File history - forks/psss/rpms/selinux-policy

Merge upstream

Dan Walsh • 13 years ago

f33c506

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

4c437c8

shutdown: needs to connect to init with a unix stream socket.

Dominick Grift • 13 years ago

5718c0a

Hadoop cleanup and module version bump.

Chris PeBenito • 13 years ago

641ac05

hadoop 1/10 -- unconfined

Paul Nuzzi • 13 years ago

bc71a04

Fix fusefs handling

Dan Walsh • 13 years ago

55e9f0e

Start adding support for use_fusefs_home_dirs

Dan Walsh • 13 years ago

d1c6ba2

Allow unconfined_t to transition to alsa_t to make sure labels stay correct

Dan Walsh • 13 years ago

ddd1cca

Allow sudo to send signals to any domains the user could have transitioned to.

Dan Walsh • 13 years ago

b45aaab

Module version bump and Changelog for 329138b and 413aac1.

Chris PeBenito • 13 years ago

e29f6bf

Allow common users to manage and relabel Alsa home files.

Dominick Grift • 13 years ago

413aac1

Move oident manage and relabel home content interfaces to common user template.

Dominick Grift • 13 years ago

329138b

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 13 years ago

20f707c

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 13 years ago

79bff2b

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 13 years ago

71f455a

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

5d82597

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 13 years ago

6ed3f15

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

6cd6ed3

Use list instead of search in admin interfaces.

Dominick Grift • 13 years ago

61f4064

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 13 years ago

4d71bc3

Use relabel permission sets where possible.

Dominick Grift • 13 years ago

83029ff

Use ps_process_pattern to read state.

Dominick Grift • 13 years ago

ad42454

Type xenstored_var_run_t is required here.

Dominick Grift • 13 years ago

cb76ff4

Add the ability to send audit messages to confined admin policies

Dan Walsh • 13 years ago

9461b60

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 13 years ago

3b0a9c7

add labeling for /root/.debug

Dan Walsh • 13 years ago

43a0339

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 13 years ago

d7f2020

Allow a couple of sandbox issues.

Dan Walsh • 13 years ago

c2dae98

Fix some names in passenger policy

Dan Walsh • 13 years ago

3034a8d

Fix cert calls in telepath, boinc, kerberos

Dan Walsh • 13 years ago

366396d

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

cab9bc9

rename mdadm_map_t to mdadm_var_run_t

Dan Walsh • 13 years ago

d7544f0

More fixes for mozilla_plugin_t

Dan Walsh • 13 years ago

0b8f4cf

Module version bumps for cert patch.

Chris PeBenito • 13 years ago

da12b54

Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.

Chris PeBenito • 13 years ago

e9d6dfb

Implement miscfiles_cert_type().

Dominick Grift • 13 years ago

8340621

raid tools now store pid file and sock_file in /dev/md for early boot.

Dan Walsh • 13 years ago

e81afdf

Allow crond to manage user_spool_cron_t link files

Dan Walsh • 13 years ago

ee4b1e0

Allow sudo domains to manage /var/db/sudo

Dan Walsh • 13 years ago

b36c20b

Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t

Dan Walsh • 13 years ago

dfe675b

Any app that executes service command will not do a getattr of all mounted file systems

Dan Walsh • 13 years ago

8187343

Allow apps that use pam to connect to init_t

Dan Walsh • 13 years ago

c16ffd1

Allow iptables to read shorewall tmp files

Dan Walsh • 13 years ago

f5b49a5

Allow certmaster to read usr_t files. All python apps are going to need this.

