File history - rpms/selinux-policy - src.fedoraproject.org

Do not ship file_contexts.bin file

Petr Lautrbach • 6 years ago

dba350c

* Sun Oct 08 2017 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-293

Petr Lautrbach • 6 years ago

918bdde

Drop policyhelp utility

Petr Lautrbach • 6 years ago

00cdacf

* Tue Oct 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-292

Lukas Vrabec • 6 years ago

75b1898

* Tue Oct 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-291

Lukas Vrabec • 6 years ago

65c1dc9

Merge #2 `Remove trailing whitespace in default /etc/selinux/config`

Lukas Vrabec • 6 years ago

aab02e4

* Fri Sep 29 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-290

Lukas Vrabec • 6 years ago

e8dfe68

Remove trailing whitespace in default /etc/selinux/config

Colin Walters • 6 years ago

5fdac71

* Wed Sep 27 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-289

Lukas Vrabec • 6 years ago

233534c

setfiles command produce unnecessary output during selinux-policy package update. This patch redirect stdout of setfiles to /dev/null.

Lukas Vrabec • 6 years ago

8587149

* Fri Sep 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-288

Lukas Vrabec • 6 years ago

12fd904

* Fri Sep 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-287

Lukas Vrabec • 6 years ago

fc41f8a

* Mon Sep 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-286

Lukas Vrabec • 6 years ago

7c73871

* Thu Sep 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-285

Lukas Vrabec • 6 years ago

6551841

* Thu Sep 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-284

Lukas Vrabec • 6 years ago

83eed32

Add /var/lib/sepolgen/interface_info to %files section in selinux-policy-devel

Lukas Vrabec • 6 years ago

76e1d24

* Tue Sep 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283

Lukas Vrabec • 6 years ago

c3f53c2

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-282

Lukas Vrabec • 6 years ago

4dfc5f6

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-281

Lukas Vrabec • 6 years ago

65f16bb

* Thu Sep 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-280

Lukas Vrabec • 6 years ago

b9bc43a

* Tue Sep 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-279

Lukas Vrabec • 6 years ago

fcebe07

* Thu Aug 31 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-278

Lukas Vrabec • 6 years ago

313e17b

* Mon Aug 28 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-277

Lukas Vrabec • 6 years ago

0c6eef9

* Sat Aug 26 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-276

Lukas Vrabec • 6 years ago

2b14b69

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-275

Lukas Vrabec • 6 years ago

c1ce08e

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-274

Lukas Vrabec • 6 years ago

b7314ca

* Tue Aug 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-273

Lukas Vrabec • 6 years ago

681ffa2

* Tue Aug 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-272

Lukas Vrabec • 6 years ago

284401b

Remove temporary fix labeling cockpit binary

Lukas Vrabec • 6 years ago

c6aaaee

* Mon Aug 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-271

Lukas Vrabec • 6 years ago

be2df80

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-270

Lukas Vrabec • 6 years ago

7a49a1c

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 6 years ago

9a31f21

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-269

Lukas Vrabec • 6 years ago

ff3605a

Fix bogus date for 3.13.1-267 changelog entry

Petr Lautrbach • 6 years ago

cf21eb3

* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-268

Petr Lautrbach • 6 years ago

b652953

* Fri Aug 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-267

Lukas Vrabec • 6 years ago

631f95b

Revert "Temporary fix while creating manpages using sepolicy is broken."

Petr Lautrbach • 6 years ago

0eccbd9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

Fedora Release Engineering • 6 years ago

f0d7feb

* Fri Jul 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-265

Lukas Vrabec • 6 years ago

4696e7e

* Mon Jul 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264

Lukas Vrabec • 6 years ago

3622c01

* Tue Jul 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-263

Lukas Vrabec • 6 years ago

ab9bb05

* Mon Jul 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-262

Lukas Vrabec • 6 years ago

6fc6359

* Fri Jun 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261

Lukas Vrabec • 6 years ago

959229d

Fix commands how to create downstream patches

Lukas Vrabec • 6 years ago

c8dc450

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-260

Lukas Vrabec • 6 years ago

8c093f2

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258

Lukas Vrabec • 6 years ago

fa95f25

* Thu Jun 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257

Lukas Vrabec • 6 years ago

7ac1cbb

* Mon Jun 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256

Lukas Vrabec • 6 years ago

941d5af

* Thu May 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255

Lukas Vrabec • 6 years ago

6c0472a

* Mon May 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254

Lukas Vrabec • 6 years ago

c1e28f6

* Fri May 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253

Lukas Vrabec • 6 years ago

dfee3be

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

fe274d0

Do not ship .linked files

Petr Lautrbach • 7 years ago

3332d5b

Add safeguard around "semodule -n -d sandbox"

Michael Scherer • 7 years ago

c8b7cd4

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251

Lukas Vrabec • 7 years ago

e08cffb

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250

Lukas Vrabec • 7 years ago

c088479

* Mon Apr 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249

Lukas Vrabec • 7 years ago

0d1055a

Put tomcat_t back in unconfined domains for now. BZ(1436434)

Adam Williamson • 7 years ago

f993349

* Tue Mar 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247

Lukas Vrabec • 7 years ago

b8c3e1f

* Sat Mar 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246

Lukas Vrabec • 7 years ago

b3dccbc

* Fri Mar 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-245

Lukas Vrabec • 7 years ago

96feeb5

fix up other docs source

Peter Robinson • 7 years ago

469c7cb

use correct source for man pages (hint: 'fedpkg local' is a quick way to test)

Peter Robinson • 7 years ago

88d4af7

* Tue Mar 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-244 - Update fwupd policy - /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t - Update ganesha policy - Allow chronyd to read adjtime - Merge pull request #194 from hogarthj/certbot_policy - get the correct cert_t context on certbot certificates bz#1289778 - Label /dev/ss0 as gpfs_device_t

Lukas Vrabec • 7 years ago

0cdcb41

Fix broken build

Lukas Vrabec • 7 years ago

fe778a9

* Thu Mar 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-243

Lukas Vrabec • 7 years ago

b77d5e5

Temporary fix while creating manpages using sepolicy is broken.

Lukas Vrabec • 7 years ago

fbdb6e9

* Mon Feb 27 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-242

Lukas Vrabec • 7 years ago

73a41e1

* Tue Feb 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-241

Lukas Vrabec • 7 years ago

acb049d

* Wed Feb 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-240

Lukas Vrabec • 7 years ago

9930e8f

* Mon Feb 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239

Lukas Vrabec • 7 years ago

7c40aea

* Thu Feb 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238

Lukas Vrabec • 7 years ago

67dffb1

* Wed Feb 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-237

Lukas Vrabec • 7 years ago

fd7fb37

* Thu Feb 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-236

Lukas Vrabec • 7 years ago

bab4787

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-235

Lukas Vrabec • 7 years ago

5ed9932

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-234

Lukas Vrabec • 7 years ago

a4801c8

* Sun Jan 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-233

Lukas Vrabec • 7 years ago

cb674ac

* Fri Jan 06 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232

Lukas Vrabec • 7 years ago

3f98d50

* Wed Dec 14 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-231

Lukas Vrabec • 7 years ago

aabe3f0

* Thu Dec 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230

Lukas Vrabec • 7 years ago

6319c49

* Wed Dec 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229

Lukas Vrabec • 7 years ago

68b6891

* Mon Dec 05 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 7 years ago

7216220

Exit postInstall state in mls package

Lukas Vrabec • 7 years ago

6a99358

* Tue Nov 29 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227

Lukas Vrabec • 7 years ago

bc46371

* Wed Nov 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 7 years ago

99509b3

* Wed Nov 09 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225

Lukas Vrabec • 7 years ago

eae2c63

* Tue Nov 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224

Lukas Vrabec • 7 years ago

89fc5f1

* Mon Nov 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223

Lukas Vrabec • 7 years ago

25e7924

* Wed Nov 02 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-222

Lukas Vrabec • 7 years ago

2bb5c83

Bump release to -221.

Miroslav Grepl • 7 years ago

cb85251

* Mon Oct 17 2016 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-221

Miroslav Grepl • 7 years ago

ec8dddb

* Sun Oct 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220

Lukas Vrabec • 7 years ago

dad1b66

* Mon Oct 10 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219

Lukas Vrabec • 7 years ago

8610886

Rename docker-selinux to container-selinux package

Lukas Vrabec • 7 years ago

ab3db24

Revert addition of systemd service for factory reset, since it is

Colin Walters • 7 years ago

3b618f3

* Thu Sep 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-216

Lukas Vrabec • 7 years ago

25813e2

* Fri Sep 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-215

Lukas Vrabec • 7 years ago

4efe5ab

Provide rpm macros for packages installing SELinux modules

Petr Lautrbach • 7 years ago

c49229e

* Thu Sep 15 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-214

Lukas Vrabec • 7 years ago

fec8280

Do a factory reset when there's no policy.kern file in a store

Petr Lautrbach • 7 years ago

be68cca

Do not hardcode targeted in installCmds()

Petr Lautrbach • 7 years ago

e3bf3ed

Update conflicts with docker-selinux

Lukas Vrabec • 7 years ago

96a0f66

* Fri Sep 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-213

Lukas Vrabec • 7 years ago

f6de2d2

* Wed Aug 31 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-212

Lukas Vrabec • 7 years ago

69374e6

* Thu Aug 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211

Lukas Vrabec • 7 years ago

0c7ae4b

* Tue Aug 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-210

Lukas Vrabec • 7 years ago

ba0eef5

* Tue Aug 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-209

Lukas Vrabec • 7 years ago

6140a0d

* Fri Aug 12 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-208

Lukas Vrabec • 7 years ago

3478003

* Thu Aug 04 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-207

Lukas Vrabec • 7 years ago

0ab5f5b

* Tue Aug 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-206

Lukas Vrabec • 7 years ago

4d7576a

* Fri Jul 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-205

Lukas Vrabec • 7 years ago

247a84c

* Tue Jul 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-204

Lukas Vrabec • 7 years ago

95987e7

* Mon Jul 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-203

Lukas Vrabec • 7 years ago

5b18dd6

Fix new version of policy

Lukas Vrabec • 7 years ago

b8e5c7b

* Wed Jul 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-202

Lukas Vrabec • 7 years ago

449da6b

* Mon Jul 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-201

Lukas Vrabec • 7 years ago

1ad8909

Add snapperd_contexts to rpm filelist

Lukas Vrabec • 7 years ago

c3183ad

* Tue Jul 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-200

Lukas Vrabec • 7 years ago

6c34b38

* Tue Jun 28 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-199

Lukas Vrabec • 7 years ago

962020b

* Wed Jun 22 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-198

Lukas Vrabec • 7 years ago

8037d64

Fix typo in changelog

Lukas Vrabec • 7 years ago

a24ea5d

* Thu Jun 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-197

Lukas Vrabec • 7 years ago

4a34c4f

* Mon Jun 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-196

Lukas Vrabec • 7 years ago

be9b0d1

* Thu Jun 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-195

Lukas Vrabec • 7 years ago

04ed479

* Tue Jun 07 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-194

Lukas Vrabec • 7 years ago

c2ab480

* Mon May 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-193

Lukas Vrabec • 7 years ago

2506c08

* Wed May 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-192

Lukas Vrabec • 7 years ago

3289d15

* Tue May 24 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191

Lukas Vrabec • 7 years ago

4c0ceef

* Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190

Lukas Vrabec • 7 years ago

5e78b00

* Tue May 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189

Lukas Vrabec • 7 years ago

a2f43d9

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 7 years ago

d395cb9

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 7 years ago

504f8fd

Revert "Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 7 years ago

fc75a66

Revert "Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 7 years ago

627ba30

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 7 years ago

b62b4ef

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 7 years ago

ada2305

* Mon May 09 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-188

Lukas Vrabec • 7 years ago

70515f6

* Thu May 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-187

Lukas Vrabec • 7 years ago

7ff0b8b

* Fri Apr 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-186

Lukas Vrabec • 7 years ago

7a1df1e

* Wed Apr 27 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-185

Lukas Vrabec • 7 years ago

02b9e47

* Tue Apr 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-184

Lukas Vrabec • 7 years ago

3433264

* Mon Apr 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-183

Lukas Vrabec • 8 years ago

64f8164

* Fri Apr 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-182

Lukas Vrabec • 8 years ago

4c61782

* Fri Apr 01 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-181

Lukas Vrabec • 8 years ago

c130010

* Wed Mar 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-180

Lukas Vrabec • 8 years ago

fac3fc9

Fix spec file by adding also 'Requires' where it is need not just only 'Requires(pre)'. rhbz#1319119

Lukas Vrabec • 8 years ago

610d03d

There's no need to repeat files for all subsets again and again when

Lukas Vrabec • 8 years ago

2f93136

* Wed Mar 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-179

Lukas Vrabec • 8 years ago

3f0021e

* Thu Mar 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-178

Lukas Vrabec • 8 years ago

cdb2ae4

* Tue Mar 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-177

Lukas Vrabec • 8 years ago

d14d370

* Thu Mar 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-176

Lukas Vrabec • 8 years ago

9fc76d9

Build file_contexts.bin file_context.local.bin file_context.homedir.bin during build phase. This fix issue in Fedora live images when selinux-policy-targeted is not installed but just unpackaged, since there's no .bin files, file_contexts is parsed in selabel_open(). Resolves: rhbz#1314372

Lukas Vrabec • 8 years ago

dd88f3a

This change was originally introduced to fix contexts of files in

Lukas Vrabec • 8 years ago

a99d75d

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-175

Lukas Vrabec • 8 years ago

ca25751

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-174

Lukas Vrabec • 8 years ago

e98b099

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-173

Lukas Vrabec • 8 years ago

7ac3a50

* Thu Feb 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-172

Lukas Vrabec • 8 years ago

352a55a

Lukas Vrabec • 8 years ago

5d7b1f6

* Thu Feb 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-171

Lukas Vrabec • 8 years ago

d6823d3

* Wed Feb 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-170

Lukas Vrabec • 8 years ago

ead49a5

* Wed Feb 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-169

Lukas Vrabec • 8 years ago

edb36e0

* Wed Jan 20 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-168

Lukas Vrabec • 8 years ago

4c488a6

* Mon Jan 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-167

Lukas Vrabec • 8 years ago

6d3ee17

* Wed Jan 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-166

Lukas Vrabec • 8 years ago

5d165e3

* Wed Jan 06 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-165

Lukas Vrabec • 8 years ago

936bb7a

* Tue Dec 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-164

Lukas Vrabec • 8 years ago

f1750fb

Add missing noreplace flag to file: %{_sysconfdir}/selinux/%1/contexts/files/file_contexts.local

Lukas Vrabec • 8 years ago

ad3add7

* Wed Dec 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-163

Lukas Vrabec • 8 years ago

5c898c0

- Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)

Miroslav Grepl • 8 years ago

2b449e6

* Mon Nov 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-161

Lukas Vrabec • 8 years ago

71a663b

* Tue Nov 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160

Lukas Vrabec • 8 years ago

78826f0

/usr/sbim/semanage has been moved to policycoreutils-python-utils package which needs to be require in Post section for selinux-policy-minumum package.

Miroslav Grepl • 8 years ago

2fc3e7c

- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)

Miroslav Grepl • 8 years ago

0e84535

We need to cop *.local policy files to keep local customizations also after upgrades between old and new module store location. BZ(#1279621).

Miroslav Grepl • 8 years ago

982e483

- Merge pull request #48 from lkundrak/contrib-openfortivpn

Miroslav Grepl • 8 years ago

db55b65

- The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.

Miroslav Grepl • 8 years ago

02b3744

We want conflicts with docker-selinux not docker package.

Lukas Vrabec • 8 years ago

0a89ba8

* Tue Oct 27 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-156

Lukas Vrabec • 8 years ago

66791f9

Add conflict with docker lower or eq as docker-1.9.0-9

Lukas Vrabec • 8 years ago

0f46e07

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-155

Lukas Vrabec • 8 years ago

5d2c760

docker policy files support

Lukas Vrabec • 8 years ago

fadb0d2

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-154

Lukas Vrabec • 8 years ago

0bdc248

* Tue Oct 13 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-153

Lukas Vrabec • 8 years ago

2bd687c

* Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152

Lukas Vrabec • 8 years ago

a6a2539

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-151

Lukas Vrabec • 8 years ago

0927e3f

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150

Lukas Vrabec • 8 years ago

6151483

* Tue Sep 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-149

Lukas Vrabec • 8 years ago

b03747c

* Tue Sep 22 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-148

Lukas Vrabec • 8 years ago

ec0c1bc

Added support for permissive domains

Lukas Vrabec • 8 years ago

7c8404d

* Mon Sep 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-147

Lukas Vrabec • 8 years ago

2818673

Add files homedir_template and users_extra to selinux-policy-* packages.

Lukas Vrabec • 8 years ago

73a6a99

* Tue Sep 01 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-146

Lukas Vrabec • 8 years ago

f1ab24f

* Sun Aug 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-145

Lukas Vrabec • 8 years ago

0d70340

* Mon Aug 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-144

Lukas Vrabec • 8 years ago

96de566

- Add ipmievd policy creaed by vmojzis@redhat.com

Miroslav Grepl • 8 years ago

f5f6812

We should be able to do builds with neverallow check with new 2.4 userspace and fix the latest policy fixes.

Miroslav Grepl • 8 years ago

4d09730

* Tue Aug 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-142

Lukas Vrabec • 8 years ago

1ba0a98

* Mon Aug 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-141

Lukas Vrabec • 8 years ago

28b73b2

- firewalld needs to relabel own config files. BZ(#1250537)

Miroslav Grepl • 8 years ago

d8af5a7

* Tue Aug 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-139

Lukas Vrabec • 8 years ago

f35d902

Remove old trigger selinux-policy-targeted-3.12.1-75 for relabeling home.

Lukas Vrabec • 8 years ago

c632013

Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 8 years ago

ceff8ba

Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 8 years ago

ae80a5c

Move man pages from selinux-policy-devel to selinux-policy-doc

Lukas Vrabec • 8 years ago

d6fa252

* Mon Jul 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-138

Lukas Vrabec • 8 years ago

e5e6b1e

Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.

Miroslav Grepl • 8 years ago

57b06e2

Prepare selinux-policy package for SELinux store migration

Petr Lautrbach • 8 years ago

a345bb5

* Wed Jul 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-137

Lukas Vrabec • 8 years ago

04f749c

* Tue Jul 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-136

Lukas Vrabec • 8 years ago

ee724ad

* Thu Jul 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-135

Lukas Vrabec • 8 years ago

f53ebea

* Thu Jul 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-134

Lukas Vrabec • 8 years ago

d04212c

* Tue Jun 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-133

Lukas Vrabec • 8 years ago

1428c0c

* Mon Jun 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-132

Lukas Vrabec • 8 years ago

20e7f0e

* Tue Jun 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-131

Lukas Vrabec • 8 years ago

7100c57

- Allow glusterd to interact with gluster tools running in a user domain

Miroslav Grepl • 8 years ago

66628ce

- We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 8 years ago

8f46225

We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 8 years ago

19cd06e

See Changelog for all changes.

