fef

trunk: remove incomplete sshd_extern.

Chris PeBenito • 15 years ago

c9824ec

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 15 years ago

64c5b99

trunk: logging update from dan.

Chris PeBenito • 15 years ago

cfafe4a

trunk: bind update from dan.

Chris PeBenito • 15 years ago

f5394cc

trunk: rename labeled init scripts with initrc convention.

Chris PeBenito • 15 years ago

48f6456

trunk: squid update from dan.

Chris PeBenito • 15 years ago

a46b605

trunk: firstboot update from dan.

Chris PeBenito • 15 years ago

21ea2b1

trunk: kudzu and mta patches from dan.

Chris PeBenito • 15 years ago

36095d1

trunk: promote networkmanager debian fc entries out of build options.

Chris PeBenito • 15 years ago

bc85e82

trunk: ntp and setrans update from dan.

Chris PeBenito • 15 years ago

8786916

trunk: Debian update for NetworkManager/wpa_supplicant from Martin Orr.

Chris PeBenito • 15 years ago

52ceaaa

trunk: networkmanager/ppp patch from dan.

Chris PeBenito • 15 years ago

ae33863

trunk: fix bad apcupsd interface name.

Chris PeBenito • 15 years ago

859135d

trunk: fix fail2ban init script regex.

Chris PeBenito • 15 years ago

5434181

trunk: update mls constraints for x_application_data.

Chris PeBenito • 15 years ago

6a824f6

trunk: fail2ban update from dan.

Chris PeBenito • 15 years ago

cdac989

trunk: fix bad require.

Chris PeBenito • 15 years ago

96851b1

trunk: add cyphesis from dan.

Chris PeBenito • 15 years ago

a71e136

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 15 years ago

e40fa63

trunk: first part of init script labeling support.

Chris PeBenito • 15 years ago

6cc3f35

trunk: hplip uses dbus.

Chris PeBenito • 15 years ago

9bcfb6d

trunk: inetd update from dan.

Chris PeBenito • 15 years ago

24af9b1

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 15 years ago

e4171e8

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 15 years ago

c11057f

trunk: add w3c from dan.

Chris PeBenito • 15 years ago

32f8ff3

trunk: firstboot update from dan.

Chris PeBenito • 15 years ago

93f445b

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

770c015

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 15 years ago

3e59876

trunk: two small patches from dan.

Chris PeBenito • 15 years ago

6e32891

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 15 years ago

9acf481

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 15 years ago

9c4500b

trunk: add an empty m4 string so the index macro is not invoked, to prevent a warning.

Chris PeBenito • 15 years ago

cc1eee1

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 15 years ago

e0ed765

trunk: missed fixes on previous commit.

Chris PeBenito • 15 years ago

7aabe35

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 15 years ago

8a948ca

trunk: Samba/winbind update from Mike Edenfield.

Chris PeBenito • 15 years ago

b81bfc2

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 15 years ago

3338f23

trunk: another patch from the fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 15 years ago

d13f876

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 15 years ago

556556c

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 15 years ago

dc1920b

trunk: 7 patches from Fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 15 years ago

6224fc1

trunk: massive whitespace cleanup from dominick grift.

Chris PeBenito • 15 years ago

0bfccda

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 15 years ago

2b592aa

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 15 years ago

4459a7c

trunk: bump versions for release.

Chris PeBenito • 15 years ago

cfcf500

trunk: drop workaround rules.

Chris PeBenito • 15 years ago

6aa9918

trunk: Fix httpd_enable_homedirs to actually provide the access it is supposed to provide.

Chris PeBenito • 15 years ago

e311e23

trunk: apache script connections to postgres, from kaigai.

Chris PeBenito • 16 years ago

5fe7de9

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaeeb

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2d

trunk: Patch to handle postfix data_directory from Vaclav Ovsik.

Chris PeBenito • 16 years ago

8c6292b

trunk: fix up stored procedure naming patch from kaigai.

Chris PeBenito • 16 years ago

7f4005e

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a9036

trunk: pull in most of dans vmware patch.

Chris PeBenito • 16 years ago

a713ad8

trunk: two small updates from dan.

Chris PeBenito • 16 years ago

c54eb87

trunk: podsleuth and hal updates from dan.

Chris PeBenito • 16 years ago

131634a

trunk: add qemu and virt from dan.

Chris PeBenito • 16 years ago

eb42163

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618e

trunk: additional patch from kaigai to fix up some type transitions for unpriv clients.