Dan Walsh • 13 years ago

a668127

cleanup mmap_low merge with upstream

Dan Walsh • 13 years ago

3a2e888

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 13 years ago

cbadf72

firstboot is leaking a netlink_route socket into iptables. We need to dontaudit

Dan Walsh • 13 years ago

0352752

Fix sandbox tcp_socket calls to create_stream_socket_perms

Dan Walsh • 13 years ago

c6fa935

Allow qmail to use uucpd

Dan Walsh • 13 years ago

4fccad9

Allow prelink to read dbus config/Broken

Dan Walsh • 13 years ago

3fdb12d

merge latest upstream

Dan Walsh • 13 years ago

898c0de

Dontaudit socket leaks when running semanage code

Dan Walsh • 13 years ago

8c8a10f

More fixes

Dan Walsh • 13 years ago

c71f02c

Policy fixes

Dan Walsh • 13 years ago

2d4a79a

More fixes

Dan Walsh • 13 years ago

ac498fa

Latest fixes

Dan Walsh • 13 years ago

08e567d

Fixes for f14

Dan Walsh • 13 years ago

4765a59

Update f14

Dan Walsh • 13 years ago

2968e06

Update f14

Dan Walsh • 13 years ago

a947daf

UPdate for f14 policy

Dan Walsh • 13 years ago

3eaa993

Module version bumps and changelog for devtmpfs patchset.

Chris PeBenito • 13 years ago

76a9fe9

Trivial tweaks to devtmpfs patches.

Chris PeBenito • 13 years ago

0d24805

Early devtmpfs access

Jeremy Solt • 13 years ago

2fc79f1

Move devtmpfs to devices from filesystem

Jeremy Solt • 13 years ago

d6e1ef2

Confine /sbin/cgclear.

Dominick Grift • 13 years ago

61d7ee5

System layer xml fixes.

Dominick Grift • 13 years ago

a0546c9

Docs standardizing on the role portion of run interfaces. Additional docs cleanup.

Chris PeBenito • 13 years ago

a7ee7f8

Remove some redundant attributes from user_home_t.

Dominick Grift • 13 years ago

48c3c37

Module version bump for fa1847f.

Chris PeBenito • 13 years ago

4b76ea5

Add files_poly_member() to userdom_user_home_content() Remove redundant files_poly_member() calls.

Dominick Grift • 13 years ago

fa1847f

Remove old rbacsep role statements.

Chris PeBenito • 13 years ago

c14aebd

Remove duplicate/redundant rules, from Russell Coker.

Chris PeBenito • 13 years ago

bca0cdb

Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role().

Chris PeBenito • 13 years ago

1db1836

Whitespace change: drop unnecessary blank line at the start of .te files.

Chris PeBenito • 14 years ago

48f99a8

Module version bump for cgroup patchset.

Chris PeBenito • 14 years ago

c54e7d6

Whitespace fixes in cgroup and init.

Chris PeBenito • 14 years ago

04dcd73

How users interact with cgroup.

Dominick Grift • 14 years ago

e2b9add

How libgroup init scripts interact with libcgroup.

Dominick Grift • 14 years ago

73f0985

Bump module versions for release.

Chris PeBenito • 14 years ago

29af4c1

Fix deprecated interface usage that crept into lvm.if.

Chris PeBenito • 14 years ago

fe74f71

Remove excessive permission in udev_manage_rules_files() and move the interface up in the .if file. Module version bump for d56b33a.

Chris PeBenito • 14 years ago

e2c9450

Create new interface and type for managing /etc/udev/rules.d

Chris Richards • 14 years ago

d56b33a

bootmisc init script, 2nd try

Chris Richards • 14 years ago

9b3e798

Module version bump and extra comments for 194d61f.

Chris PeBenito • 14 years ago

4a8bd01

modutils patch for update-modules

Chris Richards • 14 years ago

194d61f

Module version bump for 8c38fba.

Chris PeBenito • 14 years ago

78352db

allow syslog-ng to setrlimit

Chris Richards • 14 years ago

8c38fba

Libraries patch from Dan Walsh.

Chris PeBenito • 14 years ago

bc31d12

Xen patch from Dan Walsh.

Chris PeBenito • 14 years ago

0d86ea1

Getty patch from Dan Walsh.

Chris PeBenito • 14 years ago

b60df9f

Sysnetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fa92b8

Init patch from Dan Walsh.

Chris PeBenito • 14 years ago

ddd786e

Authlogin patch from Dan Walsh.

Chris PeBenito • 14 years ago

153ed87

Iptables patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fbcd77

Udev patch from Dan Walsh.