Miroslav Grepl • 8 years ago

5bcffd3

Update selinux-policy.spec to show how to create policy patches from https://github.com/fedora-selinux/selinux-policy

Miroslav Grepl • 8 years ago

26e9deb

Minor spec file fixes:

Petr Lautrbach • 8 years ago

9cef10b

* Tue May 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-127

Lukas Vrabec • 8 years ago

6a726d4

* Mon Apr 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-126

Lukas Vrabec • 8 years ago

229bf3d

Fix bad date

Lukas Vrabec • 9 years ago

c4df3c0

* Mon Apr 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-125

Lukas Vrabec • 9 years ago

0bfe8f4

* Wed Apr 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-124

Lukas Vrabec • 9 years ago

28cc160

* Wed Apr 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-123

Lukas Vrabec • 9 years ago

578b670

* Tue Apr 07 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-122

Lukas Vrabec • 9 years ago

b9a1c72

* Mon Mar 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-121

Lukas Vrabec • 9 years ago

5852f33

* Mon Mar 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-120

Lukas Vrabec • 9 years ago

734dd8a

* Wed Mar 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-119

Lukas Vrabec • 9 years ago

f9d9771

* Mon Mar 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-118

Lukas Vrabec • 9 years ago

e2a064a

* Fri Mar 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-117

Lukas Vrabec • 9 years ago

ed576d5

* Fri Mar 06 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-116

Lukas Vrabec • 9 years ago

b61b8da

* Thu Mar 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-115

Lukas Vrabec • 9 years ago

f6c1168

* Mon Feb 25 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-114

Lukas Vrabec • 9 years ago

2ee001b

Fix source filepath for moving html files.

Lukas Vrabec • 9 years ago

6acb58c

* Mon Feb 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-113

Lukas Vrabec • 9 years ago

946068c

* Mon Feb 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-112

Lukas Vrabec • 9 years ago

83d645c

* Tue Feb 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-111

Lukas Vrabec • 9 years ago

e793323

* Thu Feb 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-110

Lukas Vrabec • 9 years ago

ae5733a

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-109

Lukas Vrabec • 9 years ago

1fd39e9

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-108

Lukas Vrabec • 9 years ago

203031a

* Thu Feb 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-107

Lukas Vrabec • 9 years ago

1808b75

* Thu Jan 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-106

Lukas Vrabec • 9 years ago

a849531

* Thu Jan 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-104

Lukas Vrabec • 9 years ago

72c96b3

Make build working

Miroslav Grepl • 9 years ago

525ad65

Add /etc/selinux/targeted/contexts/openssh_contexts

Dan Walsh • 9 years ago

f1ed4e4

* Mon Dec 15 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-101

Lukas Vrabec • 9 years ago

6eb7265

* Thu Dec 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-100

Lukas Vrabec • 9 years ago

e4ea461

* Fri Dec 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-99

Lukas Vrabec • 9 years ago

1c8cf31

* Fri Nov 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-98

Lukas Vrabec • 9 years ago

cf94d6b

Fix date bug

Lukas Vrabec • 9 years ago

b527095

* Fri Nov 27 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-97

Lukas Vrabec • 9 years ago

e4d7a40

* Thu Nov 20 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-96

Lukas Vrabec • 9 years ago

48f969d

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-95

Lukas Vrabec • 9 years ago

feb8dbd

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-94

Lukas Vrabec • 9 years ago

c88e657

* Fri Nov 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-93

Lukas Vrabec • 9 years ago

24d43eb

* Mon Nov 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-92

Lukas Vrabec • 9 years ago

b6161d4

* Fri Nov 07 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-91

Lukas Vrabec • 9 years ago

062b36f

Fixed mistakes in build.

Lukas Vrabec • 9 years ago

ba65f59

* Mon Nov 03 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-90

Lukas Vrabec • 9 years ago

a38ffbf

Fix wrong url link to upstream.

Lukas Vrabec • 9 years ago

4dfcf7b

* Wed Oct 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-89

Lukas Vrabec • 9 years ago

af3cfa7

* Tue Oct 21 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-88

Lukas Vrabec • 9 years ago

317f5a1

- Allow systemd-networkd to be running as dhcp client.

Miroslav Grepl • 9 years ago

650be6a

* Tue Oct 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-86

Lukas Vrabec • 9 years ago

8db354a

* Mon Oct 06 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-85

Lukas Vrabec • 9 years ago

cf89798

* Tue Sep 30 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-84

Lukas Vrabec • 9 years ago

245c83e

* Mon Sep 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-83

Lukas Vrabec • 9 years ago

3430335

- Allow du running in logwatch_t read hwdata.

Miroslav Grepl • 9 years ago

0399c8b

* Thu Sep 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-81

Lukas Vrabec • 9 years ago

6021c02

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-80

Lukas Vrabec • 9 years ago

ae5a648

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-79

Lukas Vrabec • 9 years ago

6c07cc8

Fix release number

Lukas Vrabec • 9 years ago

6823c75

* Tue Sep 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-78

Lukas Vrabec • 9 years ago

9532ecd

* Thu Aug 28 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-77

Lukas Vrabec • 9 years ago

c463599

* Tue Aug 26 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-76

Lukas Vrabec • 9 years ago

45b429e

* Fri Aug 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-75

Lukas Vrabec • 9 years ago

f9cc8e0

Rebuild for rpm bug 1131960

Kevin Fenzi • 9 years ago

5f1085b

* Mon Aug 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-73

Lukas Vrabec • 9 years ago

9229b61

* Tue Aug 12 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-72

Lukas Vrabec • 9 years ago

3399c51

* Mon Aug 4 2014 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-71

Miroslav Grepl • 9 years ago

0bd1c47

- Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.

Miroslav Grepl • 9 years ago

c950f2d

fix license handling

Tom Callaway • 9 years ago

4abfbc5

- Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow user

Miroslav Grepl • 9 years ago

540429c

* Thu Jul 24 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-67

Lukas Vrabec • 9 years ago

0a90ee7

- Revert labeling back to /var/run/systemd/initctl/fifo

Miroslav Grepl • 9 years ago

6683373

* Fri Jul 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-65

Lukas Vrabec • 9 years ago

ee1386c

* Mon Jul 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-64

Lukas Vrabec • 9 years ago

3e33a0a

- If I can create a socket I need to be able to set the attributes

Miroslav Grepl • 9 years ago

682896c

- Allow swift to use tcp/6200 swift port

Miroslav Grepl • 9 years ago

24862fd

Fix spec file issues

Miroslav Grepl • 9 years ago

e00cf0a

permissivedomains.pp should not be in MLS

Miroslav Grepl • 9 years ago

9c9e4dd

* Fri Jun 20 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-61

Miroslav Grepl • 9 years ago

211fb99

* Thu Jun 19 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-60

Miroslav Grepl • 9 years ago

c04c318

Merge user_tmp patches to base patches

Miroslav Grepl • 9 years ago

c629d27

* Tue Jun 17 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.+- Allow system_bus_types to use stream_sockets inherited

Miroslav Grepl • 9 years ago

1c0c710

- Add mozilla_plugin_use_bluejeans boolean

Miroslav Grepl • 9 years ago

a629498

- Allow staff_t to communicate and run docker

Miroslav Grepl • 9 years ago

686a380

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

Dennis Gilmore • 9 years ago

07a8be1

- Add decl for cockip port

Miroslav Grepl • 9 years ago

0ddb744

- geard seems to do a lot of relabeling

Miroslav Grepl • 9 years ago

cccaf8f

Bump version

Miroslav Grepl • 9 years ago

7768984

* Tue May 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-

Miroslav Grepl • 9 years ago

dfbb9ac

- Added iotop policy. Thanks William Brown

Miroslav Grepl • 9 years ago

dbf4ab8

- More rules for gears and openshift

Miroslav Grepl • 9 years ago

6fbf460

* Wed May 7 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-51

Miroslav Grepl • 9 years ago

4c682c4

- selinux_unconfined_type should not be able to set booleans if the securemode is set

Miroslav Grepl • 9 years ago

9d0057f

- Fix labeling for /root/\.yubico

Miroslav Grepl • 9 years ago

4e5d63b

- Fix virt_use_samba boolean

Miroslav Grepl • 9 years ago

3f5abd2

- mongod should not be a part of cloudforms.pp

Miroslav Grepl • 9 years ago

bf38d6f

- Allow init_t to setattr/relabelfrom dhcp state files

Miroslav Grepl • 10 years ago

7ca2b30

* Tue Apr 8 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-45

Miroslav Grepl • 10 years ago

1aabaf6

- Change hsperfdata_root to have as user_tmp_t

Miroslav Grepl • 10 years ago

3f1341d

- Add labels for /var/named/chroot_sdb/dev devices

Miroslav Grepl • 10 years ago

c14474e

* Tue Apr 1 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-42

Miroslav Grepl • 10 years ago

33665e5

- Turn on gear_port_t

Miroslav Grepl • 10 years ago

f8f75f9

- update storage_filetrans_all_named_dev for sg* devices

Miroslav Grepl • 10 years ago

1f53e62

- Manage_service_perms should include enable and disable, need backport to RHEL7

Miroslav Grepl • 10 years ago

8ad9144

Remove smstools.pp to make upgrade working

Miroslav Grepl • 10 years ago

443a36e

Create base.lst which contains list of base policy modules

Miroslav Grepl • 10 years ago

38dae99

- Label sddm as xdm_exec_t to make KDE working again

Miroslav Grepl • 10 years ago

8e18cc2

- Allow collectd to talk to libvirt

Miroslav Grepl • 10 years ago

6337678

- Add additional fixes for systemd_networkd_t

Miroslav Grepl • 10 years ago

3f9fe17

- sshd to read network sysctls

Miroslav Grepl • 10 years ago

0575d64

bump release

Miroslav Grepl • 10 years ago

648f905

* Wed Mar 12 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-34

Miroslav Grepl • 10 years ago

695bbc8

- Allow init_t to stream connect to ipsec

Miroslav Grepl • 10 years ago

ab84f40

- Allow numad to write scan_sleep_millisecs

Miroslav Grepl • 10 years ago

24a25f2

- Modify xdm_write_home to allow create files/links in /root with xdm_home_t

Miroslav Grepl • 10 years ago

2d6801d

- Allow block_suspend cap2 for systemd-logind and rw dri device

Miroslav Grepl • 10 years ago

08fe2e4

* Fri Feb 28 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-29

Miroslav Grepl • 10 years ago

18bb7ec

Remove vbetool we no longer ship this

Dan Walsh • 10 years ago

96f7ac4

- Allow bumblebeed to send signal to insmod

Miroslav Grepl • 10 years ago

4390630

- Make unconfined_service_t valid in enforcing

Miroslav Grepl • 10 years ago

3e0039f

- Add labeling for /usr/sbin/amavi

Miroslav Grepl • 10 years ago

74ec503

* Tue Feb 18 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-25

Miroslav Grepl • 10 years ago

60668f6

Add nsplugin.pp and qemu.pp as two additional policies that we no longer ship

Dan Walsh • 10 years ago

0474cb5

Fix selinux config file

Miroslav Grepl • 10 years ago

3dc79f5

Make sure selinux-policy owns the rpmconfigdir and macros.d so it does not build a require for rpm

Dan Walsh • 10 years ago

fdaea44

- Dontaudit rendom domains listing /proc and hittping system_map_t

Miroslav Grepl • 10 years ago

7a72770

- Addopt corenet rules for unbound-anchor to rpm_script_t

Miroslav Grepl • 10 years ago

05a36cd

- Fix /dev/vfio/vfio labeling

Miroslav Grepl • 10 years ago

6383860

- Add kernel_mounton_messages() interface

Miroslav Grepl • 10 years ago

fc059db

- Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring

Miroslav Grepl • 10 years ago

a853036

- Add net_admin also for systemd_passwd_agent_t

Miroslav Grepl • 10 years ago

2b1129d

Fix the day of the week

Dan Walsh • 10 years ago

98a6852

- Add haproxy_connect_any boolean

Miroslav Grepl • 10 years ago

f8d8547

- init calling needs to be optional in domain.te

Miroslav Grepl • 10 years ago

254b159

Remove conflict for pki-selinux

Miroslav Grepl • 10 years ago

f4d3efd

- New access needed to allow docker + lxc +SELinux to work together

Miroslav Grepl • 10 years ago

d7f0c3c

- Add cron unconfined role support for uncofined SELinux user

Miroslav Grepl • 10 years ago

3a0ebd8

index.html and style.css should be in /usr/share/selinux/devel/htm

Miroslav Grepl • 10 years ago

5dcd635

See spec file

Miroslav Grepl • 10 years ago

368fb80

* Mon Jan 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-13

Miroslav Grepl • 10 years ago

5bd1f1a

- Add gluster fixes

Miroslav Grepl • 10 years ago

9b85087

- Allow mozilla plugin to chat with policykit, needed for spice

Miroslav Grepl • 10 years ago

9d88e18

policy-rawhide-contrib-apache-content.patch is no longer needed. Merged to policy-rawhide-contrib.patch.

Miroslav Grepl • 10 years ago

804870d

Fix usage of semanage import line

Dan Walsh • 10 years ago

70c60d8

Add selinux/minimum/contexts/users/sysadm_u also for minimum policy

Miroslav Grepl • 10 years ago

c9394c3

Fix spec file

Miroslav Grepl • 10 years ago

74b303e

- Allow freeipmi_ipmidetectd_t to use freeipmi port

Miroslav Grepl • 10 years ago

2397102

- DRM master and input event devices are used by the TakeDevice API

Miroslav Grepl • 10 years ago

4b8334d

- Add back fixes for gnome_role_template()

Miroslav Grepl • 10 years ago

676f0e4

- Add lsmd_plugin_t for lsm plugins

Miroslav Grepl • 10 years ago

d61adff

- Add filename transition also for servicelog.db-journal

Miroslav Grepl • 10 years ago

c9b9ed2

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-5

Miroslav Grepl • 10 years ago

3abf051

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-4

Miroslav Grepl • 10 years ago

d20212a

- Add policy-rawhide-contrib-apache-content.patch to re-write apache_content_template() by dwalsh

Miroslav Grepl • 10 years ago

4fc70e2

Fix config.tgz to include lxc_contexts and systemd_contexts

Dan Walsh • 10 years ago

164fa39

* Wed Nov 13 2013 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-1

Miroslav Grepl • 10 years ago

269ef09

Upload new upstream sources

Miroslav Grepl • 10 years ago

0f9b0de

- Fix passenger_stream_connect interface

Miroslav Grepl • 10 years ago

73ec2c3

* Fri Nov 8 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-99

Miroslav Grepl • 10 years ago

90f9264

- Add files_relabel_base_file_types() interface

Miroslav Grepl • 10 years ago

c872e59

- Add label only for redhat.repo instead of /etc/yum.repos.d. But probably we will need to switch for the directory.

Miroslav Grepl • 10 years ago

c5e7e5b

Fix spec file

Miroslav Grepl • 10 years ago

6bf18ad

* Fri Oct 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-96

Miroslav Grepl • 10 years ago

18a1aca

Do remove regardless. Update config.tgz with new labels for virt.

Dan Walsh • 10 years ago

d11521e

scratch build

Miroslav Grepl • 10 years ago

cd5d972

Fix spec file to use systemd_context instead of sytemd_context

Miroslav Grepl • 10 years ago

d4e55c7

- Allow sysadm_t to read login information

Miroslav Grepl • 10 years ago

bf49904

Add fix to place sytemd_contexts

Miroslav Grepl • 10 years ago

4f67cf8

* Thu Oct 24 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-93

Miroslav Grepl • 10 years ago

bb6a1f3

- Allow sshd_t to read openshift content, needs backport to RHEL6.5

Miroslav Grepl • 10 years ago

2d3bd44

Add rtas policy

Miroslav Grepl • 10 years ago

71bb644

- Allow mailserver_domains to manage and transition to mailman data

Miroslav Grepl • 10 years ago

37ab076

- Fix gnome_read_generic_data_home_files()

Miroslav Grepl • 10 years ago

99c4513

Need to create the policy.kern symbolic link in the shipping policy.

Dan Walsh • 10 years ago

973ebb8

- Add auth_exec_chkpwd interface

Miroslav Grepl • 10 years ago

ce98dfd

- init reload from systemd_localed_t

Miroslav Grepl • 10 years ago

17233e7

Fix spec file

Miroslav Grepl • 10 years ago

7a5c555

- Fix nscd_shm_use()

Miroslav Grepl • 10 years ago

06b8c05

* Wed Oct 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-85

Miroslav Grepl • 10 years ago

05e00dc

- Fix labeling for /usr/libexec/kde4/kcmdatetimehelper

Miroslav Grepl • 10 years ago

dc36731

- Do not build sanbox pkg on MLS

Miroslav Grepl • 10 years ago

26f445b

Only build the sandbox.pp file for targeted

Dan Walsh • 10 years ago

b03c865

- wine_tmp is no longer needed

Miroslav Grepl • 10 years ago

d7f8527

- Dontaudit attempts by sosreport to read shadow_t

Miroslav Grepl • 10 years ago

3d49b27

- Allow ldconfig to write to kdumpctl fifo files

Miroslav Grepl • 10 years ago

fcf0156

Allow block_suspend cap for samba-net

Dan Walsh • 10 years ago

3fc099d

Allow block_suspend cap for samba-net

Dan Walsh • 10 years ago

030f138

Fix the spec file to use correct version

Miroslav Grepl • 10 years ago

4b47825

- Allow block_suspend cap for samba-net

Miroslav Grepl • 10 years ago

2411e6a

Fix nameing of rpm macro

Dan Walsh • 10 years ago

26bb0a1

Cleanup related to init_domain()+inetd_domain fixes

Dan Walsh • 10 years ago

1b0e092

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 10 years ago

b8f3f18

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 10 years ago

b6a163f

- selinux_set_enforce_mode needs to be used with type

Miroslav Grepl • 10 years ago

3b361c5

unversioned doc dir change

Dan Walsh • 10 years ago

0ea841f

- Add more aliases in pegasus.te

Miroslav Grepl • 10 years ago

5ed5445

- Allow xdm_t to act as a dbus client to itsel

Miroslav Grepl • 10 years ago

6655c4c

- Add support for cmpiLMI_Service-cimprovagt

Miroslav Grepl • 10 years ago

993bf37

- Make auditd working if audit is configured to perform SINGLE action on disk error

Miroslav Grepl • 10 years ago

0ab4f2d

- Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t

Miroslav Grepl • 10 years ago

7a0f028

* Thu Jul 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-63

Miroslav Grepl • 10 years ago

21e8b67

* Tue Jul 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-62

Miroslav Grepl • 10 years ago

60ad55b

- Add prosody policy written by Michael Scherer

Miroslav Grepl • 10 years ago

d1027c5

- Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow s

Miroslav Grepl • 10 years ago

2d4ef1c

Fix name of sandbox.pp.disabled

Dan Walsh • 10 years ago

c23c3b2

- Make DSPAM to act as a LDA working

Miroslav Grepl • 10 years ago

b27c1f1

We need to recompile policy if pcre is updated

Dan Walsh • 10 years ago

7c810a8

- Allow lvm_t to create default targets for filesystem handling

Miroslav Grepl • 10 years ago

634d39b

- Don't audit access checks by sandbox xserver on xdb var_lib

Miroslav Grepl • 10 years ago

82acdf3

Make vdagent able to request loading kernel module

Dan Walsh • 10 years ago

859a101

Require sepolgen-ifgen to run in post install

Dan Walsh • 10 years ago

9f52d7a

- Add labeling for /dev/tgt

Miroslav Grepl • 10 years ago

708bb6e

- accountservice watches when accounts come and go in wtmp

Miroslav Grepl • 10 years ago

166a280

- Fix openshift_search_lib

Miroslav Grepl • 10 years ago

574431f

Run sepolgen-ifgen in post install or selinux-policy-devel

Dan Walsh • 10 years ago

9b75ca7

Update to the latest f19

Miroslav Grepl • 10 years ago

520d6f2

- Dontaudit to getattr on dirs for dovecot-deliver

Miroslav Grepl • 10 years ago

d4d3448

- Add additional fixes for #948073 bug

Miroslav Grepl • 10 years ago

471c1eb

Make sure users and unconfined domains create .hushlogin with the correct label

Dan Walsh • 10 years ago

ff5e7c3

Move {_usr}/share/selinux/devel/policy to -devel package so we can remove requirement to install -doc in livecd

