File history - forks/psss/rpms/selinux-policy

fixes from sediff

Chris PeBenito • 18 years ago

681c9a0

add uucp

Chris PeBenito • 18 years ago

f7ba4a8

testing fixes

Chris PeBenito • 18 years ago

b53f93a

fix for targeted

Chris PeBenito • 18 years ago

08c5c97

loadable module compile fixes

Chris PeBenito • 18 years ago

25c6746

targeted and redhat cleanups

Chris PeBenito • 18 years ago

142e9f4

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 18 years ago

0e15cdf

todo cleanup

Chris PeBenito • 18 years ago

3774e4e

add cvs

Chris PeBenito • 18 years ago

93070cb

add cpucontrol

Chris PeBenito • 18 years ago

9210553

add rlogin and telnet

Chris PeBenito • 18 years ago

4fd5201

add stunnel

Chris PeBenito • 18 years ago

200f453

final updates from nsa cvs

Chris PeBenito • 18 years ago

a1fcff3

a few module compile fixes

Chris PeBenito • 18 years ago

41c4800

more upstream merging

Chris PeBenito • 18 years ago

cf6a7d8

more upstream merging

Chris PeBenito • 18 years ago

cff75c9

add tftp

Chris PeBenito • 18 years ago

40adb57

add snmp

Chris PeBenito • 18 years ago

ccc5978

more merging from nsa cvs

Chris PeBenito • 18 years ago

a082484

more updates

Chris PeBenito • 18 years ago

98a8ead

more merging from nsa cvs

Chris PeBenito • 18 years ago

605ba28

cleanup

Chris PeBenito • 18 years ago

5a2649c

add samba

Chris PeBenito • 18 years ago

84c9223

require fix

Chris PeBenito • 18 years ago

4479b31

fixes for module compiling

Chris PeBenito • 18 years ago

71fe0fa

more merging of NSA CVS policy

Chris PeBenito • 18 years ago

0907bda

begin merging in upstream NSA CVS changes

Chris PeBenito • 18 years ago

2705f9a

fixes to make base module compilable

Chris PeBenito • 18 years ago

712566e

add first part of changes to make base module compilable

Chris PeBenito • 18 years ago

2e863f8

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 18 years ago

0fdf3ef

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 18 years ago

9ff3003

add portmap

Chris PeBenito • 18 years ago

eb3cb68

add ktalk

Chris PeBenito • 18 years ago

d17b4d2

add missing rules of other domains using inn

Chris PeBenito • 18 years ago

9b06402

misc fixes

Chris PeBenito • 18 years ago

763a5e3

add inn

Chris PeBenito • 18 years ago

8d93523

misc fixes

Chris PeBenito • 18 years ago

603f90a

add ntp

Chris PeBenito • 18 years ago

b11a75a

typo

Chris PeBenito • 18 years ago

ce1b44a

add dictd

Chris PeBenito • 18 years ago

ac0483a

add hal

Chris PeBenito • 18 years ago

fdae8e7

move dhcpd to dhcp

Chris PeBenito • 18 years ago

f344c0f

add squid

Chris PeBenito • 18 years ago

0f707d5

add dhcpd

Chris PeBenito • 18 years ago

7c8fc35

fix bugs uncovered from sediff

Chris PeBenito • 18 years ago

9d3bdc2

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 18 years ago

c0d1566

finish remaining dbus bits

Chris PeBenito • 18 years ago

631ee4d

add dbus

Chris PeBenito • 18 years ago

0c3d170

fix typos

Chris PeBenito • 18 years ago

6af06cd

cosmetics

Chris PeBenito • 18 years ago

768283a

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 18 years ago

6e61566

fix up most of mta attribute insanity

Chris PeBenito • 18 years ago

246839f

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 18 years ago

451c1e3

make corecommands required

Chris PeBenito • 18 years ago

e5d4526

start adding in templated interfaces

Chris PeBenito • 18 years ago

2a94561

add bind

Chris PeBenito • 18 years ago

d83fdad

add privoxy

Chris PeBenito • 18 years ago

902be0a

add rsync

Chris PeBenito • 18 years ago

35ecf83

add howl

Chris PeBenito • 18 years ago

f9b11e9