Chris PeBenito • 14 years ago

a124c0a

Logging patch from Dan Walsh.

Chris PeBenito • 14 years ago

7a8807b

Ipsec patch from Dan Walsh.

Chris PeBenito • 14 years ago

90e65fe

Modutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

d13c675

Style fixes and module version bumps for 38fc1bd.

Chris PeBenito • 14 years ago

827060c

Likewise policy.

Dominick Grift • 14 years ago

38fc1bd

Raid patch from Dan Walsh.

Chris PeBenito • 14 years ago

2f0e3a4

Iscsi and tgtd patches from Dan Walsh.

Chris PeBenito • 14 years ago

30496b1

Fstools patch from Dan Walsh.

Chris PeBenito • 14 years ago

939eaf2

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

d0a6df5

Module version bump for be47d75.

Chris PeBenito • 14 years ago

1112a5b

hotplug transition to brctl from Dan Walsh

Jeremy Solt • 14 years ago

4d2680e

Improve documentation of udev_read_db().

Chris PeBenito • 14 years ago

402bbb9

Improve documentation of seutil_sigchld_newrole().

Chris PeBenito • 14 years ago

b675cec

Module version bump for bf530f5.

Chris PeBenito • 14 years ago

a6bafb5

Various permission set fixes.

Dominick Grift • 14 years ago

bf530f5

Improve the documentation of application_domain().

Chris PeBenito • 14 years ago

b58db31

Improve the documentation of auth_use_nsswitch().

Chris PeBenito • 14 years ago

d24a7df

Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files.

Dominick Grift • 14 years ago

4cb24ae

Improve documentation for userdomain interfaces:

Chris PeBenito • 14 years ago

c46376e

Module version bump for 03dd57f.

Chris PeBenito • 14 years ago

42f1b11

Fix auth_domtrans_chk_passwd to use read_file_perms to surpress open AVC denials.

Dominick Grift • 14 years ago

03dd57f

Additional docs for logging_log_filetrans().

Chris PeBenito • 14 years ago

5fb5bf2

Improve the documentation of unconfined_domain().

Chris PeBenito • 14 years ago

14e543c

Improve the documentation of logging_log_file() and logging_log_filetrans().

Chris PeBenito • 14 years ago

45185c0

Improve the documentation of:

Chris PeBenito • 14 years ago

13f000d

Improve sysnet_read_config() documentation.

Chris PeBenito • 14 years ago

d688717

Switch sysnet_use_portmap(), sysnet_use_ldap(), and sysnet_dns_name_resolve() to use sysnet_read_config() rather thane explicit type usage.

Chris PeBenito • 14 years ago

81a0fb4

Improve documentation on logging_send_syslog_msg().

Chris PeBenito • 14 years ago

6e48775

Improve documentation on miscfiles_read_localization().

Chris PeBenito • 14 years ago

611bc93

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

72295e9

Syslog fixes from Gentoo.

Chris PeBenito • 14 years ago

2f84a77

Clean up leaked portage file descriptors.

Chris PeBenito • 14 years ago

8b85019

Utmp fix from Gentoo.

Chris PeBenito • 14 years ago

2c05132

Setfiles fix from Gentoo.

Chris PeBenito • 14 years ago

72c8a37

Mount usbfs fix from Gentoo.

Chris PeBenito • 14 years ago

679a63d

Move netlink route sockets from nsswitch to DNS name resolve.

Chris PeBenito • 14 years ago

aadcb96

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.

Chris PeBenito • 14 years ago

c3c753f

Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

16412e2

Misc fixes for 1031ee6.

Chris PeBenito • 14 years ago

27eab81

Module version number bump for 1031ee6.

Chris PeBenito • 14 years ago

7d2f967

Implement cobblerd policy.

Dominick Grift • 14 years ago

1031ee6

Userdomain patch from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

2d74365

Add dbadm, from KaiGai Kohei.

Chris PeBenito • 14 years ago

22a2874

Iptables and modutils patches from Dan Walsh.

Chris PeBenito • 14 years ago

7491a9e

RAID patch from Dan Walsh.