Chris PeBenito • 16 years ago

8e7d43c

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08a

trunk: trivial kernel patch from dan.

Chris PeBenito • 16 years ago

67b6207

trunk: Patch for X.org dbus support from Martin Orr.

Chris PeBenito • 16 years ago

ef55a11

trunk: misc gentoo fc fixes.

Chris PeBenito • 16 years ago

4b28c2e

trunk: add prelude from dan.

Chris PeBenito • 16 years ago

cdbd09f

trunk: misc fixes.

Chris PeBenito • 16 years ago

147af4d

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efee

trunk: fs update from dan.

Chris PeBenito • 16 years ago

b4921b5

trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.

Chris PeBenito • 16 years ago

308baad

trunk: add additional portage log locations.

Chris PeBenito • 16 years ago

0ecd829

trunk: tweak kerneloops.

Chris PeBenito • 16 years ago

8926b25

trunk: add kerneloops from dan.

Chris PeBenito • 16 years ago

782c10e

trunk: add kismet from dan.

Chris PeBenito • 16 years ago

ff79b83

trunk: start adding open perm to obvious places.

Chris PeBenito • 16 years ago

cbe82b1

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbdc

trunk: fix typo

Chris PeBenito • 16 years ago

e6fdb59

trunk: temp workaround for toolchain breakage.

Chris PeBenito • 16 years ago

8db5085

trunk: Module loading now requires setsched on kernel threads.

Chris PeBenito • 16 years ago

4416c41

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7a

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a9

trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.

Chris PeBenito • 16 years ago

a42ce93

trunk: X application data class from Eamon Walsh and Ted Toth.

Chris PeBenito • 16 years ago

d923d54

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cda

trunk: add missing mplayer_etc_t require in role template.

Chris PeBenito • 16 years ago

a0647af

trunk: make hald_log_t a log file.

Chris PeBenito • 16 years ago

7e11b74

trunk: hal xml doc fix pointed out by Rob Myers.

Chris PeBenito • 16 years ago

f12302a

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db2

trunk: Add file for enabling policy capabilities.

Chris PeBenito • 16 years ago

c07f9cc

trunk: Patch to fix leaky interface/template call depth calculator from Vaclav Ovsik.

Chris PeBenito • 16 years ago

75da4b8

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

8152a78

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3a

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b47

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e828954

trunk: fix winbind socket connection interface for default location of the sock_file.

Chris PeBenito • 16 years ago

9377a3e

trunk: add type transition to fix mysql socket creation.

Chris PeBenito • 16 years ago

9e8c3aa

trunk: small fixes for gentoo system.

Chris PeBenito • 16 years ago

2ed4f5a

trunk: add wireshark.

Chris PeBenito • 16 years ago

6e2123f

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 16 years ago

91d6c92

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 16 years ago

47333d8

trunk: Definitions for open permisson on file and similar objects from Eric Paris.

Chris PeBenito • 16 years ago

210607b

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 16 years ago

e065ac8

trunk: rpc update from Vaclav Ovsik.

Chris PeBenito • 16 years ago

01e8ff4

trunk: dontaudit init fds in loadkeys.

Chris PeBenito • 16 years ago

737fcf2

trunk: Exim updates on Debian from Devin Carrawy.

Chris PeBenito • 16 years ago

d57a094

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

834401f

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

90c3c56

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

9fa023f

trunk: Backup update on Debian from Vaclav Ovsik.

Chris PeBenito • 16 years ago

45b56b0

trunk: Cracklib update on Deban from Vaclav Ovsik.

Chris PeBenito • 16 years ago

51223bf

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

ee6608b

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

f508567

trunk: label /proc/kallsyms with system_map_t.

Chris PeBenito • 16 years ago

037fc0f

trunk: fix pppd admin interface.

Chris PeBenito • 16 years ago

4f01781

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 16 years ago

6e7a1fc

trunk: labeled networking permission update from paul moore.

Chris PeBenito • 16 years ago

f034333

trunk: add capability2 class, from Stephen Smalley.

Chris PeBenito • 16 years ago

8b9ffed

trunk: 12 patches from dan.

Chris PeBenito • 16 years ago

7a5e2d8

trunk: add basic ubuntu support

Chris PeBenito • 16 years ago

12cf805

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

ce8a529

trunk: add 3rd party corenet interfaces for (secmark) packets.