moved to selinux module

Chris PeBenito • 18 years ago

f6e28ab

initial support for compiling loadable modules

Chris PeBenito • 18 years ago

fb0a3a9

add gpm

Chris PeBenito • 18 years ago

f862c35

add ldap

Chris PeBenito • 18 years ago

2961e79

cleanup

Chris PeBenito • 18 years ago

23ca91f

add rshd

Chris PeBenito • 18 years ago

545b0c9

add firstboot

Chris PeBenito • 18 years ago

57a96cb

more debian cleanup

Chris PeBenito • 18 years ago

2d803ed

fix broken xml of previous commit

Chris PeBenito • 18 years ago

4806a05

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 18 years ago

5f38a65

add loadkeys

Chris PeBenito • 18 years ago

21468a6

more comments

Chris PeBenito • 18 years ago

8843093

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 18 years ago

f0b1efa

fix some udev naming

Chris PeBenito • 18 years ago

35b4947

fix system spool file problem

Chris PeBenito • 18 years ago

aae06c1

finalize desc -> summary xml change

Chris PeBenito • 18 years ago

f7ebea0

add tcpd

Chris PeBenito • 18 years ago

4aa0dc2

add quota

Chris PeBenito • 18 years ago

052c953

add sudo

Chris PeBenito • 18 years ago

e784300

add template xml

Chris PeBenito • 18 years ago

b9d7d70

add su

Chris PeBenito • 18 years ago

9489149

add updfstab

Chris PeBenito • 18 years ago

dce68dc

fix xml tags

Chris PeBenito • 18 years ago

f5e321b

a few more ssh touchups

Chris PeBenito • 18 years ago

7057c18

add tmpreaper

Chris PeBenito • 18 years ago

ed78ea0

add acct

Chris PeBenito • 18 years ago

9a66d4e

misc cleanup

Chris PeBenito • 18 years ago

3fd8336

add mysql

Chris PeBenito • 18 years ago

42be7c2

search sbin dirs to find the pgms

Chris PeBenito • 18 years ago

046a21d

* Rename ipsec connect interface for consistency.

Chris PeBenito • 18 years ago

81343a6

fix stray line that got out of TODO

Chris PeBenito • 18 years ago

bbdbdb9

work on user transition

Chris PeBenito • 18 years ago

e5590ea

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 18 years ago

022f61c

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 18 years ago

50527cf

update from privmail

Chris PeBenito • 18 years ago

953541a

/var/lib is now a mountpoint

Chris PeBenito • 18 years ago

ea7d571

unconfined can pass all constraints

Chris PeBenito • 18 years ago

53857c8

name_connect only on tcp_sockets

Chris PeBenito • 18 years ago

ef424c1

unconfined can name_connect to all ports

Chris PeBenito • 18 years ago

9496fd5

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 18 years ago

d250634

bah typo

Chris PeBenito • 18 years ago

f82c6ac

user home dirs were missing file type in targ policy

Chris PeBenito • 18 years ago

0b28a23

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 18 years ago

1e3f610

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 18 years ago

689f6dd

should actually try compiling first :x

Chris PeBenito • 18 years ago

474f43d

missed a line

Chris PeBenito • 18 years ago

bd7e7a6

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 18 years ago

a28f6db

corenet was missing from unconfined

Chris PeBenito • 18 years ago

8c3f438

more targeted policy fixes

Chris PeBenito • 18 years ago

892266c

more fixes for targeted

Chris PeBenito • 18 years ago

ec848d2

more cleanup

Chris PeBenito • 18 years ago

2ec4c9d

fixes for targeted policy

Chris PeBenito • 18 years ago

8b0bbdd

fix assertions for framework

Chris PeBenito • 18 years ago

391edeb

more cleanup in system

Chris PeBenito • 18 years ago

a5f339f

fix to use context_template()

Chris PeBenito • 18 years ago

9f103ce

add missing context template

Chris PeBenito • 18 years ago

3b6174a

add raid (mdadm)