Dan Walsh • 10 years ago

bdd37e8

Update to latest F19

Miroslav Grepl • 10 years ago

16d305b

- Remove userdom_home_manager for xdm_t and move all rules to xserver.te directly

Miroslav Grepl • 10 years ago

2d9b83e

- Allow tcpd to execute leafnode

Miroslav Grepl • 10 years ago

728c6f6

* Tue Apr 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-38

Miroslav Grepl • 10 years ago

a97fbb2

- Allow lvm to create its own unit files

Miroslav Grepl • 10 years ago

ac58d9f

- Fix lockdev_manage_files()

Miroslav Grepl • 10 years ago

d61e0b8

- Allow realmd to run ipa, really needs to be an unconfined_domain

Miroslav Grepl • 11 years ago

aae6505

- Fix description of deny_ptrace boolean

Miroslav Grepl • 11 years ago

d42d165

* Mon Apr 15 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-30

Miroslav Grepl • 11 years ago

1d348df

- Add mising nslcd_dontaudit_write_sock_file() interface

Miroslav Grepl • 11 years ago

fa447f1

- Allow httpd_t to connect to osapi_compute port using httpd_use_openstac

Miroslav Grepl • 11 years ago

d8b4fa3

Fix file_contexts.subs to label /run/lock correctly

Dan Walsh • 11 years ago

a48e548

* Fri Apr 5 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-26

Miroslav Grepl • 11 years ago

f4f51d7

- Allow realmd to create tmp files

Miroslav Grepl • 11 years ago

d9444b1

- Add labeling for /usr/share/pki

Miroslav Grepl • 11 years ago

30fc9ed

Allow localectl to read /etc/X11/xorg.conf.d directory

Dan Walsh • 11 years ago

6c034c6

Merge branches 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

07ce8fa

Fix triggerpostun command

Dan Walsh • 11 years ago

aef8acf

- Adopt swift changes from lhh@redhat.com

Miroslav Grepl • 11 years ago

00d1b82

- Allow postgresql to manage rgmanager pid files

Miroslav Grepl • 11 years ago

06b84e3

* Mon Mar 4 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-18

Miroslav Grepl • 11 years ago

e30ef5a

Fix spec file

Miroslav Grepl • 11 years ago

ed588c9

* Fri Feb 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-17

Miroslav Grepl • 11 years ago

e4a8be5

Remove rgmanager,pacemaker,aisexec,pacemaker policies which have been merge to rhcs.pp as cluster_t

Miroslav Grepl • 11 years ago

59421a6

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

1be9b19

Cover up errors if .config dir does not exist, no need to run restorecon twice

Dan Walsh • 11 years ago

0aef6e5

- Allow nmbd_t to create samba_var_t directories

Miroslav Grepl • 11 years ago

94b74a3

Man pages are now generated in the build process

Dan Walsh • 11 years ago

79ec805

Man pages are now generated in the build process

Dan Walsh • 11 years ago

6a97c74

New POLICYCOREUTILSVER is required

Miroslav Grepl • 11 years ago

cc78bcd

* Thu Feb 21 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-15

Miroslav Grepl • 11 years ago

2aca9b6

Switch to building man pages and html pages on the fly

Dan Walsh • 11 years ago

a7c9a93

- Allow gluster to get attrs on all fs

Miroslav Grepl • 11 years ago

26cbc57

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 11 years ago

f0628b3

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 11 years ago

5eea0f4

Remove shutdown policy. Shutdown is now a symlink to systemctl.

Dan Walsh • 11 years ago

3460d4c

- virsh now does a setexeccon call

Miroslav Grepl • 11 years ago

2599f2f

Bump required versions for tool chain.

Dan Walsh • 11 years ago

7935567

- Rename files_rw_inherited_tmp_files to files_rw_inherited_tmp_file

Miroslav Grepl • 11 years ago

7980df3

- Allow gpg to read fips_enabled

Miroslav Grepl • 11 years ago

ad09433

Fix spec file

Miroslav Grepl • 11 years ago

953ff14

- Add xserver_xdm_ioctl_log() interface

Miroslav Grepl • 11 years ago

da973f3

* Wed Jan 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-9

Miroslav Grepl • 11 years ago

f125066

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

45852f5

Do a better job of cleaning up old policy files, trigger relabel of /home on upgrade to F19

Dan Walsh • 11 years ago

b59d07a

- Change ssh_use_pts to use macro and only inherited sshd_devpts_t

Miroslav Grepl • 11 years ago

aab1932

* Fri Jan 25 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-7

Miroslav Grepl • 11 years ago

1802bef

clamav and amavis has been merge to antivirus policy

Miroslav Grepl • 11 years ago

4c3676d

* Wed Jan 23 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-6

Miroslav Grepl • 11 years ago

b591902

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

a09a7de

Add selinux-policy-filesystem for /etc/selinux directory so it can be shared with libsemanage

Dan Walsh • 11 years ago

6d40a6c

- Fix systemd_manage_unit_symlinks() interface

Miroslav Grepl • 11 years ago

207a4df

Rename gnomeclock to systemd_timedated

Dan Walsh • 11 years ago

5f2806a

* Mon Jan 14 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-4

Miroslav Grepl • 11 years ago

7f090db

* Fri Jan 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-3

Miroslav Grepl • 11 years ago

a7dce2a

Add back consolekit but we keep just consolekit.te and .fc was commented

Miroslav Grepl • 11 years ago

0c265c3

- Remove all mcs overrides and replace with t1 != mcs_constrained_ty

Miroslav Grepl • 11 years ago

f851aec

use policy.29

Miroslav Grepl • 11 years ago

fa970c3

Require POLICYCOREUTILSVER 2.1.13-53

Miroslav Grepl • 11 years ago

8f47af1

* Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1

Miroslav Grepl • 11 years ago

23a9442

Upload new upstream sources

Miroslav Grepl • 11 years ago

e5e4180

Bump POLICYVER

Miroslav Grepl • 11 years ago

9cdcf52

Revert "Upstream uses ctdb instead of ctdbd policy"

Miroslav Grepl • 11 years ago

fdeb413

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

c57639b

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

1a1e004

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

6e9f07d

Upstream change:

Miroslav Grepl • 11 years ago

0368b4c

Upstream change:

Miroslav Grepl • 11 years ago

7316889

Upstream change:

Miroslav Grepl • 11 years ago

098e5a0

Upstream uses ctdb instead of ctdbd policy

Miroslav Grepl • 11 years ago

1871109

Bump the policy version to 28 to match selinux userspace

Dan Walsh • 11 years ago

01be266

* Wed Jan 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-69

Miroslav Grepl • 11 years ago

17da016

renamed: policy-rawhide.patch -> policy-rawhide-base.patch

Miroslav Grepl • 11 years ago

eb0fd25

Backport policy from F18

Miroslav Grepl • 11 years ago

5249146

Make rawhide == f18

Miroslav Grepl • 11 years ago

a270091

Make sure content created in the homedir by uncnfined domains get created with the corect label. specifically /.readahead

rhatdan • 11 years ago

5991fc8

+* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-3

Miroslav Grepl • 11 years ago

e88478c

* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2

Miroslav Grepl • 11 years ago

711b0e2

* Fri Aug 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11

Miroslav Grepl • 11 years ago

e2915ae

* Thu Aug 2 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-0

Miroslav Grepl • 11 years ago

46a9c60

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-15

Miroslav Grepl • 11 years ago

3c848e8

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-

Miroslav Grepl • 11 years ago

42c4091

- Add systemd_logind_inhibit_var_run_t attribute

Miroslav Grepl • 11 years ago

b4a78ad

Add interface to dontaudit getattr access on sysctls

Dan Walsh • 11 years ago

2676121

* Mon Jul 23 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12

Miroslav Grepl • 11 years ago

9ba137b

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

Dennis Gilmore • 11 years ago

c07f643

+- Add realmd and stapserver policies

Miroslav Grepl • 11 years ago

3da13de

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 11 years ago

18fc0f3

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 11 years ago

9d1d995

- Until we figure out how to fix systemd issues, allow all apps that send syslog messag

Miroslav Grepl • 11 years ago

98ec5a1

* Tue Jul 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8

Miroslav Grepl • 11 years ago

0f07ba7

- add ptrace_child access to process

Miroslav Grepl • 11 years ago

1de5de6

* Mon Jun 25 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6

Miroslav Grepl • 11 years ago

52ac61d

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

a3e9dc0

Remove pyzor and razor modules

Dan Walsh • 11 years ago

7f9b7d5

- apcupsd needs to read /etc/passwd

Miroslav Grepl • 11 years ago

c74d194

- Add support for ecryptfs

Miroslav Grepl • 11 years ago

bfc280f

* Tue Jun 12 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3

Miroslav Grepl • 11 years ago

c8f96d3

* Sat Jun 9 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-2

Miroslav Grepl • 11 years ago

4415dfa

Add booleans.subs_dist to selinux-policy package

Dan Walsh • 11 years ago

c395637

Trigger a restorecon -R -v /home on the next update

Dan Walsh • 11 years ago

62163c8

update selinux-policy.spec file

Miroslav Grepl • 11 years ago

7efcb84

Add temporary roleattribute patches

Miroslav Grepl • 11 years ago

1ee0a31

* Thu Jun 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1

Miroslav Grepl • 11 years ago

3dd200b

Upload new sources

Miroslav Grepl • 11 years ago

e392eca

Sync master with F17

Miroslav Grepl • 11 years ago

4a27edf

+* Mon Feb 13 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-

Miroslav • 12 years ago

de69336

Add dnssec policy and go back to unconfined domains versus permissive domains

Dan Walsh • 12 years ago

4066cfa

Revert "Dropping support for snort since it was dropped from Fedora. Users should use nagios"

Dan Walsh • 12 years ago

7bf1025

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

5c28b05

Dropping support for snort since it was dropped from Fedora. Users should use nagios

Dan Walsh • 12 years ago

76d9bfe

Fedora no longer ships kerneloops, dropping policy

Dan Walsh • 12 years ago

d3a57c6

- Add policy for grindengine MPI jobs

Miroslav Grepl • 12 years ago

81894df

Revert "Simplify the build-docs target"

Miroslav Grepl • 12 years ago

80d21dc

- Add new sysadm_secadm.pp module

Miroslav Grepl • 12 years ago

4689b08

Simplify the build-docs target

Dan Walsh • 12 years ago

01be486

Allow builder to skip build_docs

Dan Walsh • 12 years ago

dc4ca7a

- Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory

Miroslav • 12 years ago

30ab254

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 12 years ago

3515d8b

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 12 years ago

9382499

- More /usr move fixes

Miroslav Grepl • 12 years ago

fb431d4

POLY is no longer used

Dan Walsh • 12 years ago

191c435

Make sure /etc/passwd and /etc/group properly labeled

Dan Walsh • 12 years ago

f53135c

* Thu Jan 26 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80

Miroslav • 12 years ago

a9d3433

- Turn on deny_ptrace boolean for the Rawhide run, so we can t

Miroslav Grepl • 12 years ago

0c0b390

+- Add labeling for udisks2

Miroslav • 12 years ago

75a7b93

- Treat Bip with bitlbee policy

Miroslav Grepl • 12 years ago

8cd4433

- Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there

Miroslav Grepl • 12 years ago

de9114f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

291b1f5

Remove Requires for bunzip2 and mktemp

Dan Walsh • 12 years ago

b80397b

- Merge systemd patch

Miroslav Grepl • 12 years ago

153cc80

Fixes to make rawhide boot in enforcing mode with latest systemd changes

Dan Walsh • 12 years ago

cd25a7a

Add labeling for /var/run/systemd/journal/syslog

Dan Walsh • 12 years ago

86d3f66

+- Add labeling for /var/run/systemd/journal/syslog

Miroslav • 12 years ago

68079f6

- Fixed destined form libvirt-sandbox

Miroslav • 12 years ago

69a8d06

Rename audioentropy to entropy to match upstream

Dan Walsh • 12 years ago

7cf580e

- New fix for seunshare, requires seunshare_domains to be able to mounton /

Miroslav • 12 years ago

b3ef57f

Test if selinuxenabled correctly

Dan Walsh • 12 years ago

5a73fdc

default trans rules for Rawhide policy

Dan Walsh • 12 years ago

d5b8b9c

- default trans rules for Rawhide policy

Miroslav Grepl • 12 years ago

67539d5

Update to handle labeling on /sys using systemd-tmpfiles, also support default_range transition rules

Dan Walsh • 12 years ago

bce4ec2

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a922583

- Add httpd_can_connect_ldap() interface

Miroslav • 12 years ago

cd25193

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

49b3733

Committing my changes

Dan Walsh • 12 years ago

ad10efc

+- Add label for /var/lib/iscan/interpreter

Miroslav • 12 years ago

7c693b0

- Allow abrt to request the kernel to load a module

Miroslav • 12 years ago

d17f759

+- Allow mozilla_plugin_t to manage mozilla_home_t

Miroslav • 12 years ago

202bb4c

- Fixes for xguest package

Miroslav • 12 years ago

1094d02

+- Fixes related to /bin, /sbin

Miroslav • 12 years ago

e91d876

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

5305bd3

Eliminate nsplugin from F17

Dan Walsh • 12 years ago

102fd0d

+- Use fs_use_xattr for squashf

Miroslav • 12 years ago

4fe804b

- Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it

Miroslav • 12 years ago

e5768e0

Let firewallgui read the selinux config

Dan Walsh • 12 years ago

e9119ee

- Disable nsplugin module

Miroslav • 12 years ago

0ca57d1

+- Allow mcelog_t to create dir and file in /var/run and label it

Miroslav • 12 years ago

234df65

Merge

Dan Walsh • 12 years ago

3c81e30

- Add ssh_dontaudit_search_home_dir

Miroslav • 12 years ago

19d3c68

- Pulseaudio changes

Miroslav • 12 years ago

68f1456

Checkin patches to git repository

dwalsh • 12 years ago

4501de4

Remove allow_execmem boolean and replace with deny_execmem boolean

Dan Walsh • 12 years ago

4147fe8

Turn back on allow_execmem boolean

Dan Walsh • 12 years ago

9016093

Turn back on allow_execmem boolean

Dan Walsh • 12 years ago

e58227a

Add more MCS fixes to make sandbox working

Dan Walsh • 12 years ago

13382d0

MCS fixes

Dan Walsh • 12 years ago

653590a

MCS fixes

Dan Walsh • 12 years ago

01e90f9

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

0b72d16

MCS fixes

Dan Walsh • 12 years ago

8872d3d

+- MCS fixes

Miroslav • 12 years ago

76b2f51

Make nvidia* to be labeled correctly

dwalsh • 12 years ago

d5beded

Make nvidia* to be labeled correctly

dwalsh • 12 years ago

a7f0027

Check in fixed for Chrome nacl support

Dan Walsh • 12 years ago

bc6fbd3

Begin removing qemu_t domain, we really no longer need this domain.

Dan Walsh • 12 years ago

26536c5

Remove qemu.pp again without causing a crash

Dan Walsh • 12 years ago

a1db2ce

Remove qemu.pp, everything should use svirt_t or stay in its current domain

Dan Walsh • 12 years ago

b4b0268

Allow policykit to talk to the systemd via dbus

Dan Walsh • 12 years ago

084f955

Change bootstrap name to nacl

Dan Walsh • 12 years ago

fa26d89

Allow named to connect to dirsrv by default

Dan Walsh • 12 years ago

44066bd

Allow firewallgui to read /etc/selinux/config

Dan Walsh • 12 years ago

3dcddab

- Fixes for cloudform policies which need to connect to random ports

Miroslav • 12 years ago

b6ae808

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 12 years ago

1a2b4d1

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 12 years ago

f875d28

Policy update should not modify local contexts

Dan Walsh • 12 years ago

e1f17eb

Remove ada policy

Dan Walsh • 12 years ago

052e175

Remove ada policy

Dan Walsh • 12 years ago

b01657a

Remove tzdata policy

Dan Walsh • 12 years ago

61fa8d5

Remove tzdata policy

Dan Walsh • 12 years ago

8214f78

Remove tzdata policy

Miroslav • 12 years ago

1944b1a

Remove tzdata domain, only necessary to make sure stuff is labeled correctly.

Dan Walsh • 12 years ago

087aaea

Add policies for nova openstack

Dan Walsh • 12 years ago

a56e13e

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 12 years ago

4dba2eb

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 12 years ago

1414f9f

Add passwd_file_t for /etc/ptmptmp

Dan Walsh • 12 years ago

9bf3aa2

Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)

Dan Walsh • 12 years ago

e29441a

Move dontaudit sys_ptrace line from permissive.te to domain.te

Dan Walsh • 12 years ago

2453975

Don't check md5 size or mtime on certain config files

Dan Walsh • 12 years ago

042e3a3

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 12 years ago

2f4dfeb

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 12 years ago

6554bb3

Shrink size of policy through use of attributes for userdomain and apache

Dan Walsh • 12 years ago

2a89dff

Fix spec file

Miroslav • 12 years ago

1000555

- Allow virsh to read xenstored pid file

Miroslav • 12 years ago

54943f9

Allow nmbd to manage sock file in /var/run/nmbd

Dan Walsh • 12 years ago

859ba0c

Fix missing patch from F16

Dan Walsh • 12 years ago

14d7aac

Allow logrotate setuid and setgid since logrotate is supposed to do it

Dan Walsh • 12 years ago

f1bc73d

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 12 years ago

e15ae4f

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 12 years ago

a004ca8

+- Add support for Clustered Samba commands

Miroslav • 12 years ago

0247247

Add label for /etc/passwd

Dan Walsh • 12 years ago

4d24861

Add grub.patch

Miroslav • 12 years ago

1b20a51

Make unconfined domains permissive for rawhide

Dan Walsh • 12 years ago

24b80bf

- Make mta_role() active

Miroslav • 12 years ago

02a8a40

Fix spec file

Miroslav Grepl • 12 years ago

1aafd0f

Fix spec file

Miroslav Grepl • 12 years ago

031161f

+- Change screen to use screen_domain attribute and allow screen_domains to read all process domain state

Miroslav • 12 years ago

f9c3502

Add definition for ephemeral ports

Dan Walsh • 12 years ago

747b715

- Needs to require a new version of checkpolicy

Miroslav • 12 years ago

dec0110

- Allow sanlock to manage virt lib files

Miroslav • 12 years ago

40af2ab

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a59df10

Make seusers config noreplace

Dan Walsh • 12 years ago

9c4a933

- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files

Miroslav • 12 years ago

b3edab3

+- Allow collectd to read hardware state information

Miroslav • 12 years ago

e8563b3

Fix typo in spec file

Miroslav • 12 years ago

b1448b7

- removing unconfined_notrans_t no longer necessary

Miroslav • 12 years ago

116a117

- Add exim_exec_t label for /usr/sbin/exim_tidydb

Miroslav • 12 years ago

5b0c573

- pki needs another port

Miroslav • 12 years ago

392fd73

Add glance policy

Dan Walsh • 12 years ago

e6877a0

- Allow Postfix to deliver to Dovecot LMTP socket

Miroslav • 12 years ago

1c136fe

- Allow insmod_t to use fds leaked from devicekit

Miroslav • 12 years ago

2f3d113

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 12 years ago

22a1cfd

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

ba2e58c

Make users_extra and seusers.final into config no replace so semanage users and semanage login files do not get overwritten

Dan Walsh • 12 years ago

39eb9ea

- Add policy for sa-update being run out of cron jobs

Miroslav • 12 years ago

24041fb

Do not do preinstall if there is not previous install

Dan Walsh • 12 years ago

5d837b2

- Turn on allow_domain_fd_use boolean on F16

Miroslav • 12 years ago

8d13f53

livecd fixes

Dan Walsh • 12 years ago

10f0de0

Cleanup spec file to remove rpmnew files

Dan Walsh • 12 years ago

8a78e86

- fetchmail can use kerberos

Miroslav • 12 years ago

913fabe

storage should be in base

Dan Walsh • 12 years ago

41a1818

Add cfengine policy

Dan Walsh • 12 years ago

8becfd3

- Add abrt_domain attribute

Miroslav • 12 years ago

2aa62d4

- More fixes of rules which cause an explosion in rules by Dan Walsh

Miroslav • 12 years ago

58f5509

- Allow rcsmcertd to perform DNS name resolution

Miroslav • 12 years ago

0c240d9

- Allow systemd_logind to send dbus messages with users

Miroslav • 12 years ago

f5593ed

- Fix oracledb_port definition

Miroslav • 12 years ago

6e9c227

systemd fixes

Miroslav • 12 years ago

273e934

- Add initial policy for abrt_dump_oops_t

Miroslav • 12 years ago

2ed5289

- Initial systemd_logind policy

Miroslav Grepl • 12 years ago

805cc3b

- Allow setsched for virsh

Miroslav Grepl • 12 years ago

2b7c055

Fix spec file

Miroslav Grepl • 12 years ago

50f07b8

- A lot of users are running yum -y update while in /root which is causing ldc

Miroslav Grepl • 12 years ago

330eac5

Fully path the semodule command

Dan Walsh • 12 years ago

fb5b77f

- Change usbmuxd_t to dontaudit attempts to read chr_file

Miroslav Grepl • 12 years ago

975370d

Update to upstream

Miroslav Grepl • 12 years ago

ade486a

- More fixes

Miroslav Grepl • 12 years ago

2885bf8

Next attempt at getting selinux-policy-* to work without rebuilding policy.