Chris PeBenito • 16 years ago

320ea98

trunk: add setfcap capabiltiy, from Serge Hallyn.

Chris PeBenito • 16 years ago

d4623f3

trunk: fix missing lo netif alias for standard and mcs configs.

Chris PeBenito • 16 years ago

c8d4c38

trunk: add mls constraints to dbus.

Chris PeBenito • 16 years ago

936f286

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 16 years ago

9323a50

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 16 years ago

7cbfeb9

trunk: Labeled networking peer object class updates.

Chris PeBenito • 16 years ago

f3da31d

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

f7925f2

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

1abafe3

trunk: several fc updates from dan.

Chris PeBenito • 16 years ago

02d968c

trunk: add openoffice locations in gentoo.

Chris PeBenito • 16 years ago

9f6e2db

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 16 years ago

dd9e1de

trunk: another round of nsswitch from dan.

Chris PeBenito • 16 years ago

09e2168

trunk: add setrlimit to debian cron.

Chris PeBenito • 16 years ago

74d920c

trunk: fix xconsole rw interface.

Chris PeBenito • 16 years ago

5f63dd1

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 16 years ago

c0cf6e0

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 16 years ago

08dccef

trunk: version bump for newrole fixes.

Chris PeBenito • 16 years ago

f98cfb5

trunk: test fix 2 for newrole.

Chris PeBenito • 16 years ago

c2b87f2

trunk: test fix for newrole.

Chris PeBenito • 16 years ago

6138d3d

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 16 years ago

1483be1

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

2f5c2f2

trunk: version bumps for previous commit.

Chris PeBenito • 16 years ago

0aa18d9

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 16 years ago

0b6acad

trunk: add missing tcp_socket rules for xfs.

Chris PeBenito • 16 years ago

8d1f9d9

trunk: fix dup specification for /var/spool/cups/*

Chris PeBenito • 16 years ago

6ab634a

trunk: add unconfined_run_to().

Chris PeBenito • 16 years ago

ccf6611

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 16 years ago

013783b

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 16 years ago

53da70c

trunk: reorganize selinuxutil.

Chris PeBenito • 16 years ago

389ad7b

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 16 years ago

eeef8dc

trunk: 9 patches from dan.

Chris PeBenito • 16 years ago

226c069

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

6c91189

trunk: remove duplicate specifiction for /usr/lib/devices on debian.

Chris PeBenito • 16 years ago

2999cea

trunk: add in polmatch for default spd.

Chris PeBenito • 16 years ago

9820351

trunk: add labeled networking support to unconfined.

Chris PeBenito • 16 years ago

bdccbac

trunk: rearrange the bottom of domain.if and fix domain_ipsec_labels().

Chris PeBenito • 16 years ago

a56055e

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 16 years ago

847937d

trunk: add gentoo hal fc entry.

Chris PeBenito • 16 years ago

3b498a9

trunk: add postfixpolicyd from Jan-Frode Myklebust.

Chris PeBenito • 16 years ago

4605adc

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

eaed904

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 16 years ago

3ece118

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

7d4161c

trunk: 11 patches from dan.

Chris PeBenito • 16 years ago

495df41

trunk: remove unused types from dbus.

Chris PeBenito • 16 years ago

bd973e3

trunk: filesystem patch from dan.

Chris PeBenito • 16 years ago

8e2fb69

trunk: add exim from dan.

Chris PeBenito • 16 years ago

6bf8bf4

trunk: add /var/lib search for system bus template.

Chris PeBenito • 16 years ago

3c99e59

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

2f27163

trunk: add infrastructure for managing user web content.

Chris PeBenito • 16 years ago

a334d29

trunk: fix do not userspace commons in kernel version of av_permissions.h.

Chris PeBenito • 16 years ago

e83edee

trunk: fix flask.py Flask class userspace dictionary usage.

Chris PeBenito • 16 years ago

32c05cc

trunk: do not emit lines in the kernel version of av_inherit.h for commons that are only inherited by userspace object classes.

Chris PeBenito • 16 years ago

651df3c

trunk: do not emit S_(0, 0, 0) in kernel headers for userspace classes that inherit commons.

Chris PeBenito • 16 years ago

3a9096d

trunk: fix unconditional call to nscd from usermanage run interfaces.

Chris PeBenito • 16 years ago

3662709

trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.