Chris PeBenito • 14 years ago

0cad9a7

Fstools and Xen patches from Dan Walsh.

Chris PeBenito • 14 years ago

77c71b5

Kdump reads the kernel core.

Chris PeBenito • 14 years ago

e21162e

UDEV patch from Dan Walsh.

Chris PeBenito • 14 years ago

837163c

IPSEC patch from Dan Walsh.

Chris PeBenito • 14 years ago

832c1be

Application patch from Dan Walsh.

Chris PeBenito • 14 years ago

5ed0617

Whitespace cleanup.

Chris PeBenito • 14 years ago

dccbb80

ISCSI patch from Dan Walsh.

Chris PeBenito • 14 years ago

0f982da

Setrans patch from Dan Walsh.

Chris PeBenito • 14 years ago

0a119a0

LVM patch from Dan Walsh.

Chris PeBenito • 14 years ago

bd34ef7

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

9dfdd48

bump module versions for release.

Chris PeBenito • 14 years ago

ed3a1f5

additional cleanup for e877913.

Chris PeBenito • 14 years ago

e6d8fd1

adding puppet configuration management system

Craig Grube • 14 years ago

e877913

add shorewall from dan.

Chris PeBenito • 14 years ago

625be1b

add kdump from dan.

Chris PeBenito • 14 years ago

71965a1

kismet patch from dan.

Chris PeBenito • 14 years ago

a9e9678

module version number bump for tun patches

Chris PeBenito • 14 years ago

aaff2fc

rename admin_tun_type to admindomain.

Chris PeBenito • 14 years ago

0be901b

reorganize tun patch changes.

Chris PeBenito • 14 years ago

bd75703

refpol: Policy for the new TUN driver access controls

Paul Moore • 14 years ago

9dc3cd1

patch from Eamon Walsh to remove useage of deprecated xserver interfaces.

Chris PeBenito • 14 years ago

4279891

deprecate userdom_xwindows_client_template

Chris PeBenito • 14 years ago

93c49bd

Remove excessive permissions in logging_send_syslog_msg(). Ticket #14.

Chris PeBenito • 14 years ago

fef5dcf

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Chris PeBenito • 14 years ago

e27827b

Fix unconfined_r use of unconfined_java_t.

Chris PeBenito • 14 years ago

b264824

remove redundant xen_append_log() call in hostname.

Chris PeBenito • 14 years ago

97e4211

fix refpolicy ticket #48.

Chris PeBenito • 14 years ago

e51390d

module version number bump for release 2.20090730 that was mistakenly omitted.

Chris PeBenito • 14 years ago

9570b28

fix ordering in sysnetwork.

Chris PeBenito • 14 years ago

d69616c

fix ordering in raid.

Chris PeBenito • 14 years ago

48bf639

fix ordering in pcmcia.

Chris PeBenito • 14 years ago

4b218bd

fix ordering in mount.

Chris PeBenito • 14 years ago

f0e959b

fix ordering in modutils.

Chris PeBenito • 14 years ago

54327d4

fix ordering of interface calls in lvm.

Chris PeBenito • 14 years ago

568efbe

fix ordering of interface calls in locallogin.

Chris PeBenito • 14 years ago

8cd1306

fix ordering of interface calls in iptables.

Chris PeBenito • 14 years ago

e6985f9

fix ordering of interface calls in init.

Chris PeBenito • 14 years ago

464ffa5

fix ordering of interface calls in hostname.

Chris PeBenito • 14 years ago

14d2822

fix ordering of interface calls in getty.

Chris PeBenito • 14 years ago

5b5300c

fix ordering of interface calls in fstools.

Chris PeBenito • 14 years ago

79ca728

fix ordering of interface calls in clock.

Chris PeBenito • 14 years ago

08638af

fix ordering of interface calls in authlogin.

Chris PeBenito • 14 years ago

2acba7b

openrc unfortunately mounts a tmpfs at /lib/rc

Chris PeBenito • 14 years ago

4c92f08

gentoo init script system uses tmpfs for state data

Chris PeBenito • 14 years ago

cfdbf36

gentoo init script system sends audit messages.