Dan Walsh • 12 years ago

7e1b615

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

cf012ea

Change required policycoreutils and libsemanage

Dan Walsh • 12 years ago

8782a92

- Add dspam policy

Miroslav Grepl • 12 years ago

4fb7b43

Eliminate olpc stuff and other no longer needed files. Update to new system to build policy.* file within payload.

Dan Walsh • 12 years ago

857c813

apply merge

Dan Walsh • 12 years ago

d0597c1

Old passanger module needs to be removed in spec file

Miroslav Grepl • 12 years ago

183e54f

- Fixes for zabbix

Miroslav Grepl • 12 years ago

d8b1213

Update from git

Dan Walsh • 12 years ago

5253d49

- Add mailscanner policy from dgrift

Miroslav Grepl • 12 years ago

94cdbac

Allow policy.VERSION and modules to ship with package

Dan Walsh • 12 years ago

0535650

Fix spec file

Miroslav Grepl • 12 years ago

0e70f65

- Fixes for sanlock policy

Miroslav Grepl • 12 years ago

a56fb9f

- Add rhev policy module to modules-targeted.conf

Miroslav Grepl • 12 years ago

a8e065b

- Lot of fixes

Miroslav Grepl • 12 years ago

ace2523

New policy patch requires updated checkpolicy package

Dan Walsh • 12 years ago

d97c92c

- Allow logrotate to execute systemctl

Miroslav Grepl • 12 years ago

cb71de5

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

7fbbd6f

- Dontaudit sys_module for ifconfig

Miroslav Grepl • 12 years ago

27bf70c

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

ff120d7

- Fix label for /usr/share/munin/plugins/munin_* plugins

Miroslav Grepl • 12 years ago

cfc00b5

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

e81c799

- Forard port changes from F15 for telepathy

Miroslav Grepl • 12 years ago

6347ee7

- Allow init_t getcap and setcap

Miroslav Grepl • 12 years ago

b02295d

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

99b2fe9

Default telepath to allow it to connect to network ports

Dan Walsh • 13 years ago

402e7b8

- Add support for ABRT retrace server

Miroslav Grepl • 13 years ago

a8c63d7

Accidently checked in my test spec file

Dan Walsh • 13 years ago

ff64d9c

Readd my patch

Dan Walsh • 13 years ago

bd16f8d

Move to version 26 of policy

Dan Walsh • 13 years ago

9bd1686

- Fixes for zarafa policy

Miroslav Grepl • 13 years ago

a357639

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

637b33d

- xdm_t needs getsession for switch user

Miroslav Grepl • 13 years ago

6ac2642

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e935d25

Testing

Dan Walsh • 13 years ago

826311d

- Add Dan's patch to remove 64 bit variants

Miroslav Grepl • 13 years ago

1b7c8fc

Remove lib64 mapping and use subs. change subs name to file_context.subs_dist

Dan Walsh • 13 years ago

86354fa

- Fix typo

Miroslav Grepl • 13 years ago

2130480

- Add /var/run/lock /var/lock definition to file_contexts.subs

Miroslav Grepl • 13 years ago

397c1e2

Update to latest versions and change policy version

Dan Walsh • 13 years ago

568f781

comment out the sepolgen line

Miroslav Grepl • 13 years ago

81c96b1

comment out the sepolgen line

Miroslav Grepl • 13 years ago

aaa0ee5

comment out the sepolgen line

Miroslav Grepl • 13 years ago

6812920

- Fix label for /var/run/udev to udev_var_run_t

Miroslav Grepl • 13 years ago

fb7e97f

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

a7705c5

- Allow $1_sudo_t and $1_su_t open access to user terminals

Miroslav Grepl • 13 years ago

36d3f31

- Remove some unconfined domains

Miroslav Grepl • 13 years ago

47d5c16

Fix multiple specification for boot.log

Miroslav Grepl • 13 years ago

7c23cf7

- devicekit leaks file descriptors to setfiles_t

Miroslav Grepl • 13 years ago

f5eb99f

- Initial policy for matahari

Miroslav Grepl • 13 years ago

af4c0d3

+- mozilla_plugin_tmp_t needs to be treated as user tmp files

Miroslav Grepl • 13 years ago

f7f5ca9

- Add policykit fixes from Tim Waugh

Miroslav Grepl • 13 years ago

8d54634

Fix minimum policy

Miroslav Grepl • 13 years ago

9b89d85

Update to upstream

Miroslav Grepl • 13 years ago

6726024

- gpg_t needs to talk to gnome-keyring

Miroslav Grepl • 13 years ago

781f349

- Allow usbhid-ups to read hardware state information

Miroslav Grepl • 13 years ago

c34a0c5

- Update to upstream

Miroslav Grepl • 13 years ago

7288282

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Dennis Gilmore • 13 years ago

60e174d

- Update to ref policy

Dan Walsh • 13 years ago

d3861ce

- Update to ref policy

Dan Walsh • 13 years ago

812781b

- New labeling for postfmulti #675654

Miroslav Grepl • 13 years ago

f12703e

- syslog_t needs syslog capability

Miroslav Grepl • 13 years ago

19cd669

- Add tcsd policy

Dan Walsh • 13 years ago

731e693

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0e793cf

- ricci_modclusterd_t needs to bind to rpc ports 500-1023

Miroslav Grepl • 13 years ago

ebce355

stop relabeling /var/lib

Dan Walsh • 13 years ago

6b3837d

- Fix xserver_dontaudit_read_xdm_pid

Miroslav Grepl • 13 years ago

73e5deb

- Allow nagios plugin to read /proc/meminfo

Miroslav Grepl • 13 years ago

3c70739

- nslcd needs setsched and to read /usr/tmp

Miroslav Grepl • 13 years ago

0ababf8

- NetworkManager wants to read consolekit_var_run_t

Miroslav Grepl • 13 years ago

408ea91

Fix release

Miroslav Grepl • 13 years ago

ac028b8

- Add sepgsql_contexts file

Miroslav Grepl • 13 years ago

a34c78a

- Update to upstream

Miroslav Grepl • 13 years ago

86b1f12

- Add oracle ports and allow apache to connect to them if the connect_db boole

Miroslav Grepl • 13 years ago

f16c69c

- gnomeclock executes a shell

Miroslav Grepl • 13 years ago

116d731

- Add firewalld policy

Miroslav Grepl • 13 years ago

b186335

- Add initial policy for system-setup-keyboard which is now daemon

Miroslav Grepl • 13 years ago

b559c4e

- Gnome apps list config_home_t

Dan Walsh • 13 years ago

b96903a

- New labels for ghc http content

Dan Walsh • 13 years ago

ef836a9

- Update to upstream

Miroslav Grepl • 13 years ago

d980545

Update to upstream

Miroslav Grepl • 13 years ago

d6c5f36

- Update selinux policy to handle new /usr/share/sandbox/start script

Dan Walsh • 13 years ago

f3f61ef

- Update to upstream

Miroslav Grepl • 13 years ago

0ba6b24

- Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs

Miroslav Grepl • 13 years ago

1adb28c

- Allow domains that transition to ping or traceroute, kill them

Dan Walsh • 13 years ago

25660bf

- Turn on systemd policy

Miroslav Grepl • 13 years ago

3c0b9ea

- Fixes for clamscan and boinc policy

Miroslav Grepl • 13 years ago

b04a855

- Push fixes to allow disabling of unlabeled_t packet access

Miroslav Grepl • 13 years ago

c2ad368

- Fixes for lvm to work with systemd

Miroslav Grepl • 13 years ago

7b62a83

- Fix the label for wicd log

Miroslav Grepl • 13 years ago

1511604

- Fix gnome_manage_data interface

Miroslav Grepl • 13 years ago

a4f1f54

- Fix cron to run ranged when started by init

Miroslav Grepl • 13 years ago

0946045

- Fix up handling of dnsmasq_t creating /var/run/libvirt/network

Dan Walsh • 13 years ago

5bcd7aa

- fixes to allow /var/run and /var/lock as tmpfs

Miroslav Grepl • 13 years ago

954ef8a

- Remove duplicate declaration

Miroslav Grepl • 13 years ago

b63541e

- Update to upstream

Miroslav Grepl • 13 years ago

05f913e

- Allow ddclient to fix file mode bits of ddclient conf file

Miroslav Grepl • 13 years ago

3daa6c7

- Put back in lircd_etc_t so policy will install

Dan Walsh • 13 years ago

d6719f6

- Turn on allow_postfix_local_write_mail_spool

Miroslav Grepl • 13 years ago

4eb45eb

- Update to upstream

Miroslav Grepl • 13 years ago

582d2c5

- Allow nagios plugins to read usr files

Miroslav Grepl • 13 years ago

cbb8d59

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 13 years ago

763342a

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 13 years ago

519b05a

- kdump leaks kdump_etc_t to ifconfig, add dontaudit

Dan Walsh • 13 years ago

50dacac

- Turn on mediawiki policy

Miroslav Grepl • 13 years ago

9238df0

- Fix init to be able to relabel wtmp, tmp files

Dan Walsh • 13 years ago

7297a33

- Allow groupd transition to fenced domain when executes fence_node

Miroslav Grepl • 13 years ago

5d168a3

- Fix up corecommands.fc to match upstream

Dan Walsh • 13 years ago

ded1efb

- Add conflicts for dirsrv package

Dan Walsh • 13 years ago

fc9bf2f

- Update to upstream

Dan Walsh • 13 years ago

3e0b783

- Update to upstream

Dan Walsh • 13 years ago

6e50b74

- Update to upstream

Dan Walsh • 13 years ago

06262c1

- Fix sandbox to work on nfs homedirs

Dan Walsh • 13 years ago

c52856e

-

Dan Walsh • 13 years ago

9896599

- Allow NetworkManager to read openvpn_etc_t

Dan Walsh • 13 years ago

9754f47

- Dontaudit sandbox sending sigkill to all user domains

Dan Walsh • 13 years ago

7a20869

- Fixes for systemd to manage /var/run

Dan Walsh • 13 years ago

2bb6181

- Allow chome to create netlink_route_socket

Dan Walsh • 13 years ago

bac2708

- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.

Dan Walsh • 13 years ago

4da7659

- Allow cobblerd to list cobler appache content

Dan Walsh • 13 years ago

c849c84

- Fixup for the latest version of upowed

Dan Walsh • 13 years ago

d33e644

- Update to upstream

Dan Walsh • 13 years ago

618ed7a

- Update to upstream

Dan Walsh • 13 years ago

5a152bc

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Dan Walsh • 13 years ago

f0a56ee

Rebuild with latest code

Dan Walsh • 13 years ago

dd20c25

- Allow smbd to use sys_admin

Dan Walsh • 13 years ago

6f93468

- Allow smbd to use sys_admin

Dan Walsh • 13 years ago

6f256d2

- Fix fusefs handling

Dan Walsh • 13 years ago

0daa8b7

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 13 years ago

b1cbbd0

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 13 years ago

fbd9ca0

- Dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 13 years ago

5ae8fb6

- Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 13 years ago

7c487e9

- Pull in cleanups from dgrift

Dan Walsh • 13 years ago

e257991

- Cleanup policy via dgrift

Dan Walsh • 13 years ago

42c814d

- Fix up Xguest policy

Dan Walsh • 13 years ago

1d153ea

- Add vnstat policy

Dan Walsh • 13 years ago

ea3b7b5

- Update to upstream

Dan Walsh • 13 years ago

a24e6a6

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 13 years ago

ba8c31f

- Update to upstream

Dan Walsh • 13 years ago

a0e8efd

- Add policy for ajaxterm

Dan Walsh • 13 years ago

30a7d17

- Handle /var/db/sudo

Dan Walsh • 13 years ago

6e2d7f3

Allow iptables to read shorewall tmp files

Dan Walsh • 13 years ago

64d84cf

- Merge upstream fix of mmap_zero

Dan Walsh • 13 years ago

482c9f3

- Merge with upstream

Dan Walsh • 13 years ago

a7a2367

- More access needed for devicekit

Dan Walsh • 13 years ago

6578cf7

- Merge with upstream

Dan Walsh • 13 years ago

ba77266

- Allow seunshare to fowner

Dan Walsh • 13 years ago

370d04e

- Allow cron to look at user_cron_spool links

Dan Walsh • 13 years ago

cc138e8

- Update policy for mozilla_plugin_t

Dan Walsh • 13 years ago

6326566

- Allow clamscan to read proc_t

Dan Walsh • 13 years ago

eee39f9

- Allow clamscan_t execmem if clamd_use_jit set

Dan Walsh • 13 years ago

19988ca

- label dead.letter as mail_home_t

Dan Walsh • 13 years ago

3798ee9

* Tue Aug 10 2010 Dan Walsh <dwalsh@redhat.com> 3.8.8-12

Dan Walsh • 13 years ago

922cd61

- Merge in fixes from dgrift repository

Daniel J Walsh • 13 years ago

d4bb132

- Update boinc policy

Daniel J Walsh • 13 years ago

7f5d8f3

- New paths for upstart

Daniel J Walsh • 13 years ago

a1ef703

- New permissions for syslog

Daniel J Walsh • 13 years ago

8d55a41

- Allow systemd to setsockcon on sockets to immitate other services

Daniel J Walsh • 13 years ago

f3fc105

- Remove debugfs label

Daniel J Walsh • 13 years ago

9f811ef

- Update to latest policy

Daniel J Walsh • 13 years ago

d66bec6

- Fix eclipse labeling from IBMSupportAssasstant packageing

Daniel J Walsh • 13 years ago

1df2fc2

- Make boot with systemd in enforcing mode

Daniel J Walsh • 13 years ago

3f1005a

- Update to upstream

Daniel J Walsh • 13 years ago

0f2ae00

- Add boolean to turn off port forwarding in sshd.

Daniel J Walsh • 13 years ago

9c1bcc2

- Add support for ebtables

Miroslav Grepl • 13 years ago

be922a1

-Update to upstream

Daniel J Walsh • 13 years ago

6c42218

-Update to upstream

Daniel J Walsh • 13 years ago

fa98e0e

-Update to upstream

Daniel J Walsh • 13 years ago

5f371ac

- Add Zarafa policy

Daniel J Walsh • 13 years ago

7c727a8

- Cleanup of aiccu policy

Daniel J Walsh • 13 years ago

f2403c5

- Lots of random fixes

Daniel J Walsh • 13 years ago

f651bb6

- Update to upstream

Daniel J Walsh • 13 years ago

b39ccca

- Update to upstream

Daniel J Walsh • 13 years ago

632048c

- Add xdm_var_run_t to xserver_stream_connect_xdm

Daniel J Walsh • 13 years ago

bca242c

- Fix sshd creation of krb cc files for users to be user_tmp_t

Daniel J Walsh • 13 years ago

e512844

- Fixes for accountsdialog

Daniel J Walsh • 13 years ago

4abfc01

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 13 years ago

65c6e4c

- Update to upstream

Daniel J Walsh • 13 years ago

bc4089c

- Update to upstream

Daniel J Walsh • 14 years ago

a72c31d

- Merge with upstream

Daniel J Walsh • 14 years ago

add9573

- Allow sandbox to work with MLS

Daniel J Walsh • 14 years ago

3c551b8

- Make Chrome work with staff user

Daniel J Walsh • 14 years ago

43c7f5f

- Add icecast policy

Daniel J Walsh • 14 years ago

487de6f

- Add mcelog policy

Daniel J Walsh • 14 years ago

30c2199

- Lots of fixes found in F12

Daniel J Walsh • 14 years ago

a62c640

- Fix rpm_dontaudit_leaks

Daniel J Walsh • 14 years ago

b2f6b06

- Add getsched to hald_t

Daniel J Walsh • 14 years ago

4d67b40

- Allow abrt_helper to getattr on all filesystems

Daniel J Walsh • 14 years ago

b0f3656

- Add gstreamer_home_t for ~/.gstreamer

Daniel J Walsh • 14 years ago

b65afa2

- Update to upstream

Daniel J Walsh • 14 years ago

faec5c2

Update spec file to suck in the correct version of selinux-policy packages

Daniel J Walsh • 14 years ago

3b54668

- Turn on puppet policy

Daniel J Walsh • 14 years ago

89ad5ea

- Move users file to selection by spec file.

Daniel J Walsh • 14 years ago

fc05ac0

- Update to upstream

Daniel J Walsh • 14 years ago

352dafd

- Remove most of the permissive domains from F12.