Chris PeBenito • 16 years ago

a27d1c6

trunk: reorganize amanda and bind

Chris PeBenito • 16 years ago

f487827

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

bc01b35

trunk: 10 patches from dan.

Chris PeBenito • 16 years ago

cdf98fe

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 16 years ago

ef659a4

trunk: remove stale user_net_control reference in usernetctl.if.

Chris PeBenito • 16 years ago

81d4c88

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 16 years ago

6c53a10

trunk: module version bumps for previous commit.

Chris PeBenito • 16 years ago

12e9ea1

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 16 years ago

350b6ab

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

3480f3f

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 16 years ago

aef93a7

trunk: xml doc one-liner from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

4ddc7ba

trunk: one-liner from Shintaro Fujiwara.

Chris PeBenito • 16 years ago

ff4085d

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 16 years ago

6f49b49

trunk: add awstats from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

0cf6df5

trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().

Chris PeBenito • 16 years ago

8242f5a

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

14add30

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

134a799

trunk: 6 patches from dan.

Chris PeBenito • 16 years ago

8a9d6f6

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

abc8934

trunk: six patches from dan.

Chris PeBenito • 16 years ago

72f82c4

trunk: udev update and brctl module from dan.

Chris PeBenito • 16 years ago

8241b53

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

016e5c5

trunk: 5 patches from dan.

Chris PeBenito • 16 years ago

0a0b807

trunk: make coda nfs_t, ticket #39.

Chris PeBenito • 16 years ago

ce2c80f

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 16 years ago

4922765

trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.

Chris PeBenito • 16 years ago

6dd721a

trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

a2f4448

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 16 years ago

752ddf5

Update MLS constraints from LSPP evaluated policy.

Chris PeBenito • 16 years ago

d62c088

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 16 years ago

2af7b42

trunk: updates from dan on 9 modules

Chris PeBenito • 16 years ago

8d2c341

trunk: Files and radvd updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

80d5e02

trunk: fix gdm xsession scripts on redhat machines.

Chris PeBenito • 16 years ago

1779bef

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 16 years ago

f8233ab

trunk: several MLS enhancements.

Chris PeBenito • 16 years ago

2d0c9ce

trunk: Database userspace object manager classes from KaiGai Kohei.

Chris PeBenito • 16 years ago

9760cbe

trunk: filesystem patch from dan

Chris PeBenito • 16 years ago

3d6e962

trunk: 3 patches from dan

Chris PeBenito • 16 years ago

939a428

trunk: several support macro fixes.

Chris PeBenito • 16 years ago

c040ea1

trunk: add 3rd party interface for apache cgi.

Chris PeBenito • 16 years ago

371d11e

trunk: fix pipe permission set in domtrans_pattern().

Chris PeBenito • 16 years ago

63acaf5

trunk: add getserv and shmemserv nscd permissions.

Chris PeBenito • 16 years ago

924f3cc

trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

Chris PeBenito • 16 years ago

708aab1

trunk: add application module

Chris PeBenito • 16 years ago

d46cfe4

trunk: fix missed netlabel deprecation

Chris PeBenito • 16 years ago

6929521

trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

f80a0e4

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1da

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4fc

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Chris PeBenito • 17 years ago

e5e55ac

trunk: minor amanda update from dan

Chris PeBenito • 17 years ago

f5842c1

trunk: add rpcbind from dan

Chris PeBenito • 17 years ago

7b61fe5

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

1900668

trunk: pyzor and clamav updates from dan

Chris PeBenito • 17 years ago

2c3ac47

trunk: fix typo in vmware.fc

Chris PeBenito • 17 years ago

22bff65

trunk: nagios update from dan

Chris PeBenito • 17 years ago

02f2c3e

trunk: procmail tweak from dan.

Chris PeBenito • 17 years ago

a90a256

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f08978

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ade

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

5bf9deb

trunk: radius one-liner from dan

Chris PeBenito • 17 years ago

99b5a56

trunk: big samba update from dan

Chris PeBenito • 17 years ago

40df567

trunk: drop snmpd_etc_t.

Chris PeBenito • 17 years ago

788d88c

trunk: confine sendmail and logrotate on targeted

Chris PeBenito • 17 years ago

6c8aba7

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2d

Memprotect support patch from Stephen Smalley.