Chris PeBenito • 14 years ago

efa0acc

automount patch from dan.

Chris PeBenito • 14 years ago

3332229

add missing userdom interfaces

Chris PeBenito • 14 years ago

4083191

remove read_default_t tunable

Chris PeBenito • 14 years ago

09516cb

trunk: whitespace fixes

Chris PeBenito • 15 years ago

3f67f72

trunk: remove unnecessary semicolons after interface/template calls.

Chris PeBenito • 15 years ago

26410dd

trunk: Misc fixes for unix_update from Brandon Whalen.

Chris PeBenito • 15 years ago

df28a0c

trunk: 1 patch from dan.

Chris PeBenito • 15 years ago

30425aa

trunk: add libjackserver.so textrel fc.

Chris PeBenito • 15 years ago

22894e3

trunk: whitespace fixes.

Chris PeBenito • 15 years ago

c0f5fa0

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

3392356

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

153fe24

trunk: module version bump for previous commit.

Chris PeBenito • 15 years ago

09125ae

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

d6605bc

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

244b45d

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

3c9b2e9

trunk: remove unused udev_runtime_t type.

Chris PeBenito • 15 years ago

81fa19e

trunk: add context contains to setrans.

Chris PeBenito • 15 years ago

c1e5011

trunk: add support for labeled booleans.

Chris PeBenito • 15 years ago

f0435b1

trunk: Remove node definitions and change node usage to generic nodes.

Chris PeBenito • 15 years ago

c126214

trunk: change network interface access from all to generic network interfaces.

Chris PeBenito • 15 years ago

668b309

trunk: bump module versions for release.

Chris PeBenito • 15 years ago

17ec8c1

trunk: Fix consistency of audioentropy and iscsi module naming.

Chris PeBenito • 15 years ago

3196971

trunk: whitespace fixes in xml blocks.

Chris PeBenito • 15 years ago

ff8f0a6

trunk: whitespace fix changing multiple spaces into tabs.

Chris PeBenito • 15 years ago

6073ea1

trunk: Debian file context fix for xen from Russell Coker.

Chris PeBenito • 15 years ago

b3eb124

trunk: fix logging admin interfaces.

Chris PeBenito • 15 years ago

7a4c282

trunk: 2 fixes from martin orr.

Chris PeBenito • 15 years ago

73c77e2

trunk: patch from Mike Edenfield to add udevadm fc entry.

Chris PeBenito • 15 years ago

27337d8

trunk: merge UBAC.

Chris PeBenito • 15 years ago

296273a

trunk: additional open fixes.

Chris PeBenito • 15 years ago

932c353

trunk: more open perm fixes.

Chris PeBenito • 15 years ago

82d2775

trunk: remove redundant shared lib calls.

Chris PeBenito • 15 years ago

2cca6b7

trunk: additional whitespace fixes.

Chris PeBenito • 15 years ago

2a98379

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 15 years ago

88cf0a9

trunk: Enable open permission checks policy capability.

Chris PeBenito • 15 years ago

0b36a21

trunk: bump version numbers for release.

Chris PeBenito • 15 years ago

5d4f4b5

trunk: a pile of misc fixes.

Chris PeBenito • 15 years ago

aa7c463

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

06099da

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 15 years ago

04d2861

trunk: init script for setrans.

Chris PeBenito • 15 years ago

88c02e0

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 15 years ago

64c5b99

trunk: logging update from dan.

Chris PeBenito • 15 years ago

cfafe4a

trunk: kudzu and mta patches from dan.

Chris PeBenito • 15 years ago

36095d1

trunk: ntp and setrans update from dan.

Chris PeBenito • 15 years ago

8786916

trunk: fix bad require.

Chris PeBenito • 15 years ago

96851b1

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 15 years ago

e40fa63

trunk: first part of init script labeling support.

Chris PeBenito • 15 years ago

6cc3f35

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 15 years ago

e4171e8

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 15 years ago

c11057f

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

770c015

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 15 years ago

3e59876

trunk: two small patches from dan.