Daniel J Walsh • 14 years ago

6049e24

- Add cobbler policy from dgrift

Daniel J Walsh • 14 years ago

485ded5

- add usbmon device

Daniel J Walsh • 14 years ago

1e86f3f

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 14 years ago

4478a9a

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

08b8904

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

daebd59

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

e2f53df

- Add back xserver_manage_home_fonts

Daniel J Walsh • 14 years ago

550cc5f

- Dontaudit sandbox trying to read nscd and sssd

Daniel J Walsh • 14 years ago

7d40583

- Update to upstream

Daniel J Walsh • 14 years ago

b467541

- Rename udisks-daemon back to devicekit_disk_t policy

Daniel J Walsh • 14 years ago

6ca563e

- Fixes for abrt calls

Daniel J Walsh • 14 years ago

e54cc7c

- Add tgtd policy

Daniel J Walsh • 14 years ago

9c90ba7

- Add tgtd policy

Daniel J Walsh • 14 years ago

755e2d6

- Update to upstream release

Daniel J Walsh • 14 years ago

9eef358

- Add asterisk policy back in

Daniel J Walsh • 14 years ago

f2a1dcd

- Add asterisk policy back in

Daniel J Walsh • 14 years ago

ee88b05

- Add asterisk policy back in

Daniel J Walsh • 14 years ago

ce8c76d

- Update to upstream release 2.20091117

Daniel J Walsh • 14 years ago

55acbfd

- Update to upstream

Daniel J Walsh • 14 years ago

5e44eb8

- Allow vpnc request the kernel to load modules

Daniel J Walsh • 14 years ago

32594a1

- Add plymouth policy

Daniel J Walsh • 14 years ago

aaf52ff

- Allow cupsd_config to read user tmp

Daniel J Walsh • 14 years ago

d976a83

- Update rhcs policy

Daniel J Walsh • 14 years ago

8b10e3a

- Allow users to exec restorecond

Daniel J Walsh • 14 years ago

85582d6

- Allow sendmail to request kernel modules load

Daniel J Walsh • 14 years ago

f5a104d

- Fix all kernel_request_load_module domains

Daniel J Walsh • 14 years ago

4c2f298

- Fix all kernel_request_load_module domains

Daniel J Walsh • 14 years ago

405a74c

- Remove allow_exec* booleans for confined users. Only available for

Daniel J Walsh • 14 years ago

41f8e38

- More fixes for sandbox_web_t

Daniel J Walsh • 14 years ago

8323d54

- Allow sshd to create .ssh directory and content

Daniel J Walsh • 14 years ago

ab46291

- Fix request_module line to module_request

Daniel J Walsh • 14 years ago

d53d158

- Fix sandbox policy to allow it to run under firefox.

Daniel J Walsh • 14 years ago

1fb0a98

- Fixes for sandbox

Daniel J Walsh • 14 years ago

9de7033

- Update to upstream

Daniel J Walsh • 14 years ago

69290fd

- Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service

Daniel J Walsh • 14 years ago

23e7082

- Fix devicekit_disk_t to getattr on all domains sockets and fifo_files

Daniel J Walsh • 14 years ago

6b7b0c1

- Add wordpress/wp-content/uploads label

Daniel J Walsh • 14 years ago

e20e351

- Update to upstream

Daniel J Walsh • 14 years ago

ddc8588

- More fixes

Daniel J Walsh • 14 years ago

ab8f807

- More fixes

Daniel J Walsh • 14 years ago

b8498d1

- Lots of fixes for initrc and other unconfined domains

Daniel J Walsh • 14 years ago

123ae99

- Allow xserver to use netlink_kobject_uevent_socket

Daniel J Walsh • 14 years ago

72bc25d

- Dontaudit setroubleshootfix looking at /root directory

Daniel J Walsh • 14 years ago

1a2981b

- Update to upsteam

Daniel J Walsh • 14 years ago

65c3f9a

- Allow gssd to send signals to users

Daniel J Walsh • 14 years ago

cb5670c

- Update to upstream

Daniel J Walsh • 14 years ago

faf9cbb

- Remove polkit_auth on upgrades

Daniel J Walsh • 14 years ago

38d427a

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 14 years ago

42f9eff

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 14 years ago

07c04f8

- Fixes for cdrecord, mdadm, and others

Daniel J Walsh • 14 years ago

89e3546

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 14 years ago

080ce6f

- Allow cronjobs to read exim_spool_t

Daniel J Walsh • 14 years ago

8e64d7d

- Add ABRT policy

Daniel J Walsh • 14 years ago

c5f5b5d

- Fix system-config-services policy

Daniel J Walsh • 14 years ago

e3dd491

- Allow libvirt to change user componant of virt_domain

Daniel J Walsh • 14 years ago

fc8ff2f

- Allow cupsd_config_t to be started by dbus

Daniel J Walsh • 14 years ago

40243d9

- Add policycoreutils-python to pre install

Daniel J Walsh • 14 years ago

9c27022

- Make all unconfined_domains permissive so we can see what AVC's happen

Daniel J Walsh • 14 years ago

b2c5e72

- Add pt_chown policy

Daniel J Walsh • 14 years ago

7fe210d

- Add kdump policy for Miroslav Grepl

Daniel J Walsh • 14 years ago

867473a

- Turn on execstack on a temporary basis (#512845)

Bill Nottingham • 14 years ago

ac7bbfa

- Allow nsplugin to connecto the session bus

Daniel J Walsh • 14 years ago

4de3826

- Allow devicekit_disk to list inotify

Daniel J Walsh • 14 years ago

e213303

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 14 years ago

4816e90

- Allow exim to getattr on mountpoints

Daniel J Walsh • 14 years ago

4673269

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 14 years ago

947b439

- Allod hald_dccm_t to create sock_files in /tmp

Daniel J Walsh • 14 years ago

af4fa82

- More fixes from upstream

Daniel J Walsh • 14 years ago

abd1536

- Fix polkit label

Daniel J Walsh • 14 years ago

c6e2224

- Update to upstream

Daniel J Walsh • 14 years ago

3750561

- Allow certmaster to override dac permissions

Daniel J Walsh • 14 years ago

9160520

- Update to upstream

Daniel J Walsh • 14 years ago

df7055d

- Fix context for VirtualBox

Daniel J Walsh • 14 years ago

8da0248

- Update to upstream

Daniel J Walsh • 14 years ago

2360ff9

- Fixes for xguest

Daniel J Walsh • 14 years ago

a88b486

- fix multiple directory ownership of mandirs

Daniel J Walsh • 14 years ago

819f419

fix duplicate directory ownership with filesystem, policycoreutils

Tom Callaway • 14 years ago

a85aeff

- Update to upstream

Daniel J Walsh • 14 years ago

d9676a6

- Add rules for rtkit-daemon

Daniel J Walsh • 14 years ago

bcc53da

- Update to upstream

Daniel J Walsh • 14 years ago

7b16d56

- Add rtkit policy

Daniel J Walsh • 14 years ago

221642f

- Allow rpcd_t to stream connect to rpcbind

Daniel J Walsh • 14 years ago

d399fb4

- Allow kpropd to create tmp files

Daniel J Walsh • 14 years ago

9850f4d

- Fix last duplicate /var/log/rpmpkgs

Daniel J Walsh • 14 years ago

93dc66e

- Update to upstream

Daniel J Walsh • 14 years ago

a9f0953

- Update to upstream

Daniel J Walsh • 14 years ago

8866315

- Update to upstream

Daniel J Walsh • 14 years ago

6071093

- Fix mcs rules to include chr_file and blk_file

Daniel J Walsh • 14 years ago

9386d6f

- Add label for udev-acl

Daniel J Walsh • 14 years ago

e3bf679

- Additional rules for consolekit/udev, privoxy and various other fixes

Daniel J Walsh • 14 years ago

f8df9e5

- New version for upstream

Daniel J Walsh • 14 years ago

49883e8

- New version for upstream

Daniel J Walsh • 14 years ago

d3ae977

- Allow NetworkManager to read inotifyfs

Daniel J Walsh • 14 years ago

6b83805

- Allow setroubleshoot to run mlocate

Daniel J Walsh • 14 years ago

aa7b9cb

- Update to upstream

Daniel J Walsh • 14 years ago

8197718

- New log file for vmware

Daniel J Walsh • 14 years ago

9ee63df

- Upgrade to upstream

Daniel J Walsh • 14 years ago

ef7416c

- Allow fprintd to access sys_ptrace

Daniel J Walsh • 14 years ago

eead2a6

- Add varnishd policy

Daniel J Walsh • 14 years ago

7b6c105

- Fixes for kpropd

Daniel J Walsh • 14 years ago

f72bd44

- Allow brctl to r/w tun_tap_device_t

Daniel J Walsh • 14 years ago

fcb4418

- Add /usr/share/selinux/packages

Daniel J Walsh • 14 years ago

62cfafd

- Allow rpcd_t to send signals to kernel threads

Daniel J Walsh • 14 years ago

0f6b92d

- Fix upgrade for F10 to F11

Daniel J Walsh • 14 years ago

9924194

- Add policy for /var/lib/fprint

Daniel J Walsh • 14 years ago

a2098a5

-Remove duplicate line

Daniel J Walsh • 14 years ago

8a0604e

- Allow svirt to manage pci and other sysfs device data

Daniel J Walsh • 14 years ago

959ab94

- Fix package selection handling

Daniel J Walsh • 14 years ago

0e31a0e

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 14 years ago

c32d79e

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 14 years ago

5dd89f3

- Add shorewall policy

Daniel J Walsh • 14 years ago

37ebfc9

- Additional rules for fprintd and sssd

Daniel J Walsh • 14 years ago

21b13fc

- Allow nsplugin to unix_read unix_write sem for unconfined_java

Daniel J Walsh • 14 years ago

40d8f60

- Fix uml files to be owned by users

Daniel J Walsh • 14 years ago

b3ac4a0

- Fix Upgrade path to install unconfineduser.pp when unocnfined package is

Daniel J Walsh • 14 years ago

e080bbd

- Allow confined users to manace virt_content_t, since this is home dir

Daniel J Walsh • 14 years ago

b11dbbb

- Fix labeling on /var/lib/misc/prelink*

Daniel J Walsh • 14 years ago

b0991a2

- Allow initrc_t to delete dev_null

Daniel J Walsh • 14 years ago

89c9c9a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 14 years ago

eaaf2ab

- Allow initrc_t to delete dev_null

Daniel J Walsh • 14 years ago

dac8380

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 14 years ago

db0dafa

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 14 years ago

cd0a396

- Additional perms for readahead

Daniel J Walsh • 14 years ago

5ce1c49

- Allow pulseaudio to acquire_svc on session bus

Daniel J Walsh • 15 years ago

4d5adb7

- Allow sshd to read var_lib symlinks for freenx

Daniel J Walsh • 15 years ago

3c498a7

- Allow nsplugin unix_read and write on users shm and sem

Daniel J Walsh • 15 years ago

a32a159

- Fixes for podsleuth

Daniel J Walsh • 15 years ago

d982e7e

*** empty log message ***

Daniel J Walsh • 15 years ago

dc00fc3

- Allow cupsd_t to create link files in print_spool_t

Daniel J Walsh • 15 years ago

6203f42

- Allow audioentroy to read etc files

Daniel J Walsh • 15 years ago

4a0aac1

- Add fail2ban_var_lib_t

Daniel J Walsh • 15 years ago

685032c

- Separate out the ucnonfined user from the unconfined.pp package

Daniel J Walsh • 15 years ago

d4af172

- Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t.

Daniel J Walsh • 15 years ago

90e4193

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

25a4763

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

510c2a3

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

04b6828

- Add customizable_types for svirt

Daniel J Walsh • 15 years ago

80beeee

- Allow setroubelshoot exec* privs to prevent crash from bad libraries

Daniel J Walsh • 15 years ago

f49c57d

- Dontaudit listing of /root directory for cron system jobs

Daniel J Walsh • 15 years ago

90ea5b3

- Fix missing ld.so.cache label

Daniel J Walsh • 15 years ago

3434a9b

- Add label for ~/.forward and /root/.forward

Daniel J Walsh • 15 years ago

c0158a8

- Fixes for svirt

Daniel J Walsh • 15 years ago

6130d52

- Fixes to allow svirt read iso files in homedir

Daniel J Walsh • 15 years ago

9ca87fc

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

ec98008

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

5dce3c1

- Allow mdadm to read/write mls override

Daniel J Walsh • 15 years ago

bfc78b6

- Change to svirt to only access svirt_image_t

Daniel J Walsh • 15 years ago

095146a

- Fix libvirt policy

Daniel J Walsh • 15 years ago

d4b8dcf

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

b12011f

- Fixes for iscsid and sssd

Daniel J Walsh • 15 years ago

c240b60

- Add pulseaudio, sssd policy

Daniel J Walsh • 15 years ago

e72f55a

- Add pulseaudio context

Daniel J Walsh • 15 years ago

0c34c69

- Upgrade to latest patches

Daniel J Walsh • 15 years ago

a67a1c1

- Fixes for libvirt

Daniel J Walsh • 15 years ago

0a03cce

- Update to Latest upstream

Daniel J Walsh • 15 years ago

8c3a31a

- Further confinement of qemu images via svirt

Daniel J Walsh • 15 years ago

4967525

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Jesse Keating • 15 years ago

150ff59

- Allow NetworkManager to manage /etc/NetworkManager/system-connections

Daniel J Walsh • 15 years ago

52cbcb4

- add virtual_image_context and virtual_domain_context files

Daniel J Walsh • 15 years ago

de67749

- Allow rpcd_t to send signal to mount_t

Daniel J Walsh • 15 years ago

8f6e436

- Fix sysnet/net_conf_t

Daniel J Walsh • 15 years ago

8c2b68a

- Fix squidGuard labeling

Daniel J Walsh • 15 years ago

8179476

- Re-add corenet_in_generic_if(unlabeled_t)

Daniel J Walsh • 15 years ago

2eec438

Daniel J Walsh • 15 years ago

e46e005

UPdate policycorutils version

Daniel J Walsh • 15 years ago

d43c255

- Add git web policy

Daniel J Walsh • 15 years ago

1d1c058

- Add setrans contains from upstream

Daniel J Walsh • 15 years ago

bd0db4f

- Allow xdm to create user_tmp_t sockets for switch user to work

Daniel J Walsh • 15 years ago

4ed140a

- Fix staff_t domain

Daniel J Walsh • 15 years ago

bc861e6

- Grab remainder of network_peer_controls patch

Daniel J Walsh • 15 years ago

73fe81b

- More fixes for devicekit

Daniel J Walsh • 15 years ago

659e96f

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

c957c38

- Add boolean to disallow unconfined_t login

Daniel J Walsh • 15 years ago

574cab4

- Add back transition from xguest to mozilla

Daniel J Walsh • 15 years ago

0554a10

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 15 years ago

ab3e55d

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

2fbeb78

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

f899107

- More mls/rpm fixes

Daniel J Walsh • 15 years ago

48adbea

- Add policy to make dbus/nm-applet work

Daniel J Walsh • 15 years ago

14c9b9c

- Remove polgen-ifgen from post and add trigger to policycoreutils-python

Daniel J Walsh • 15 years ago

40dd24d

- Add wm policy

Daniel J Walsh • 15 years ago

6f8856e

- Add wm policy

Daniel J Walsh • 15 years ago

6cf32a1

- Add wm policy

Daniel J Walsh • 15 years ago

1b94a13

- Fixed for DeviceKit

Daniel J Walsh • 15 years ago

2a4bdae

- Add devicekit policy

Daniel J Walsh • 15 years ago

acc1376

- Update to upstream

Daniel J Walsh • 15 years ago

1d72fb0

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

7b146db

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

eacea1d

- Fixes for reading xserver_tmp_t

Daniel J Walsh • 15 years ago

339bf3b

- Allow cups_pdf_t write to nfs_t

Daniel J Walsh • 15 years ago

87fb153

- Remove audio_entropy policy

Daniel J Walsh • 15 years ago

2ed2ff4

- Update to upstream

Daniel J Walsh • 15 years ago

292c49c

- Allow hal_acl_t to getattr/setattr fixed_disk

Daniel J Walsh • 15 years ago

5df2628

- Change userdom_read_all_users_state to include reading symbolic links in

Daniel J Walsh • 15 years ago

3236390

- Fix dbus reading /proc information

Daniel J Walsh • 15 years ago

cf8fd9f

- Add missing alias for home directory content

Daniel J Walsh • 15 years ago

bae2e98

- Fixes for IBM java location

Daniel J Walsh • 15 years ago

33c7eab

- Allow unconfined_r unconfined_java_t

Daniel J Walsh • 15 years ago

dcd0c96

- Add cron_role back to user domains

Daniel J Walsh • 15 years ago

fd2b62e

- Fix sudo setting of user keys

Daniel J Walsh • 15 years ago

9a43d2b

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

163db10

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

2ae1615

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

c136db3

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

01ce3df

- Cleanup policy

Daniel J Walsh • 15 years ago

bcb1922

- Cleanup policy

Daniel J Walsh • 15 years ago

739db21

Rebuild for Python 2.6

Ignacio Vazquez-Abrams • 15 years ago

23d6844

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 15 years ago

02d888c

- Allow postgresl to bind to udp nodes

Daniel J Walsh • 15 years ago

0d6e623

- Allow lvm to dbus chat with hal

Daniel J Walsh • 15 years ago

2a650ea

- Fix cyphesis file context

Daniel J Walsh • 15 years ago

074b12f

- Allow hal/pm-utils to look at /var/run/video.rom

Daniel J Walsh • 15 years ago

6a09cfb

- Additional fixes for cyphesis

Daniel J Walsh • 15 years ago

411a424

- Allow dhcpc to restart ypbind

Daniel J Walsh • 15 years ago

333ebd6

- Fix confined users

Daniel J Walsh • 15 years ago

1bc89b8

- Fix confined users

Daniel J Walsh • 15 years ago

2362056

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 15 years ago

812930a

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 15 years ago

d8e5d05

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 15 years ago

a3e038c

- Allow mozilla to run with unconfined_execmem_t

Daniel J Walsh • 15 years ago

4fa9db7

- Dontaudit domains trying to write to .xsession-errors

Daniel J Walsh • 15 years ago

798a73d

- Allow nsplugin to look at autofs_t directory

Daniel J Walsh • 15 years ago

3281238

- Allow kerneloops to create tmp files

Daniel J Walsh • 15 years ago

de61cc7

- More alias for fastcgi

Daniel J Walsh • 15 years ago

ae68d97

- Remove mod_fcgid-selinux package

Daniel J Walsh • 15 years ago

236d3cc

- Fix dovecot access

Daniel J Walsh • 15 years ago

b9e15d9

- Policy cleanup

Daniel J Walsh • 15 years ago

49f48f4

- Remove Multiple spec

Daniel J Walsh • 15 years ago

b4cab5a

- Remove Multiple spec

Daniel J Walsh • 15 years ago

6115689

- Fix labeling of libGL

Daniel J Walsh • 15 years ago

4b4392d

- Update to upstream

Daniel J Walsh • 15 years ago

4125702

- Update to upstream

Daniel J Walsh • 15 years ago

b6cc6a8

- Update to upstream policy

Daniel J Walsh • 15 years ago

675bbab

- Fixes for confined xwindows and xdm_t

Daniel J Walsh • 15 years ago

1062bd3

- Allow confined users and xdm to exec wm

Daniel J Walsh • 15 years ago

86369ef

- Allow NetworkManager to transition to avahi and iptables

Daniel J Walsh • 15 years ago

f1a8278

- Allow domains to search other domains keys, coverup kernel bug

Daniel J Walsh • 15 years ago

b42a1ed

- Fix labeling for oracle

Daniel J Walsh • 15 years ago

094ef3d

- Allow nsplugin to comminicate with xdm_tmp_t sock_file

Daniel J Walsh • 15 years ago

2ede4ec

- Change all user tmpfs_t files to be labeled user_tmpfs_t

Daniel J Walsh • 15 years ago

9987374

- Upgrade to upstream

Daniel J Walsh • 15 years ago

b709ffd

- Allow confined users to login with dbus

Daniel J Walsh • 15 years ago

ed32c64

- Fix transition to nsplugin

Daniel J Walsh • 15 years ago

a80e7ac

- Fix transition to nsplugin

Daniel J Walsh • 15 years ago

d86efe5

- Add file context for /dev/mspblk.*

Daniel J Walsh • 15 years ago

f0375d5

- Fix transition to nsplugin '