Chris PeBenito • 17 years ago

41337aa

trunk: 2 patches from dan

Chris PeBenito • 17 years ago

d139413

trunk: add amtu from dan

Chris PeBenito • 17 years ago

a74d1ad

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a8

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

262def1

trunk: 7 simple patches from dan.

Chris PeBenito • 17 years ago

f7101c5

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649aec

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d35

six simple patches from dan

Chris PeBenito • 17 years ago

f6a590d

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

7782966

trunk: fix line in evolution to be strict-only; was being covered up by genhomedircon.

Chris PeBenito • 17 years ago

17b9cb7

trunk: snmp tweak from dan

Chris PeBenito • 17 years ago

a39a931

trunk: remaining pieces for apcupsd module

Chris PeBenito • 17 years ago

c412be6

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf1

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2cb

Patch to begin separating out hald helper programs from Dan Walsh.

Chris PeBenito • 17 years ago

12217cc

add apcupsd from dan

Chris PeBenito • 17 years ago

78f17e6

Fixes for squid, dovecot, and snmp from Dan Walsh.

Chris PeBenito • 17 years ago

b129e20

Miscellaneous consolekit fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4967aaa

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d66

add missing rename_dir_perms

Chris PeBenito • 17 years ago

7f819d8

Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.

Chris PeBenito • 17 years ago

ed4b730

Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.

Chris PeBenito • 17 years ago

517618f

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186c

add rwho from Nalin Dahyabhai

Chris PeBenito • 17 years ago

6a29757

Patch to allow amavis to read spamassassin libraries from Dan Walsh.

Chris PeBenito • 17 years ago

747ab18

trivial aide fix from dan

Chris PeBenito • 17 years ago

ae32fb7

Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.

Chris PeBenito • 17 years ago

f9029fc

trivial fix for netutils from dan

Chris PeBenito • 17 years ago

27c570f

trivial fix from dan for bluetooth

Chris PeBenito • 17 years ago

7487a66

missed piece of clip patch

Chris PeBenito • 17 years ago

b4beb0a

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e528

Replace the old lrrd fc entries with correct munin ones.

Chris PeBenito • 17 years ago

cd16fe6

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc7

Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.

Chris PeBenito • 17 years ago

7a4bd42

bump module versions for release

Chris PeBenito • 17 years ago

0251df3

last piece of previous consolekit patch

Chris PeBenito • 17 years ago

4029f11

add zabbix from dan

Chris PeBenito • 17 years ago

97e8156

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

6974890

more consolekit updates from dan

Chris PeBenito • 17 years ago

99064c9

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284b

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2dee

from dan:

Chris PeBenito • 17 years ago

ebc1e8b

six patches from dan

Chris PeBenito • 17 years ago

9af48ee

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba1

fix http_script_domains, it was incorrectly applied to the content type rather than the script domain. bug #24.

Chris PeBenito • 17 years ago

39d8dcd

emit "null" instead of NULL for userspace headers

Chris PeBenito • 17 years ago

f88ef60

bools in modules fix to require the boolean in optionals that are part of the base module, and move bool declarations in the base module/monolithic

Chris PeBenito • 17 years ago

f6ddd6b

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923c

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65c

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3d

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb4

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d6

Output different header sets for kernel and userland from flask headers.

Chris PeBenito • 17 years ago

e9b0042

deprecated pax class

Chris PeBenito • 17 years ago

1852cda

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a1

one-liner from dan

Chris PeBenito • 17 years ago

cc9130b

patch from dan to have ricci modstorage transition to lvm

Chris PeBenito • 17 years ago

19fd930

add fail2ban from dan

Chris PeBenito • 17 years ago

cd3ee91

kudzu will telinit to make init re-read the inittab after configuring serial consoles

Chris PeBenito • 17 years ago

efcf9df

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eba

create user gpg keys dir patch from dan

Chris PeBenito • 17 years ago

4832f0e

add kvmfs support, from dan

Chris PeBenito • 17 years ago

9378492

trivial patch for radius from dan

Chris PeBenito • 17 years ago

7200146

trivial patch from dan for sysstat access to sysfs

Chris PeBenito • 17 years ago

86b28c9

other part of consolekit addition

Chris PeBenito • 17 years ago

e66689f

from Dan:

Chris PeBenito • 17 years ago

c224d91

patch from Dan for sudo:

Chris PeBenito • 17 years ago

6c20f77

It was just pointed out to me that the raw IP socket class is missing from the

Chris PeBenito • 17 years ago

b50f2ee

fix for rh bug 203290

Chris PeBenito • 17 years ago

0cca516

last bit of dans patch

Chris PeBenito • 17 years ago

b5a6c86

Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.