Chris PeBenito • 15 years ago

6e32891

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 15 years ago

9acf481

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 15 years ago

9c4500b

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 15 years ago

e0ed765

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 15 years ago

8a948ca

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 15 years ago

3338f23

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 15 years ago

556556c

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 15 years ago

dc1920b

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 15 years ago

2b592aa

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 15 years ago

4459a7c

trunk: bump versions for release.

Chris PeBenito • 15 years ago

cfcf500

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaeeb

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2d

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a9036

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618e

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08a

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efee

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbdc

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7a

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a9

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cda

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db2

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3a

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b47

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e828954

trunk: small fixes for gentoo system.

Chris PeBenito • 16 years ago

2ed4f5a

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 16 years ago

91d6c92

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 16 years ago

47333d8

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 16 years ago

e065ac8

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

834401f

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

90c3c56

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

9fa023f

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

ee6608b

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 16 years ago

6e7a1fc

trunk: add basic ubuntu support

Chris PeBenito • 16 years ago

12cf805

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 16 years ago

9323a50

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 16 years ago

7cbfeb9

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

f7925f2

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

1abafe3

trunk: several fc updates from dan.

Chris PeBenito • 16 years ago

02d968c

trunk: add openoffice locations in gentoo.

Chris PeBenito • 16 years ago

9f6e2db

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 16 years ago

dd9e1de

trunk: another round of nsswitch from dan.

Chris PeBenito • 16 years ago

09e2168

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 16 years ago

c0cf6e0

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 16 years ago

08dccef

trunk: version bump for newrole fixes.

Chris PeBenito • 16 years ago

f98cfb5

trunk: test fix 2 for newrole.

Chris PeBenito • 16 years ago

c2b87f2

trunk: test fix for newrole.

Chris PeBenito • 16 years ago

6138d3d

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 16 years ago

1483be1

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

2f5c2f2

trunk: version bumps for previous commit.

Chris PeBenito • 16 years ago

0aa18d9

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 16 years ago

0b6acad

trunk: add unconfined_run_to().

Chris PeBenito • 16 years ago

ccf6611

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 16 years ago

013783b

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 16 years ago

53da70c

trunk: reorganize selinuxutil.

Chris PeBenito • 16 years ago

389ad7b

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 16 years ago

eeef8dc

trunk: 9 patches from dan.

Chris PeBenito • 16 years ago

226c069

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

6c91189

trunk: add in polmatch for default spd.

Chris PeBenito • 16 years ago

9820351

trunk: add labeled networking support to unconfined.

Chris PeBenito • 16 years ago

bdccbac

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 16 years ago

847937d

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

eaed904

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 16 years ago

3ece118

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

7d4161c

trunk: remove unused types from dbus.

Chris PeBenito • 16 years ago

bd973e3

trunk: 10 patches from dan.

Chris PeBenito • 16 years ago

cdf98fe

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 16 years ago

ef659a4

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 16 years ago

6c53a10

trunk: module version bumps for previous commit.

Chris PeBenito • 16 years ago

12e9ea1

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 16 years ago

350b6ab

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

3480f3f

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 16 years ago

aef93a7

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 16 years ago

6f49b49

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

14add30

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

134a799

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

abc8934

trunk: six patches from dan.

Chris PeBenito • 16 years ago

72f82c4

trunk: udev update and brctl module from dan.

Chris PeBenito • 16 years ago

8241b53

trunk: 5 patches from dan.

Chris PeBenito • 16 years ago

0a0b807

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 16 years ago

4922765

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 16 years ago

752ddf5

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 16 years ago

2af7b42

trunk: updates from dan on 9 modules

Chris PeBenito • 16 years ago

8d2c341

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 16 years ago

f8233ab

trunk: several MLS enhancements.