Daniel J Walsh • 15 years ago

f77dd2c

- Fix labeling on new pm*log

Daniel J Walsh • 15 years ago

11ef247

- Fix labeling on new pm*log

Daniel J Walsh • 15 years ago

530772a

- Merge upstream changes

Daniel J Walsh • 15 years ago

16c3ff1

- Remove gamin policy

Daniel J Walsh • 15 years ago

aca77a6

- Add tinyxs-max file system support

Daniel J Walsh • 15 years ago

d0d3073

- Update to upstream

Daniel J Walsh • 15 years ago

0a219fe

- Allow audit dispatcher to kill his children

Daniel J Walsh • 15 years ago

3ad3552

- Update to upstream

Daniel J Walsh • 15 years ago

cd8bee5

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 15 years ago

7638e78

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 15 years ago

eb7e6dc

- Update to upstream

Daniel J Walsh • 15 years ago

57ae10c

- Update to upstream

Daniel J Walsh • 15 years ago

1a0f642

- Update to upstream

Daniel J Walsh • 15 years ago

b5d09d1

- Allow system-config-selinux to work with policykit

Daniel J Walsh • 15 years ago

0f1bd62

- Fix novel labeling

Daniel J Walsh • 15 years ago

174291b

- Fix novel labeling

Daniel J Walsh • 15 years ago

170fa29

- Consolodate pyzor,spamassassin, razor into one security domain

Daniel J Walsh • 15 years ago

07bd5c4

- Fixes for logrotate, alsa

Daniel J Walsh • 15 years ago

8f2532e

- Eliminate vbetool duplicate entry

Daniel J Walsh • 15 years ago

f12d5b9

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 15 years ago

0b05335

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 15 years ago

feefeee

- Update to latest refpolicy

Daniel J Walsh • 15 years ago

078ad09

- Update to latest refpolicy

Daniel J Walsh • 15 years ago

6ed8533

- Add inotify support to nscd

Daniel J Walsh • 15 years ago

df62201

Add nscd inotify fix

Daniel J Walsh • 15 years ago

6db69f0

- Allow unconfined_t to setfcap

Daniel J Walsh • 15 years ago

43f9fce

- Allow amanda to read tape

Daniel J Walsh • 15 years ago

273a44c

- Allow ypbind apps to net_bind_service

Daniel J Walsh • 15 years ago

258b00e

- Allow all system domains and application domains to append to any log

Daniel J Walsh • 15 years ago

75edec4

- Allow gdm to read rpm database

Daniel J Walsh • 15 years ago

cd60b64

- Allow vpnc to run ifconfig

Daniel J Walsh • 15 years ago

c186814

- Allow confined users to use postgres

Daniel J Walsh • 15 years ago

f86ed5a

- Apply unconfined_execmem_exec_t to haskell programs

Daniel J Walsh • 15 years ago

547aa2a

- Fix prelude file context

Daniel J Walsh • 15 years ago

6959e0b

- allow hplip to talk dbus

Daniel J Walsh • 15 years ago

fe0d467

- Prevent applications from reading x_device

Daniel J Walsh • 15 years ago

f4ff8bb

- Add /var/lib/selinux context

Daniel J Walsh • 15 years ago

5608a9d

- Update to upstream

Daniel J Walsh • 15 years ago

af0f735

- Update to upstream

Daniel J Walsh • 15 years ago

c5c253f

- Add livecd policy

Daniel J Walsh • 15 years ago

f513c7b

- Add livecd policy

Daniel J Walsh • 15 years ago

15f71c5

- Dontaudit search of admin_home for init_system_domain

Daniel J Walsh • 15 years ago

91ec07f

- Begin XAce integration

Daniel J Walsh • 15 years ago

80e0b80

- Merge Upstream

Daniel J Walsh • 15 years ago

081b6ac

- Merge Upstream

Daniel J Walsh • 15 years ago

2e33f7b

Update for rawhide

Daniel J Walsh • 15 years ago

4b7f030

- Allow amanada to create data files

Daniel J Walsh • 15 years ago

993c27d

- Remove dmesg boolean

Daniel J Walsh • 15 years ago

6c25b42

- Change unconfined_t to transition to unconfined_mono_t when running mono

Daniel J Walsh • 15 years ago

86881dd

- Remove old booleans from targeted-booleans.conf file

Daniel J Walsh • 15 years ago

2d8ff51

- Don't run crontab from unconfined_t

Daniel J Walsh • 15 years ago

b4e9331

- Don't run crontab from unconfined_t

Daniel J Walsh • 15 years ago

ef5e600

- Change etc files to config files to allow users to read them

Daniel J Walsh • 16 years ago

4b1d56d

- dontaudit mrtg reading /proc

Daniel J Walsh • 16 years ago

a6a82ae

Daniel J Walsh • 16 years ago

5896bad

Daniel J Walsh • 16 years ago

bb36d75

- Allow dhcpd to read kernel network state

Daniel J Walsh • 16 years ago

06686c2

- Label /var/run/gdm correctly

Daniel J Walsh • 16 years ago

41625a2

- Allow transition from initrc_t to getty_t

Daniel J Walsh • 16 years ago

254e3c7

- Allow passwd to communicate with user sockets to change gnome-keyring

Daniel J Walsh • 16 years ago

5a576e0

- Fix initial install

Daniel J Walsh • 16 years ago

7f851af

-

Daniel J Walsh • 16 years ago

c3c4a52

- Allow radvd to use fifo_file

Daniel J Walsh • 16 years ago

27943de

- Allow nsplugin to read /etc/mozpluggerrc, user_fonts

Daniel J Walsh • 16 years ago

c66f2bc

- Allow initrc_t to dbus chat with consolekit.

Daniel J Walsh • 16 years ago

294ea7a

- Additional access for nsplugin

Daniel J Walsh • 16 years ago

e54cb21

- Allow mount to mkdir on tmpfs

Daniel J Walsh • 16 years ago

f70afcd

- Fix file context for MATLAB

Daniel J Walsh • 16 years ago

bf3d39e

- Allow stunnel to transition to inetd children domains

Daniel J Walsh • 16 years ago

5ea3f10

Daniel J Walsh • 16 years ago

94b7be9

- Fixes for qemu/virtd

Daniel J Walsh • 16 years ago

ba9e5e8

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

97081dc

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

a6e1280

- Allow nsplugin to run acroread

Daniel J Walsh • 16 years ago

d593d26

- Add cups_pdf policy

Daniel J Walsh • 16 years ago

987b10f

- prewika needs to contact mysql

Daniel J Walsh • 16 years ago

7f811bf

- Change init_t to an unconfined_domain

Daniel J Walsh • 16 years ago

ceda8fe

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 16 years ago

0879f48

fixes for init, rhgb. also, fix the build

Bill Nottingham • 16 years ago

110bce3

- Additional changes for MLS policy

Daniel J Walsh • 16 years ago

2041ac3

- Fix initrc_context generation for MLS

Daniel J Walsh • 16 years ago

1bf67d5

- Fixes for libvirt

Daniel J Walsh • 16 years ago

dc57e68

- Allow bitlebee to read locale_t

Daniel J Walsh • 16 years ago

5947905

- More xselinux rules

Daniel J Walsh • 16 years ago

d8c1602

- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t

Daniel J Walsh • 16 years ago

9a0f35b

-

Daniel J Walsh • 16 years ago

338714f

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

b7229ad

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

40ce268

- Allow nsplugin_config execstack/execmem

Daniel J Walsh • 16 years ago

533c755

- Add cyphesis policy

Daniel J Walsh • 16 years ago

c092cc1

Daniel J Walsh • 16 years ago

063999d

-

Daniel J Walsh • 16 years ago

27b2b09

- Update to upstream fixes

Daniel J Walsh • 16 years ago

f75033d

- Add xace support

Daniel J Walsh • 16 years ago

5ca2ff9

- Add fusectl file system

Daniel J Walsh • 16 years ago

8bd036a

- Fixes from yum-cron

Daniel J Walsh • 16 years ago

541ba8e

Daniel J Walsh • 16 years ago

e5acebe

- Fix userdom_list_user_files

Daniel J Walsh • 16 years ago

3063935

- Merge with upstream

Daniel J Walsh • 16 years ago

eb3e9fb

- Allow udev to send audit messages

Daniel J Walsh • 16 years ago

7e1e7be

- Add additional login users interfaces

Daniel J Walsh • 16 years ago

9870c64

- More fixes for polkit

Daniel J Walsh • 16 years ago

49295b2

- More fixes for polkit

Daniel J Walsh • 16 years ago

ebe074b

- Update to upstream

Daniel J Walsh • 16 years ago

57ac1ca

- Fixes for staff_t

Daniel J Walsh • 16 years ago

4637b67

- Add policy for kerneloops

Daniel J Walsh • 16 years ago

b53db53

- Fixes for libvirt

Daniel J Walsh • 16 years ago

881d64a

- Fixes for nsplugin

Daniel J Walsh • 16 years ago

60c693e

- Additional ports for vnc and allow qemu and libvirt to search all

Daniel J Walsh • 16 years ago

11ac4bc

- Update to upstream

Daniel J Walsh • 16 years ago

b19d470

- Allow fail2ban to create a socket in /var/run

Daniel J Walsh • 16 years ago

e1060e2

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

59d6fbb

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

7c124f5

- Add audisp policy and prelude

Daniel J Walsh • 16 years ago

f18a882

- Allow all user roles to executae samba net command

Daniel J Walsh • 16 years ago

0f70114

- Allow usertypes to read/write noxattr file systems

Daniel J Walsh • 16 years ago

7c2be34

- Fix nsplugin to allow flashplugin to work in enforcing mode

Daniel J Walsh • 16 years ago

7c7d599

- Allow pam_selinux_permit to kill all processes

Daniel J Walsh • 16 years ago

0939872

- Allow ptrace or user processes by users of same type

Daniel J Walsh • 16 years ago

cc5bb89

- Allow nsplugin sys_nice, getsched, setsched

Daniel J Walsh • 16 years ago

ef19b75

- Allow login programs to talk dbus to oddjob

Daniel J Walsh • 16 years ago

b3c8a04

- Add procmail_log support

Daniel J Walsh • 16 years ago

98f84cb

- Allow setroubleshoot to read policy config and send audit messages

Daniel J Walsh • 16 years ago

e26fef9

- Allow users to execute all files in homedir, if boolean set

Daniel J Walsh • 16 years ago

8a40d69

- Fixes for xguest to run java plugin

Daniel J Walsh • 16 years ago

27c7d85

- dontaudit pam_t and dbusd writing to user_home_t

Daniel J Walsh • 16 years ago

4be3ba5

- Update gpg to allow reading of inotify

Daniel J Walsh • 16 years ago

5baf53a

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 16 years ago

a502c55

- Fix munin log,

Daniel J Walsh • 16 years ago

c64ec27

- Fix role transition from unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

88ae3f5

- Fix role transition fro unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

5d13344

- Let all uncofined domains communicate with dbus unconfined

Daniel J Walsh • 16 years ago

0ec33db

- Run rpm in system_r

Daniel J Walsh • 16 years ago

673eaae

- Zero out customizable types

Daniel J Walsh • 16 years ago

5615fe1

- Fix definiton of admin_home_t

Daniel J Walsh • 16 years ago

9a2cf87

- Fix munin file context

Daniel J Walsh • 16 years ago

2f257cb

- Allow cron to run unconfined apps

Daniel J Walsh • 16 years ago

91c2fa9

- Modify default login to unconfined_u

Daniel J Walsh • 16 years ago

99d3676

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

4d59c29

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

5928688

- Update to upstream

Daniel J Walsh • 16 years ago

76e3401

- Fixes for polkit

Daniel J Walsh • 16 years ago

4c6f2dd

- Add polkit policy

Daniel J Walsh • 16 years ago

7dfe3eb

- Update to upstream

Daniel J Walsh • 16 years ago

a1341a8

- Update to upstream

Daniel J Walsh • 16 years ago

02654b8

- Update to upstreamddddddddddddd

Daniel J Walsh • 16 years ago

d195fc7

- Allow rpm_script to transition to unconfined_execmem_t

Daniel J Walsh • 16 years ago

320f3e6

Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2.1-1

Daniel J Walsh • 16 years ago

3b47cb0

- Remove user based home directory separation

Daniel J Walsh • 16 years ago

9186dc5

- Remove user specific crond_t

Daniel J Walsh • 16 years ago

3a54e48

- Merge with upstream

Daniel J Walsh • 16 years ago

0fffbad

- Update to upstream

Daniel J Walsh • 16 years ago

ddf4ec4

- Update to upstream

Daniel J Walsh • 16 years ago

7330e86

- Update to upstream

Daniel J Walsh • 16 years ago

3640444

- Update to upstream

Daniel J Walsh • 16 years ago

fa0d1c8

- Allow XServer to read /proc/self/cmdline

Daniel J Walsh • 16 years ago

d0649e9

- Fixes for hald_mac

Daniel J Walsh • 16 years ago

30dfdc7

- Fix dnsmasq

Daniel J Walsh • 16 years ago

3375c34

- Allow rshd to connect to ports > 1023

Daniel J Walsh • 16 years ago

6455c9d

- Fix vpn to bind to port 4500

Daniel J Walsh • 16 years ago

953fd14

- Fix vpn to bind to port 4500

Daniel J Walsh • 16 years ago

ccf8a72

- Allow rpm to chat with networkmanager

Daniel J Walsh • 16 years ago

b4ed6db

- Pass the UNK_PERMS param to makefile

Daniel J Walsh • 16 years ago

9185bf2

- Make alsa work

Daniel J Walsh • 16 years ago

c27b2bd

- Fixes for consolekit and startx sessions

Daniel J Walsh • 16 years ago

28021c8

- Dontaudit consoletype talking to unconfined_t

Daniel J Walsh • 16 years ago

7a91e89

- Remove homedir_template

Daniel J Walsh • 16 years ago

8fd9df6

- Remove homedir_template

Daniel J Walsh • 16 years ago

922f646

- Check asound.state

Daniel J Walsh • 16 years ago

24ccb8b

- Fix exim policy

Daniel J Walsh • 16 years ago

492612d

- Allow tmpreadper to read man_t

Daniel J Walsh • 16 years ago

1ffa684

- Allow xdm to talk to input device (fingerprint reader)

Daniel J Walsh • 16 years ago

7c1c172

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 16 years ago

d770c53

- Allow nsswitch apps to read samba_var_t

Daniel J Walsh • 16 years ago

fb11ad6

- Fix maxima

Daniel J Walsh • 16 years ago

f5018f1

- Eliminate rpm_t:fifo_file avcs

Daniel J Walsh • 16 years ago

d83ea80

- Fix service start stop terminal avc's

Daniel J Walsh • 16 years ago

6c319e4

- Allow also to search var_lib

Daniel J Walsh • 16 years ago

ec4fb1c

- Allow cupsd_config_t to read/write usb_device_t

Daniel J Walsh • 16 years ago

347ff1a

- Fix java and mono to run in xguest account

Daniel J Walsh • 16 years ago

07e28d1

- Fix to add xguest account when inititial install

Daniel J Walsh • 16 years ago

a9d4b80

- Fix to add xguest account when inititial install

Daniel J Walsh • 16 years ago

c67a121

- Allow xserver to search devpts_t

Daniel J Walsh • 16 years ago

d90a3db

- Allow xserver to search devpts_t

Daniel J Walsh • 16 years ago

21c534b

- Remove hplip_etc_t change back to etc_t.

Daniel J Walsh • 16 years ago

7ff410d

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 16 years ago

1a3fe36

- Allow NetworkManager to dbus chat with yum-updated

Daniel J Walsh • 16 years ago

babb364

- Allow xfs to bind to port 7100

Daniel J Walsh • 16 years ago

bf7f975

- Allow newalias/sendmail dac_override

Daniel J Walsh • 16 years ago

25d5868

- Turn off direct transition

Daniel J Walsh • 16 years ago

4eaf5c6

- Allow wine to run in system role

Daniel J Walsh • 16 years ago

c7e443c

- Fix java labeling

Daniel J Walsh • 16 years ago

37d6a1c

- Define user_home_type as home_type

Daniel J Walsh • 16 years ago

07b8680

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 16 years ago

601f0f0

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 16 years ago

bea5486

- Allow login programs to read symlinks on homedirs

Daniel J Walsh • 16 years ago

bc85a6b

- Update an readd modules

Daniel J Walsh • 16 years ago

e8b5993

- Cleanup spec file

Daniel J Walsh • 16 years ago

7f9951d

- Cleanup spec file

Daniel J Walsh • 16 years ago

d9f4479

- Cleanup spec file

Daniel J Walsh • 16 years ago

b865b8b

- Cleanup spec file

Daniel J Walsh • 16 years ago

53f8191

- Cleanup spec file

Daniel J Walsh • 16 years ago

3012ab2

- Cleanup spec file

Daniel J Walsh • 16 years ago

d83af23

- Allow xserver to be started by unconfined process and talk to tty

Daniel J Walsh • 16 years ago

3b13a83

- Upgrade to upstream to grab postgressql changes

Daniel J Walsh • 16 years ago

95bbe5c

- Add setransd for mls policy

Daniel J Walsh • 16 years ago

77a2206

- Add setransd for mls policy

Daniel J Walsh • 16 years ago

c77aca5

- Add ldconfig_cache_t

Daniel J Walsh • 16 years ago

4f23c46

- Allow sshd to write to proc_t for afs login

Daniel J Walsh • 16 years ago

b4ae7d8

- Allow xserver access to urand

Daniel J Walsh • 16 years ago

f012074

- allow dovecot to search mountpoints

Daniel J Walsh • 16 years ago

7f6883c

- Fix Makefile for building policy modules

Daniel J Walsh • 16 years ago

0354c22

- Fix dhcpc startup of service

Daniel J Walsh • 16 years ago

60a9ef6

- Fix dbus chat to not happen for xguest and guest users

Daniel J Walsh • 16 years ago

bf33202

- Fix nagios cgi

Daniel J Walsh • 16 years ago

d44a393

- Fixes for ldconfig

Daniel J Walsh • 16 years ago

1a12c25

- Update from upstream

Daniel J Walsh • 16 years ago

d8c8b2b

- Update from upstream

Daniel J Walsh • 16 years ago

f977821

- Update from upstream

Daniel J Walsh • 16 years ago

25a7546

- Fix new usb devices and dmfm

Daniel J Walsh • 16 years ago

4ce75b7

- Fix new usb devices and dmfm

Daniel J Walsh • 16 years ago

8239a93

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 16 years ago

6d2e7d5

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 16 years ago

47a35fa

- Allow xserver to write to ramfs mounted by rhgb

Daniel J Walsh • 16 years ago

07351eb

- Add context for dbus machine id

Daniel J Walsh • 16 years ago

9c03863

- Update with latest changes from upstream

Daniel J Walsh • 16 years ago

2fac1d6

- Fix prelink to handle execmod

Daniel J Walsh • 16 years ago

24acabc

- Fix prelink to handle execmod

Daniel J Walsh • 16 years ago

0f8f545

- Add ntpd_key_t to handle secret data

Daniel J Walsh • 16 years ago

e0ae206

- Add anon_inodefs

Daniel J Walsh • 16 years ago

2ced404

- Allow cups to use generic usb

Daniel J Walsh • 16 years ago

779d23c

- Add proper contexts for rsyslogd

Daniel J Walsh • 16 years ago

908512c

- Allow execution of gconf

Daniel J Walsh • 16 years ago

297dd1a

- Fix moilscanner update problem

Daniel J Walsh • 16 years ago

1d03199

- Begin adding policy to separate setsebool from semanage

Daniel J Walsh • 16 years ago

7e35064

- Fix xserver.if definition to not break sepolgen.if

Daniel J Walsh • 16 years ago

16d9531

- Add new devices

Daniel J Walsh • 16 years ago

2796de2

- Add brctl policy

Daniel J Walsh • 16 years ago

154d823

- Fix root login to include system_r

Daniel J Walsh • 16 years ago

501a17b

- Allow prelink to read kernel sysctls

Daniel J Walsh • 16 years ago

35e7f77

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 16 years ago

af67779

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 16 years ago

b267b6f

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 16 years ago

b529ed6

- fix squid

Daniel J Walsh • 16 years ago

2fdb5fd

- Fix syslog declaration

Daniel J Walsh • 16 years ago

b786a2b

- Allow avahi to access inotify

Daniel J Walsh • 16 years ago

7f44213

- Remove ifdef strict policy from upstream

Daniel J Walsh • 16 years ago

269acb5

- Remove ifdef strict policy from upstream

Daniel J Walsh • 16 years ago

a4ec9b7

- Remove ifdef strict policy from upstream

Daniel J Walsh • 16 years ago

56187c2

- Fix for amands

Daniel J Walsh • 16 years ago

bdb8302

Daniel J Walsh • 16 years ago

346d2dc

- allow alsactl to read kernel state

Daniel J Walsh • 16 years ago

9ffb88e

- More fixes for alsactl

Daniel J Walsh • 16 years ago

fc35770

- More fixes for alsactl

Daniel J Walsh • 16 years ago

88c8465

- Fixes for suspend resume.