Chris PeBenito • 17 years ago

cdc91b9

procmail uses /tmp files

Chris PeBenito • 17 years ago

59bedc1

trivial change from dan

Chris PeBenito • 17 years ago

7aefc69

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

Chris PeBenito • 17 years ago

7aca2aa

Patch for gssd fixes from Dan Walsh

Chris PeBenito • 17 years ago

c23eb5b

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c7

lmtp and smtp are the same file require same context of setfiles complains

Chris PeBenito • 17 years ago

f2c69c4

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e1

Patch for kerberized telnet fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4900fdf

Patch for kerberized ftp and other ftp fixes from Dan Walsh.

Chris PeBenito • 17 years ago

09c56f5

Patch for an additional wine executable from Dan Walsh.

Chris PeBenito • 17 years ago

2aea366

Patch for additional games file contexts from Dan Walsh.

Chris PeBenito • 17 years ago

bf39cdb

Add support for libselinux 2.0.5 init_selinuxmnt() changes.

Chris PeBenito • 17 years ago

86d754e

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448bd

Patch for misc fixes to bluetooth from Dan Walsh.

Chris PeBenito • 17 years ago

f0eaed3

On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5b06477

Patch to start deprecating usercanread attribute from Ryan Bradetich.

Chris PeBenito • 17 years ago

bbb7cc8

add dccp_socket object class

Chris PeBenito • 17 years ago

a715dc0

On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

3a39015

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45eae

Patch to remove redundant mls_trusted_object() call from Dan Walsh.

Chris PeBenito • 17 years ago

66cf194

Patch for misc fixes to nis ypxfr policy from Dan Walsh.

Chris PeBenito • 17 years ago

4685213

Patch to allow apmd to telinit from Dan Walsh.

Chris PeBenito • 17 years ago

aeb54c6

While using samba and SELinux with Debian GNU/Linux (etch) the

Chris PeBenito • 17 years ago

d114071

Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.

Chris PeBenito • 17 years ago

bcac3a5

make ttys and ptys device nodes

Chris PeBenito • 17 years ago

f1be09c

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be3

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 17 years ago

10e1209

Clean up file context regexes in apache and java, from Eamon Walsh:

Chris PeBenito • 17 years ago

ff943a1

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5f

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a7

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 17 years ago

d6d16b9

patch from dan for some missing gen_require()s

Chris PeBenito • 17 years ago

563e58e

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 17 years ago

bff9071

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 17 years ago

c31f672

add aide, ccs, and ricci

Chris PeBenito • 17 years ago

fa45da0

This modifies the mls constraint for polmatch in the association class.

Chris PeBenito • 17 years ago

d31d3c1

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 17 years ago

c6a60bb

fixes from gentoo strict testing:

Chris PeBenito • 17 years ago

ed38ca9

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 17 years ago

0f9a2be

Christopher J. PeBenito wrote:

Chris PeBenito • 17 years ago

f497b8d

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 17 years ago

d9845ae

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 17 years ago

5824380

add seutil_rw_config()

Chris PeBenito • 17 years ago

d5ae683

enhanced setransd support from darrel goeddel

Chris PeBenito • 17 years ago

a8671ae

bump versions to release numbers

Chris PeBenito • 17 years ago

a52b4d4

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 17 years ago

b04eccd

make inetd optional

Chris PeBenito • 17 years ago

d4a48c4

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 17 years ago

130f8a4

fix ticket #16

Chris PeBenito • 17 years ago

aeaae51

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 17 years ago

e45324d

fix term_tty() associations

Chris PeBenito • 17 years ago

0e5c544

more realplayer entries

Chris PeBenito • 17 years ago

009b377

gentoo testing fixes.

Chris PeBenito • 17 years ago

14b1684

make optional the inetd dependency in samba

Chris PeBenito • 17 years ago

85f0c35

change transition from run_init to initrc to spec.

Chris PeBenito • 17 years ago

93ddc66

fix some stuff that does not affect policy

Chris PeBenito • 17 years ago

f76d070

apply contested part of russell's last patch

Chris PeBenito • 17 years ago

830c12e

more non .so lib files for acrobat

Chris PeBenito • 17 years ago

546c81c

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 17 years ago

3c3c043

- Move range transitions to modules.