Chris PeBenito • 16 years ago

2d0c9ce

trunk: add application module

Chris PeBenito • 16 years ago

d46cfe4

trunk: fix missed netlabel deprecation

Chris PeBenito • 16 years ago

6929521

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1da

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4fc

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

1900668

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f08978

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ade

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2d

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a8

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649aec

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d35

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

7782966

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf1

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2cb

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d66

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186c

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e528

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc7

bump module versions for release

Chris PeBenito • 17 years ago

0251df3

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

6974890

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284b

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2dee

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba1

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923c

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65c

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3d

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb4

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d6

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a1

one-liner from dan

Chris PeBenito • 17 years ago

cc9130b

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eba

from Dan:

Chris PeBenito • 17 years ago

c224d91

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c7

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e1

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448bd

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45eae

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be3

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5f

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a7

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 17 years ago

d6d16b9

patch from dan for some missing gen_require()s

Chris PeBenito • 17 years ago

563e58e

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 17 years ago

c6a60bb

fixes from gentoo strict testing:

Chris PeBenito • 17 years ago

ed38ca9

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 17 years ago

0f9a2be

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 17 years ago

d9845ae

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 17 years ago

5824380

add seutil_rw_config()

Chris PeBenito • 17 years ago

d5ae683

enhanced setransd support from darrel goeddel

Chris PeBenito • 17 years ago

a8671ae

bump versions to release numbers

Chris PeBenito • 17 years ago

a52b4d4

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 17 years ago

b04eccd

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 17 years ago

130f8a4

fix ticket #16

Chris PeBenito • 17 years ago

aeaae51

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 17 years ago

e45324d

more realplayer entries

Chris PeBenito • 17 years ago

009b377

gentoo testing fixes.

Chris PeBenito • 17 years ago

14b1684

change transition from run_init to initrc to spec.

Chris PeBenito • 17 years ago

93ddc66

more non .so lib files for acrobat

Chris PeBenito • 17 years ago

546c81c

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 17 years ago

3c3c043

- Move range transitions to modules.

Chris PeBenito • 17 years ago

e070dd2

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 17 years ago

0021906

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 17 years ago

e2b84ef

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 17 years ago

693d4ae

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 17 years ago

8708d9b

* add a macro for generating category declarations

Chris PeBenito • 17 years ago

a9e03b3

gentoo testing fixes

Chris PeBenito • 17 years ago

bf469d7

common users list inotifyfs

Chris PeBenito • 17 years ago

2b571d6

fix miscfiles_read_localization()

Chris PeBenito • 17 years ago

2cac32a

misc fixes

Chris PeBenito • 17 years ago

0d96ff3

add last bit of role infrastructure

Chris PeBenito • 17 years ago

b1bf2f7

add main part of role-o-matic

Chris PeBenito • 17 years ago

bbcd3c9

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 17 years ago

75beb95

fix up usb.ids per distro

Chris PeBenito • 17 years ago

91dabf4

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 17 years ago

13d7cec

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 17 years ago

5dbda55

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 17 years ago

eac818f

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 17 years ago

a5e2133

more testing fixes

Chris PeBenito • 17 years ago

ce6bf7c

fix gentoo /opt contexts

Chris PeBenito • 17 years ago

de22282

more strict testing fixes

Chris PeBenito • 17 years ago

98de871

more testing fixes

Chris PeBenito • 17 years ago

d15dd5a

fix ordering bug

Chris PeBenito • 17 years ago

5b4ff3a

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 17 years ago

3ef029d

testing fixes

Chris PeBenito • 17 years ago

e9b9e45

fix for netfilter_contexts

Chris PeBenito • 17 years ago

4bc6e32

cleanup in authlogin

Chris PeBenito • 17 years ago

ba1a545

remove dead selopt rules

Chris PeBenito • 17 years ago

33c7e6b

ps/ptrace dontaudit cleanup

Chris PeBenito • 17 years ago

497da09

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 17 years ago

85476e9

add authlogin interface to abstract common login program perms

Chris PeBenito • 17 years ago

4b3b46d

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 17 years ago

4655103

add helpers for printing warning and error messages

Chris PeBenito • 17 years ago

ea3c1f5

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 17 years ago

19ebf01

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 17 years ago

da9bbc6

remove extra level of directory

Chris PeBenito • 17 years ago

17de1b7

psss / rpms / selinux-policy

History policy/modules/system

psss / rpms / selinux-policy

Source Code

History policy/modules/system