Daniel J Walsh • 16 years ago

cf806eb

- Allow unconfined_t to transition to NetworkManager_t

Daniel J Walsh • 16 years ago

7c3dcb3

- Update to latest from upstream

Daniel J Walsh • 16 years ago

810e696

- Update to latest from upstream

Daniel J Walsh • 16 years ago

8cd496f

- Update to latest from upstream

Daniel J Walsh • 16 years ago

057603f

- Update to latest from upstream

Daniel J Walsh • 16 years ago

daa6abe

- Update to latest from upstream

Daniel J Walsh • 16 years ago

a615d5b

- Update to latest from upstream

Daniel J Walsh • 16 years ago

8fea836

-

Daniel J Walsh • 16 years ago

6821c3d

- Fixes for unix_update

Daniel J Walsh • 16 years ago

77d25eb

- Upstream bumped the version

Daniel J Walsh • 17 years ago

8396b2d

- Allow consolekit to syslog

Daniel J Walsh • 17 years ago

61947fa

- Allow iptbales to read etc_runtime_t

Daniel J Walsh • 17 years ago

2db3c1e

- MLS Fixes

Daniel J Walsh • 17 years ago

4661767

- MLS Fixes

Daniel J Walsh • 17 years ago

53b2229

- Fix path of /etc/lvm/cache directory

Daniel J Walsh • 17 years ago

883a025

- Fixes for alsactl and pppd_t

Daniel J Walsh • 17 years ago

ab59bec

- Fixes for consolekit

Daniel J Walsh • 17 years ago

32b18f8

- Allow insmod_t to mount kvmfs_t filesystems

Daniel J Walsh • 17 years ago

7671cee

- Rwho policy

Daniel J Walsh • 17 years ago

9fc00bc

- fixes for fusefs

Daniel J Walsh • 17 years ago

e6f3cfb

- Fix samba_net to allow it to view samba_var_t

Daniel J Walsh • 17 years ago

8c912ab

- Update to upstream

Daniel J Walsh • 17 years ago

a3b1a2c

- Fix Sonypic backlight

Daniel J Walsh • 17 years ago

5d5caeb

- Fixes for pyzor, cyrus, consoletype on everything installs

Daniel J Walsh • 17 years ago

7f1bd86

- Fix hald_acl_t to be able to getattr/setattr on usb devices

Daniel J Walsh • 17 years ago

0b3279d

- Allow bluetooth to read inotifyfs

Daniel J Walsh • 17 years ago

21029bf

- Fixes for samba domain controller.

Daniel J Walsh • 17 years ago

e6b9e29

- Fix interface call

Daniel J Walsh • 17 years ago

f9f9ddc

- Allow syslog-ng to read /var

Daniel J Walsh • 17 years ago

89d3de7

- Update to upstream

Daniel J Walsh • 17 years ago

2528fa0

- Update to upstream

Daniel J Walsh • 17 years ago

8e5289e

- Update to upstream

Daniel J Walsh • 17 years ago

ce7f30a

- Allow samba to run groupadd

Daniel J Walsh • 17 years ago

f040ac5

- Update to upstream

Daniel J Walsh • 17 years ago

f634733

- Fix labeling on udev.tbl dirs

Daniel J Walsh • 17 years ago

281f5f5

- Fixes for logwatch

Daniel J Walsh • 17 years ago

552645b

- Add fusermount and mount_ntfs policy

Daniel J Walsh • 17 years ago

593fb16

- Update to upstream

Daniel J Walsh • 17 years ago

9d59ec4

Daniel J Walsh • 17 years ago

d3aabae

- Fixes for samba_var_t

Daniel J Walsh • 17 years ago

741e816

- Remove disable_trans booleans

Daniel J Walsh • 17 years ago

db4f0ec

- Remove enable_audit booleans

Daniel J Walsh • 17 years ago

2823e28

- Fix prelink to be able to manage usr dirs.

Daniel J Walsh • 17 years ago

2f82eed

- Allow insmod to launch init scripts

Daniel J Walsh • 17 years ago

9468a64

- Remove setsebool policy

Daniel J Walsh • 17 years ago

271752a

- Fix handling of unlabled_t packets

Daniel J Walsh • 17 years ago

bdb7f99

- More of my patches from upstream

Daniel J Walsh • 17 years ago

2a9b648

- Update to latest from upstream

Daniel J Walsh • 17 years ago

1fed4c7

- Update to latest from upstream

Daniel J Walsh • 17 years ago

9a8202d

- Update to remove security_t:filesystem getattr problems

Daniel J Walsh • 17 years ago

5ad70cf

- Policy for consolekit

Daniel J Walsh • 17 years ago

13893ed

Daniel J Walsh • 17 years ago

af8af9c

- Revert Nemiver change

Daniel J Walsh • 17 years ago

cc1be22

- Add sepolgen support

Daniel J Walsh • 17 years ago

b086117

- Add sepolgen support

Daniel J Walsh • 17 years ago

b7da3b9

- Add sepolgen support

Daniel J Walsh • 17 years ago

2fa5bb0

THu Feb 15 2007 Dan Walsh <dwalsh@redhat.com> 2.5.3-3

Daniel J Walsh • 17 years ago

e10e57a

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

07dcdf7

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

1a24735

-

Daniel J Walsh • 17 years ago

df0bef9

-

Daniel J Walsh • 17 years ago

9aff35b

- Allow mozilla, evolution and thunderbird to read dev_random. Resolves:

Daniel J Walsh • 17 years ago

39b6cec

- Fix ssh_agent to be marked as an executable

Daniel J Walsh • 17 years ago

33501ce

- Fix spamassisin so crond can update spam files

Daniel J Walsh • 17 years ago

de0b364

- Remove some targeted diffs in file context file

Daniel J Walsh • 17 years ago

3902fd8

- Fix squid cachemgr labeling

Daniel J Walsh • 17 years ago

edd045d

- Add ability to generate webadm_t policy

Daniel J Walsh • 17 years ago

e45f5d3

- Continue fixing, additional user domains

Daniel J Walsh • 17 years ago

cc7c06a

- Begin adding user confinement to targeted policy

Daniel J Walsh • 17 years ago

f86e423

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

4547819

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ee095f5

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

b6ed674

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ae5ace1

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

9e0fa4f

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

a384d73

- Allow spamassassin to read var_lib_t dir Resolves: #219234

Daniel J Walsh • 17 years ago

8a03d5e

- fix mplayer to work under strict policy

Daniel J Walsh • 17 years ago

9bcfd16

- Add gconf policy and make it work with strict

Daniel J Walsh • 17 years ago

8bacd8e

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

5db544f

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

135ea97

- Fix to allow ftp to bind to ports > 1024 Resolves: #219349

Daniel J Walsh • 17 years ago

9051d60

Daniel J Walsh • 17 years ago

5ded3c3

Daniel J Walsh • 17 years ago

4fd323b

- Allow semanage to exec it self. Label genhomedircon as semanage_exec_t

Daniel J Walsh • 17 years ago

f9e32a0

- allow automount to setgid Resolves: #219999

Daniel J Walsh • 17 years ago

be9aefc

- Allow cron to polyinstatiate

Daniel J Walsh • 17 years ago

5e01b46

Daniel J Walsh • 17 years ago

272aa0b

Resolves: #218978

Daniel J Walsh • 17 years ago

3a51847

Resolves: #218978

Daniel J Walsh • 17 years ago

422dcf1

- Allow initrc to create files in /var directories Resolves: #219227

Daniel J Walsh • 17 years ago

e3b143b

- More fixes for MLS

Daniel J Walsh • 17 years ago

6157a7e

- More Fixes polyinstatiation Resolves: #216184

Daniel J Walsh • 17 years ago

dd5d7e7

- Fix handling of keyrings

Daniel J Walsh • 17 years ago

a169fb7

- Fix polyinstatiation

Daniel J Walsh • 17 years ago

852ba6b

- More fixes for quota Resolves: #212957

Daniel J Walsh • 17 years ago

414ddd0

- ncsd needs to use avahi sockets Resolves: #217640 Resolves: #218014

Daniel J Walsh • 17 years ago

9f388c1

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 17 years ago

b6ffd7c

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 17 years ago

aba668f

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 17 years ago

036c1c2

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 17 years ago

cc1462b

- Fix context for helix players file_context #216942

Daniel J Walsh • 17 years ago

e4d46c9

- Fix load_policy to be able to mls_write_down so it can talk to the

Daniel J Walsh • 17 years ago

02560da

- Fixes for hwclock, clamav, ftp

Daniel J Walsh • 17 years ago

4218645

- Move to upstream version which accepted my patches

Daniel J Walsh • 17 years ago

9e4aeac

- Fixes for nvidia driver

Daniel J Walsh • 17 years ago

b28d0a7

- Fixes for nvidia driver

Daniel J Walsh • 17 years ago

a3f2f57

- Fixes for nvidia driver

Daniel J Walsh • 17 years ago

150bdfb

- Allow semanage to signal mcstrans

Daniel J Walsh • 17 years ago

b0ecaa9

- Update to upstream

Daniel J Walsh • 17 years ago

73ea8c2

- Allow modstorage to edit /etc/fstab file

Daniel J Walsh • 17 years ago

d925bd3

- Fix for qemu, /dev/

Daniel J Walsh • 17 years ago

ec17438

- Fix path to realplayer.bin

Daniel J Walsh • 17 years ago

32b91c9

- Allow xen to connect to xen port

Daniel J Walsh • 17 years ago

06b64f8

- Allow cups to search samba_etc_t directory

Daniel J Walsh • 17 years ago

1a986f0

- Allow xen to search automount

Daniel J Walsh • 17 years ago

2098c9b

- Fix spec of jre files

Daniel J Walsh • 17 years ago

6ba4868

- Fix unconfined access to shadow file

Daniel J Walsh • 17 years ago

0806593

- Allow xend to create files in xen_image_t directories

Daniel J Walsh • 17 years ago

4d11495

- Fixes for /var/lib/hal

Daniel J Walsh • 17 years ago

0fcc493

- Remove ability for sysadm_t to look at audit.log

Daniel J Walsh • 17 years ago

f08bf92

- Fix rpc_port_types

Daniel J Walsh • 17 years ago

f3ecbbf

- Merge with upstream

Daniel J Walsh • 17 years ago

d7e0f9f

- Lots of fixes for ricci

Daniel J Walsh • 17 years ago

0dae3b6

- Add perms for swat

Daniel J Walsh • 17 years ago

d095a0e

- Allow daemons to dump core files to /

Daniel J Walsh • 17 years ago

6b97615

- Fixes for ricci

Daniel J Walsh • 17 years ago

8fb79d4

- Allow mount.nfs to work

Daniel J Walsh • 17 years ago

6672fcf

- Allow ricci-modstorage to look at lvm_etc_t

Daniel J Walsh • 17 years ago

85659e7

- Fixes for ricci using saslauthd

Daniel J Walsh • 17 years ago

08efeff

- Allow mountpoint on home_dir_t and home_t

Daniel J Walsh • 17 years ago

dc804f3

- Update xen to read nfs files

Daniel J Walsh • 17 years ago

8ff9d6e

Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4

Daniel J Walsh • 17 years ago

3d011ff

- Allow hal to use power_device_t

Daniel J Walsh • 17 years ago

11d7ea1

- Allow procemail to look at autofs_t

Daniel J Walsh • 17 years ago

d6926f7

- Refupdate from upstream

Daniel J Walsh • 17 years ago

e2eecb7

- Add lots of fixes for mls cups

Daniel J Walsh • 17 years ago

302afb6

- Lots of fixes for ricci

Daniel J Walsh • 17 years ago

6fa5ece

- Fix number of cats

Daniel J Walsh • 17 years ago

2d1b4a4

- Update to upstream

Daniel J Walsh • 17 years ago

da08298

- More iSCSI changes for #209854

jantill • 17 years ago

a3698a1

- Test ISCSI fixes for #209854

jantill • 17 years ago

cd0a0d2

- allow semodule to rmdir selinux_config_t dir

Daniel J Walsh • 17 years ago

ed9a4cc

- Fix boot_runtime_t problem on ppc. Should not be creating these files.