Chris PeBenito • 17 years ago

e070dd2

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 17 years ago

0021906

fix ticket #15.

Chris PeBenito • 17 years ago

f8cfddb

fix corenetwork so the ifdef enable_mls survives to regular processing.

Chris PeBenito • 17 years ago

49317e6

fix build error

Chris PeBenito • 17 years ago

6c63996

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 17 years ago

e2b84ef

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 17 years ago

693d4ae

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 17 years ago

8708d9b

* add a macro for generating category declarations

Chris PeBenito • 17 years ago

a9e03b3

gentoo testing fixes

Chris PeBenito • 17 years ago

bf469d7

add mls fd constraints

Chris PeBenito • 17 years ago

cf7af13

common users list inotifyfs

Chris PeBenito • 17 years ago

2b571d6

forgot to bump policy vers

Chris PeBenito • 17 years ago

9dfbd81

patches from erich Wed, 13 Sep 2006 16:18:18 +0200

Chris PeBenito • 17 years ago

73ca55d

fix miscfiles_read_localization()

Chris PeBenito • 17 years ago

2cac32a

misc fixes

Chris PeBenito • 17 years ago

0d96ff3

clean up usercanread

Chris PeBenito • 17 years ago

376fbc0

add last bit of role infrastructure

Chris PeBenito • 17 years ago

b1bf2f7

cleanups

Chris PeBenito • 17 years ago

95b8223

add main part of role-o-matic

Chris PeBenito • 17 years ago

bbcd3c9

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 17 years ago

75beb95

fix up usb.ids per distro

Chris PeBenito • 17 years ago

91dabf4

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 17 years ago

13d7cec

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 17 years ago

5dbda55

This patch adds a polmatch avperm to arbitrate flow/state's access to

Chris PeBenito • 17 years ago

9b45c60

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 17 years ago

eac818f

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 17 years ago

a5e2133

more testing fixes

Chris PeBenito • 17 years ago

ce6bf7c

This patch enables to use xattr on jffs2 filesystem.

Chris PeBenito • 17 years ago

e539a49

fix gentoo /opt contexts

Chris PeBenito • 17 years ago

de22282

more strict testing fixes

Chris PeBenito • 17 years ago

98de871

more testing fixes

Chris PeBenito • 17 years ago

d15dd5a

fix ordering bug

Chris PeBenito • 17 years ago

5b4ff3a

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 17 years ago

3ef029d

fix typo in sxid

Chris PeBenito • 17 years ago

2ed690d

testing fixes

Chris PeBenito • 17 years ago

e9b9e45

fix for netfilter_contexts

Chris PeBenito • 17 years ago

4bc6e32

cleanup in authlogin

Chris PeBenito • 17 years ago

ba1a545

fix cron_system_entry() rules

Chris PeBenito • 17 years ago

3573908

remove dead selopt rules

Chris PeBenito • 17 years ago

33c7e6b

clean up constraints

Chris PeBenito • 17 years ago

bd56da4

ps/ptrace dontaudit cleanup

Chris PeBenito • 17 years ago

497da09

patch from Stefan for mrtg daemon operation.

Chris PeBenito • 17 years ago

4846dc8

display warning if using loadkeys_domtrans() in targeted

Chris PeBenito • 17 years ago

80f928e

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 17 years ago

85476e9

add authlogin interface to abstract common login program perms

Chris PeBenito • 17 years ago

4b3b46d

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 17 years ago

4655103

more ssh agent fixes

Chris PeBenito • 17 years ago

81aa67f

clean up most of the remaining ssh TODO

Chris PeBenito • 17 years ago

528811e

add gdm Xsession fc

Chris PeBenito • 17 years ago

79f5f5e

remove deprecated mount_send_nfs_client_request() from stunnel

Chris PeBenito • 17 years ago

d617143

add helpers for printing warning and error messages

Chris PeBenito • 17 years ago

ea3c1f5

some cleanup in the kernel layer

Chris PeBenito • 17 years ago

8b9ebd3

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 17 years ago

19ebf01

add access to keys for unconfined

Chris PeBenito • 17 years ago

d822675

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 17 years ago

da9bbc6

remove setbool auditallow, except for distro_rhel4.

Chris PeBenito • 17 years ago

133000c

remove extra level of directory

Chris PeBenito • 17 years ago

17de1b7

rpms / selinux-policy

History policy

rpms / selinux-policy

Source Code

History policy