Daniel J Walsh • 17 years ago

70e2dbc

- Fix context mounts on reboot

Daniel J Walsh • 17 years ago

16c971a

- Update for tallylog

Daniel J Walsh • 17 years ago

7316db5

- Allow xend to rewrite dhcp conf files

Daniel J Walsh • 17 years ago

bfcffea

- Make xentapctrl work

Daniel J Walsh • 17 years ago

160281b

- Don't transition unconfined_t to bootloader_t

Daniel J Walsh • 17 years ago

46f098a

- Patch for labeled networking

Daniel J Walsh • 17 years ago

f21d67b

- Fix crond handling for mls

Daniel J Walsh • 17 years ago

42dd742

- Update to upstream

Daniel J Walsh • 17 years ago

8fff699

- Remove bluetooth-helper transition

Daniel J Walsh • 17 years ago

52ba98b

- Fix prelink

Daniel J Walsh • 17 years ago

5096e7d

- Fix rhgb

Daniel J Walsh • 17 years ago

3c45770

- Fix setrans handling on MLS and useradd

Daniel J Walsh • 17 years ago

172c6c7

- Support for fuse

Daniel J Walsh • 17 years ago

afbab5a

- Fix dovecot, amanda

Daniel J Walsh • 17 years ago

bfd584d

- Fix dovecot, amanda

Daniel J Walsh • 17 years ago

201e1d3

- Allow java execheap for itanium

Daniel J Walsh • 17 years ago

d25a3ee

- Update with upstream

Daniel J Walsh • 17 years ago

a76cf8a

- mls fixes

Daniel J Walsh • 17 years ago

857ce15

- Update from upstream

Daniel J Walsh • 17 years ago

85bd855

- More fixes for mls

Daniel J Walsh • 17 years ago

8d52bdb

- Fix cron jobs to run under the correct context

Daniel J Walsh • 17 years ago

5ec822a

- Fixes to make pppd work

Daniel J Walsh • 17 years ago

cc9afdc

- Fixes to make pppd work

Daniel J Walsh • 17 years ago

b4815d0

- Multiple policy fixes

Daniel J Walsh • 17 years ago

c56aa10

- Fix transition on mcstransd

Daniel J Walsh • 17 years ago

b8c7850

- Add /dev/em8300 defs

Daniel J Walsh • 17 years ago

38b22ca

- Upgrade to upstream

Daniel J Walsh • 17 years ago

3f1bb62

- Upgrade to upstream

Daniel J Walsh • 17 years ago

f511de4

- Fix ppp connections from network manager

Daniel J Walsh • 17 years ago

60792f9

- Fix ppp connections from network manager

Daniel J Walsh • 17 years ago

588fb9d

- Fix ppp connections from network manager

Daniel J Walsh • 17 years ago

5f2a4e5

- Add tty access to all domains boolean

Daniel J Walsh • 17 years ago

861af1c

- Fixed typealias of firstboot_rw_t

Daniel J Walsh • 17 years ago

9fbb713

- Fix location of xel log files

Daniel J Walsh • 17 years ago

8b6c373

- Fixes for autofs, lp

Daniel J Walsh • 17 years ago

1ef9d40

- Update from upstream

Daniel J Walsh • 17 years ago

937c1cc

- Fixup for test6

Daniel J Walsh • 17 years ago

57075ee

- Fixup for test6

Daniel J Walsh • 17 years ago

66ca8d0

- Fixup for test6

Daniel J Walsh • 17 years ago

4bf7cf3

- Update to upstream

Daniel J Walsh • 17 years ago

efb0897

- Update to upstream

Daniel J Walsh • 17 years ago

928af41

- Fix suspend to disk problems

Daniel J Walsh • 17 years ago

04dd122

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 17 years ago

a1c3b4e

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 17 years ago

3723ca6

- Fix audit line

Daniel J Walsh • 17 years ago

e4710b3

- Fix audit line

Daniel J Walsh • 17 years ago

7f5a12d

- Fix requires line

Daniel J Walsh • 17 years ago

358adda

- Upgrade to upstream

Daniel J Walsh • 17 years ago

06027c9

- Fix install problems

Daniel J Walsh • 17 years ago

1616552

- Allow setroubleshoot to getattr on all dirs to gather RPM data

Daniel J Walsh • 17 years ago

9e88149

- Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32

Daniel J Walsh • 17 years ago

4c34858

- Fix xen tty devices

Daniel J Walsh • 17 years ago

b2d3ebd

- Fixes for setroubleshoot

Daniel J Walsh • 17 years ago

8cd82cf

- Update to upstream

Daniel J Walsh • 17 years ago

a5dcfa8

- Fixes for stunnel and postgresql

Daniel J Walsh • 17 years ago

3559b53

- Fixes for stunnel and postgresql

Daniel J Walsh • 17 years ago

6f77ee0

- Update from upstream

Daniel J Walsh • 17 years ago

79b5c47

- Update from upstream

Daniel J Walsh • 17 years ago

256cfc6

- Change allow_execstack to default to on, for RHEL5 Beta. This is required

Daniel J Walsh • 17 years ago

543bc33

- Misc fixes

Daniel J Walsh • 17 years ago

5974f40

Th Aug 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3.6-3

Daniel J Walsh • 17 years ago

c22acae

- More fixes for strict policy

Daniel J Walsh • 17 years ago

d0ed11a

- Quiet down anaconda audit messages

Daniel J Walsh • 17 years ago

8da541a

- Fix setroubleshootd

Daniel J Walsh • 17 years ago

932c79f

- Update to the latest from upstream

Daniel J Walsh • 17 years ago

2620206

- More fixes for xen

Daniel J Walsh • 17 years ago

7505584

- Fix anaconda transitions

Daniel J Walsh • 17 years ago

1c92c78

- yet more xen rules

Daniel J Walsh • 17 years ago

5dc8b14

- more xen rules

Daniel J Walsh • 17 years ago

031e1ae

- Fixes for Samba

Daniel J Walsh • 17 years ago

1b1dad0

- Fixes for xen

Daniel J Walsh • 17 years ago

be45a2b

- Allow setroubleshootd to send mail

Daniel J Walsh • 17 years ago

9782db9

- Add nagios policy

Daniel J Walsh • 17 years ago

1f20939

- fixes for setroubleshoot

Daniel J Walsh • 17 years ago

90c4086

- Added Paul Howorth patch to only load policy packages shipped with this

Daniel J Walsh • 17 years ago

9554c94

- Allow pidof from initrc to ptrace higher level domains

Daniel J Walsh • 17 years ago

9d77b6b

- Add policy for /var/run/ldapi

Daniel J Walsh • 17 years ago

8555e0e

- Fix setroubleshoot policy

Daniel J Walsh • 17 years ago

b14e133

- Fixes for mls use of ssh

Daniel J Walsh • 17 years ago

7b4c787

- Fixes to make setroubleshoot work

Daniel J Walsh • 17 years ago

efa5f59

- Cups needs to be able to read domain state off of printer client

Daniel J Walsh • 17 years ago

1c15e38

- add boolean to allow zebra to write config files

Daniel J Walsh • 17 years ago

c7b7392

- setroubleshootd fixes

Daniel J Walsh • 17 years ago

31c47be

- Allow prelink to read bin_t symlink

Daniel J Walsh • 17 years ago

2bf148e

- Remove spamassassin_can_network boolean

Daniel J Walsh • 17 years ago

c62a785

- Update to upstream

Daniel J Walsh • 17 years ago

2107557

- Add setroubleshoot policy

Daniel J Walsh • 17 years ago

8a7ef5e

- Turn off auditallow on setting booleans

Daniel J Walsh • 17 years ago

317bd2f

- Multiple fixes

Daniel J Walsh • 17 years ago

d819090

- Update to upstream

Daniel J Walsh • 17 years ago

8bee3a4

- Update to upstream

Daniel J Walsh • 17 years ago

4a291ab

- Update to upstream

Daniel J Walsh • 17 years ago

9e7fd17

- Update to upstream

Daniel J Walsh • 17 years ago

1065b18

- Fix requires

Daniel J Walsh • 17 years ago

446e9b4

- Update to upstream

Daniel J Walsh • 17 years ago

2b87b02

- Break out selinux-devel package

Daniel J Walsh • 17 years ago

63e20b9

- Break out selinux-devel package

Daniel J Walsh • 17 years ago

77dc77c

- Add ibmasmfs

Daniel J Walsh • 17 years ago

af203b6

- Fix policygentool gen_requires

Daniel J Walsh • 17 years ago

cc073e7

- Fix policygentool gen_requires

Daniel J Walsh • 17 years ago

4ef386f

- Update from Upstream

Daniel J Walsh • 17 years ago

358335b

- Fix spec of realplay

Daniel J Walsh • 17 years ago

0fe5c73

- Update to upstream

Daniel J Walsh • 17 years ago

2616c66

- Allow useradd to create_home_dir in MLS environment

Daniel J Walsh • 17 years ago

b637d98

- Update from upstream

Daniel J Walsh • 17 years ago

3004d53

- Update from upstream

Daniel J Walsh • 17 years ago

c54f60d

- Update from upstream

Daniel J Walsh • 17 years ago

cfc04db

- Add oprofilefs

Daniel J Walsh • 17 years ago

a4c7090

- Fix for hplip and Picasa

Daniel J Walsh • 17 years ago

a55870f

- Update to upstream

Daniel J Walsh • 17 years ago

43fe713

- fixes for java, openldap and webalizer

Daniel J Walsh • 17 years ago

7580a10

- Xen fixes

Daniel J Walsh • 17 years ago

d065eef

- Xen fixes

Daniel J Walsh • 17 years ago

e30da94

- Upgrade to upstream

Daniel J Walsh • 17 years ago

e5e5095

- allow hal to read boot_t files

Daniel J Walsh • 17 years ago

75d0fe4

- allow hal to read boot_t files

Daniel J Walsh • 17 years ago

4aae365

- Update from upstream

Daniel J Walsh • 17 years ago

f4d1707

- Fixes for amavis

Daniel J Walsh • 17 years ago

82d40f4

- Update from upstream

Daniel J Walsh • 17 years ago

52288bc

- Allow auditctl to search all directories

Daniel J Walsh • 17 years ago

a97d1fe

- Add acquire service for mono.

Daniel J Walsh • 17 years ago

f08aca0

- Turn off allow_execmem boolean

Daniel J Walsh • 17 years ago

89e397d

- Clean up spec file

Daniel J Walsh • 17 years ago

ca8bc2d

- Allow execution of cvs command

Daniel J Walsh • 17 years ago

539ba8a

- Update to upstream

Daniel J Walsh • 17 years ago

a522754

- Update to upstream

Daniel J Walsh • 17 years ago

529f12c

- Fix libjvm spec

Daniel J Walsh • 17 years ago

49dfee4

- Update to upstream

Daniel J Walsh • 17 years ago

ea725ce

- Add xm policy

jantill • 17 years ago

684125a

- Update to upstream

Daniel J Walsh • 17 years ago

bbaa1f2

- Allow mono to chat with unconfined

Daniel J Walsh • 18 years ago

e847c84

- Allow procmail to sendmail

Daniel J Walsh • 18 years ago

d2fe1b1

- Update to latest from upstream

Daniel J Walsh • 18 years ago

5ff36d6

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c74f145

- Add unconfined_mount_t

Daniel J Walsh • 18 years ago

3c584c7

- Update to latest from upstream

Daniel J Walsh • 18 years ago

ca05971

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c4826d0

- Change libraries.fc to stop shlib_t form overriding texrel_shlib_t

Daniel J Walsh • 18 years ago

c7b01ad

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

5cbfde1

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

c53f3b8

Change file contexts and several minor policy changes.

rcoker • 18 years ago

a442ed4

- More textrel_shlib_t file path fixes

Daniel J Walsh • 18 years ago

67bc5eb

- Get auditctl working in MLS policy

Daniel J Walsh • 18 years ago

4fd214b

- Add mono dbus support

Daniel J Walsh • 18 years ago

2ad4f12

- Update to upstream

Daniel J Walsh • 18 years ago

da5d600

- Allow automount and dbus to read cert files

Daniel J Walsh • 18 years ago

d2bd4f4

- Fix ftp policy

Daniel J Walsh • 18 years ago

58ec7a5

- Update to upstream

Daniel J Walsh • 18 years ago

5c1cd71

- Update to upstream

Daniel J Walsh • 18 years ago

bbe0ad9

- Update to upstream

Daniel J Walsh • 18 years ago

5a01431

- Fix policyhelp

Daniel J Walsh • 18 years ago

bd3f0ea

- Fix pam_console handling of usb_device

Daniel J Walsh • 18 years ago

faffd3a

- Update to upstream

Daniel J Walsh • 18 years ago

414d6d8

- Update to upstream

Daniel J Walsh • 18 years ago

ad73e86

- Update to upstream

Daniel J Walsh • 18 years ago

727bb2e

- Get transition rules to create policy.20 at SystemHigh

Daniel J Walsh • 18 years ago

9f8b058

- Allow secadmin to shutdown system

Daniel J Walsh • 18 years ago

5b46764

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

6d42754

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

0a74a26

- remove mkdir /usr/share/selinux/, it's not required and even wrong

Karsten Hopp • 18 years ago

4e431cf

- Get rid of mount/fsdisk scan of /dev messages

Daniel J Walsh • 18 years ago

4c9f08f

- Fake make to rebuild enableaudit.pp

Daniel J Walsh • 18 years ago

54b0b58

- Get xen networking running.

Daniel J Walsh • 18 years ago

6d23889

- Fixes for Xen

Daniel J Walsh • 18 years ago

23a177b

- more xen policy fixups

Jeremy Katz • 18 years ago

b33ec3c

- more xen fixage (#184393)

Jeremy Katz • 18 years ago

1b07552

- Fix blkid specification

Daniel J Walsh • 18 years ago

060041b

- Blkid changes

Daniel J Walsh • 18 years ago

9c64bb6

- Allow lvm tools to create drevice dir

Daniel J Walsh • 18 years ago

4c9f658

- Add Xen support

Daniel J Walsh • 18 years ago

0204772

- Fixes for cups

Daniel J Walsh • 18 years ago

72a1365

- Fixes for cups

Daniel J Walsh • 18 years ago

0296aff

- Load Policy needs translock

Daniel J Walsh • 18 years ago

76d7c52

- Fix cups html interface

Daniel J Walsh • 18 years ago

ef0cb15

- Add hal changes suggested by Jeremy

Daniel J Walsh • 18 years ago

21277d9

- add policyhelp to point at policy html pages

Daniel J Walsh • 18 years ago

d2c2609

- Additional fixes for nvidia and cups

Daniel J Walsh • 18 years ago

8254bb0

- Update to upstream

Daniel J Walsh • 18 years ago

575aa98

*** empty log message ***

Daniel J Walsh • 18 years ago

fbec4b5

*** empty log message ***

Daniel J Walsh • 18 years ago

290aa68

*** empty log message ***

Daniel J Walsh • 18 years ago

dd2612b

*** empty log message ***

Daniel J Walsh • 18 years ago

e135c76

*** empty log message ***

Daniel J Walsh • 18 years ago

7716868

*** empty log message ***

Daniel J Walsh • 18 years ago

c126996

*** empty log message ***

Daniel J Walsh • 18 years ago

7dca0e2

*** empty log message ***

Daniel J Walsh • 18 years ago

5d5343f

*** empty log message ***

Daniel J Walsh • 18 years ago

d19b685

*** empty log message ***

Daniel J Walsh • 18 years ago

701455e

*** empty log message ***

Daniel J Walsh • 18 years ago

585f827

*** empty log message ***

Daniel J Walsh • 18 years ago

d4d1f2b

*** empty log message ***

Daniel J Walsh • 18 years ago

4dab276

*** empty log message ***

Daniel J Walsh • 18 years ago

a57054e

*** empty log message ***

Daniel J Walsh • 18 years ago

d5ae27d

*** empty log message ***

Daniel J Walsh • 18 years ago

28c4257

*** empty log message ***

Daniel J Walsh • 18 years ago

46bd65b

*** empty log message ***

Daniel J Walsh • 18 years ago

31d4d26

*** empty log message ***

Daniel J Walsh • 18 years ago

f0e87bc

*** empty log message ***

Daniel J Walsh • 18 years ago

3debd0a

*** empty log message ***

Daniel J Walsh • 18 years ago

6e9bcb4

*** empty log message ***

Daniel J Walsh • 18 years ago

f3a3900

*** empty log message ***

Daniel J Walsh • 18 years ago

025d1ec

*** empty log message ***

Daniel J Walsh • 18 years ago

2f15a23

*** empty log message ***

Daniel J Walsh • 18 years ago

c417f6b

*** empty log message ***

Daniel J Walsh • 18 years ago

cb99f70

*** empty log message ***

Daniel J Walsh • 18 years ago

847884d

*** empty log message ***

Daniel J Walsh • 18 years ago

32b8716

*** empty log message ***

Daniel J Walsh • 18 years ago

faa80bb

*** empty log message ***

Daniel J Walsh • 18 years ago

5a82999

*** empty log message ***

Daniel J Walsh • 18 years ago

b28bebe

*** empty log message ***

Daniel J Walsh • 18 years ago

a3a62ab

*** empty log message ***

Daniel J Walsh • 18 years ago

de82d85

*** empty log message ***

Daniel J Walsh • 18 years ago

38c8068

- Update to upstream

Daniel J Walsh • 18 years ago

681c9dc

- Update to upstream

Daniel J Walsh • 18 years ago

7374323

- Update to upstream

Daniel J Walsh • 18 years ago

3325377

- Update to upstream

Daniel J Walsh • 18 years ago

70d9b48

- Update to upstream

Daniel J Walsh • 18 years ago

78265f4

- Add inotifyfs handling

Daniel J Walsh • 18 years ago

b6e6b56

- Update to upstream

Daniel J Walsh • 18 years ago

e76babe

- Many changes for MLS

Daniel J Walsh • 18 years ago

a3b5c30

- Update to upstream

Daniel J Walsh • 18 years ago

129ba16

- Update to upstream

Daniel J Walsh • 18 years ago

30a020f

- Update to upstream

Daniel J Walsh • 18 years ago

05207b6

- Update to upstream

Daniel J Walsh • 18 years ago

a1c584a

- Update to upstream

Daniel J Walsh • 18 years ago

2e71478

- Update to upstream

Daniel J Walsh • 18 years ago

cdab5cb

- Update to upstream

Daniel J Walsh • 18 years ago

7ba8b0d

- fix pup transitions (#177262)

Jeremy Katz • 18 years ago

b9b2d8a

- Update to upstream

Daniel J Walsh • 18 years ago

6401280

- More Fixes for hal and readahead

Daniel J Walsh • 18 years ago

ef14779

- Fixes for hal and readahead

Daniel J Walsh • 18 years ago

e485f59

- Update to upstream

Daniel J Walsh • 18 years ago

26e33df

- Handle new location of hal scripts

Daniel J Walsh • 18 years ago

451d9b4

- Allow su to read /etc/mtab

Daniel J Walsh • 18 years ago

0088858

- Update to upstream

Daniel J Walsh • 18 years ago

026fac6

- Update to upstream

Daniel J Walsh • 18 years ago

2864321

- Update to upstream

Daniel J Walsh • 18 years ago

a736f97

- Fix "libsemanage.parse_module_headers: Data did not represent a module."

Daniel J Walsh • 18 years ago

120d3b5

- Allow load_policy to read /etc/mtab

Daniel J Walsh • 18 years ago

ce66f50

- Fix dovecot to allow dovecot_auth to look at /tmp

Daniel J Walsh • 18 years ago

1f31224

- Allow restorecon to read unlabeled_t directories in order to fix

Daniel J Walsh • 18 years ago

d7b05bc

- Add Logwatch policy

Daniel J Walsh • 18 years ago

3607aaf

- Add Logwatch policy

Daniel J Walsh • 18 years ago

a08ba87

- Fix /dev/ub[a-z] file context

Daniel J Walsh • 18 years ago

798572f

- Fix library specification

Daniel J Walsh • 18 years ago

9f7b037

- Fix hostname in targeted policy

Daniel J Walsh • 18 years ago

596229f

- Fix passwd command on mls

Daniel J Walsh • 18 years ago

5a47e64

- Lots of fixes to make mls policy work

Daniel J Walsh • 18 years ago

71ee99d

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

6e9ee77

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

9d20b26

- Add man pages

Daniel J Walsh • 18 years ago

1335ee8

- Add enableaudit.pp

Daniel J Walsh • 18 years ago

315b4a4

- Fix mls policy

Daniel J Walsh • 18 years ago

105bbf6

- Update mls file from old version

Daniel J Walsh • 18 years ago

ecb7268

- Update mls file from old version

Daniel J Walsh • 18 years ago

a587fa4

- Update mls file from old version

Daniel J Walsh • 18 years ago

0c9f87b

- Add sids back in

Daniel J Walsh • 18 years ago

dce316d

- Fixes to allow automount to use portmap

Daniel J Walsh • 18 years ago

9ce97af

- Add java unconfined/execmem policy

Daniel J Walsh • 18 years ago

1c86025

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1ef62fe

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1f00750

- Update from upstream

Daniel J Walsh • 18 years ago

504da9f

- Fixes for hal

Daniel J Walsh • 18 years ago

e24a8b1

- Fixes for hal

Daniel J Walsh • 18 years ago

1ff14ab

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

d8566e6

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

7171df2

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

cfcb308

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

afa8a21

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

57c18fe

- fix requirements to be on the actual packages so that policy can get

Jeremy Katz • 18 years ago

eb190f8

- Allow unconfined_t to execmod texrel_shlib_t

Daniel J Walsh • 18 years ago

9e85a85

- Update to upstream

Daniel J Walsh • 18 years ago

d4da533

- Add two new httpd booleans, turned off by default

Daniel J Walsh • 18 years ago

e1ccb6f

- Add ghost for policy.20

Daniel J Walsh • 18 years ago

7c94e8e

- Update to upstream

Daniel J Walsh • 18 years ago

6f5a3bc

- Change setrans-mls to use new libsetrans

Daniel J Walsh • 18 years ago

c6c4985

- Change Requires to PreReg for requiring of policycoreutils on install

Daniel J Walsh • 18 years ago

12e089c

Add xdm policy

Daniel J Walsh • 18 years ago

97bd2aa

Update from upstream

Daniel J Walsh • 18 years ago

46a9067

Update from upstream

Daniel J Walsh • 18 years ago

913e479

Update from upstream

Daniel J Walsh • 18 years ago

a1e07bd

Update from upstream

Daniel J Walsh • 18 years ago

4751861

Update from upstream

Daniel J Walsh • 18 years ago

caeef12

- fix trigger (dwalsh looking over my shoulder)

Nalin Dahyabhai • 18 years ago

2b2203d

- No longer installing policy.20 file, anaconda handles the building of the

Daniel J Walsh • 18 years ago

28930b1

- Fixes for dovecot and saslauthd

Daniel J Walsh • 18 years ago

bd7e86c

- Fixes for dovecot and saslauthd

Daniel J Walsh • 18 years ago

4199dc8

- Cleanup pegasus and named

Daniel J Walsh • 18 years ago

a033620

- Cleanup pegasus and named

Daniel J Walsh • 18 years ago

c1b0228

- Cleanup pegasus and named

Daniel J Walsh • 18 years ago

25e721d

- Cleanup pegasus and named

Daniel J Walsh • 18 years ago

21dea1c

-Update to latest from upstream

Daniel J Walsh • 18 years ago

598be15

-Update to latest from upstream

Daniel J Walsh • 18 years ago

e38dc41

- Add rules for pegasus and avahi

Daniel J Walsh • 18 years ago

b33f08f

- Add rules for pegasus and avahi

Daniel J Walsh • 18 years ago

765f818

- Start building MLS Policy

Daniel J Walsh • 18 years ago

d77f56b

- Start building MLS Policy

Daniel J Walsh • 18 years ago

a32f665

- Update to upstream

Daniel J Walsh • 18 years ago

e568731

- Update to upstream

Daniel J Walsh • 18 years ago

3e930b8

- Update to upstream

Daniel J Walsh • 18 years ago

1a0a256

- Turn on bash

Daniel J Walsh • 18 years ago

205d3ff

- Initial version

Daniel J Walsh • 18 years ago

f0b87c9

now how about this? do you like it? is it finally good enough for you?

Nalin Dahyabhai • 18 years ago

af60908

try this

Nalin Dahyabhai • 18 years ago

46e7261

try anything

Nalin Dahyabhai • 18 years ago

f852dde

- Initial version

Daniel J Walsh • 18 years ago

be926ab

- Initial version

Daniel J Walsh • 18 years ago

edb7508

- Initial version

Daniel J Walsh • 18 years ago

cc9c9ee

auto-import selinux-policy-2.0.0-0.6 on branch devel from

Daniel J Walsh • 18 years ago

1580c87

rpms / selinux-policy

History selinux-policy.spec

rpms / selinux-policy

Source Code

History selinux-policy.spec