Chris PeBenito • 18 years ago

50aca6d

more pcmcia cleanup

Chris PeBenito • 18 years ago

d9fd8e7

add macro to expand object class sets for use in require blocks

Chris PeBenito • 18 years ago

157c694

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 18 years ago

50f6503

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 18 years ago

f136a94

add pcmcia

Chris PeBenito • 18 years ago

e0d57fb

fix up the xml

Chris PeBenito • 18 years ago

c429cb5

add ipsec

Chris PeBenito • 18 years ago

11633bb

add nscd

Chris PeBenito • 18 years ago

493d6c4

* fix chroot exec interface

Chris PeBenito • 18 years ago

df00b2e

more cleanup of current TODOs

Chris PeBenito • 18 years ago

b24f35d

fix xml

Chris PeBenito • 18 years ago

4051d15

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 18 years ago

ae9e271

another round of TODO cleanup

Chris PeBenito • 18 years ago

a42ca7e

implement direct_sysadm_daemon

Chris PeBenito • 18 years ago

e5f8060

missing rules uncovered by sediff

Chris PeBenito • 18 years ago

1aa5262

support for targeted policy

Chris PeBenito • 18 years ago

c98340c

ksu moves to su

Chris PeBenito • 18 years ago

ed1a92b

add missing ssh file contexts

Chris PeBenito • 18 years ago

bb32544

add unconfined

Chris PeBenito • 19 years ago

9726b31

add required tags

Chris PeBenito • 19 years ago

2745476

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a9799

ul has to be in a p

Chris PeBenito • 19 years ago

65c8613

initial commit

Chris PeBenito • 19 years ago

5e1ed49

more work on current modules

Chris PeBenito • 19 years ago

fd89e19

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b7

make layer summary required

Chris PeBenito • 19 years ago

d233bfc

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd3673

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00a

change desc to summary

Chris PeBenito • 19 years ago

ceebe3b

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03f

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b383

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da5

changes to make inetd work

Chris PeBenito • 19 years ago

80436b9

initial commit

Chris PeBenito • 19 years ago

24bf11c

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a4

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003f

initial commit

Chris PeBenito • 19 years ago

73fbc77

add/update comments

Chris PeBenito • 19 years ago

62a7b02

update for new documentation method

Chris PeBenito • 19 years ago

414e415

more updates

Chris PeBenito • 19 years ago

aad5b98

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

4523996

fix

Chris PeBenito • 19 years ago

19ea99d

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e6

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892e

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca56

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478c

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96d

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895e

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d69

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a39

work on newrole policy

Chris PeBenito • 19 years ago

21871a5

initial commit

Chris PeBenito • 19 years ago

e04b8e7

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a6

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20a

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a79

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fbab

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e5

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39b

review of system interfaces

Chris PeBenito • 19 years ago

139520a

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1b

misc cleanup

Chris PeBenito • 19 years ago

0e72169

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c621

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124c

initial commit

Chris PeBenito • 19 years ago

828e03f

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6a

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc14

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a801

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd6789

fix typo

Chris PeBenito • 19 years ago

810f2b7

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd19

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed109

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928e

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9c

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea8

tunables work

Chris PeBenito • 19 years ago

34c8fab

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908be

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e70

Updates to documentation.

Karl MacMillan • 19 years ago

8700497

fix xml

Chris PeBenito • 19 years ago

d9507b1

renaming insanity

Chris PeBenito • 19 years ago

c9428d3

Devices rename.

Karl MacMillan • 19 years ago

f0c985c

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc5

reorder

Chris PeBenito • 19 years ago

a154cd4

kernel.if renaming

Chris PeBenito • 19 years ago

588ffae

more renaming and xml

Chris PeBenito • 19 years ago

eda201e

rename

Chris PeBenito • 19 years ago

eca5b2d

aliases

Chris PeBenito • 19 years ago

cc41a97

fix layer in module tag

Chris PeBenito • 19 years ago

7591e83

rename

Chris PeBenito • 19 years ago

c6ebefd

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b274

aliases

Chris PeBenito • 19 years ago

dc67f78

aliases

Chris PeBenito • 19 years ago

0a10b1f

renaming and xml

Chris PeBenito • 19 years ago

fe040c9

aliases

Chris PeBenito • 19 years ago

dd82294

aliases

Chris PeBenito • 19 years ago

80048ca

genhomedircon entries

Chris PeBenito • 19 years ago

5d31560

initial commit

Chris PeBenito • 19 years ago

5552ed8

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab3

aliasing

Chris PeBenito • 19 years ago

7edd02d

initial commit

Chris PeBenito • 19 years ago

b29d23f

add aliases

Chris PeBenito • 19 years ago

c2c00be

renaming

Chris PeBenito • 19 years ago

9f72a26

interface renaming

Chris PeBenito • 19 years ago

0c5a288

interface renaming

Chris PeBenito • 19 years ago

1694dee

comment fix

Chris PeBenito • 19 years ago

066d463

add can_exec

Chris PeBenito • 19 years ago

a719723

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c441

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609f

add xml

Chris PeBenito • 19 years ago

3865d6b

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc7

initial commit

Chris PeBenito • 19 years ago

02b584a

initial commit

Chris PeBenito • 19 years ago

43bc390

fix broken macros

Chris PeBenito • 19 years ago

2d68932

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8a

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a3

move to logging

Chris PeBenito • 19 years ago

ef5e55c

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd2

add some indentation

Chris PeBenito • 19 years ago

4196997

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d115660

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa52

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4efd

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915d

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db90

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa40608

fix module name in xml

Chris PeBenito • 19 years ago

f267dfb

fix xml

Chris PeBenito • 19 years ago

e32d52b

last fixes for cab

Chris PeBenito • 19 years ago

1293184

more cab work

Chris PeBenito • 19 years ago

d115b24

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857ea

initial commit

Chris PeBenito • 19 years ago

b8fca44

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed9

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d1

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42bd

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53ac

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0c

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f8

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0af

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd31631

fixes from cab

Chris PeBenito • 19 years ago

d490eb6

initial commit

Chris PeBenito • 19 years ago

c220381

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ede

initial commit

Chris PeBenito • 19 years ago

10abae7

cleanup

Chris PeBenito • 19 years ago

cbeef67

cleanup

Chris PeBenito • 19 years ago

3b3bf87

initial commit

Chris PeBenito • 19 years ago

6f3dab2

initial commit

Chris PeBenito • 19 years ago

7d7a36a

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc6

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3e

another cleanup pass

Chris PeBenito • 19 years ago

dc771ff

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f10

initial commit

Chris PeBenito • 19 years ago

992aba5

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd0

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440fb

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e269

move in stuff from rpm

Chris PeBenito • 19 years ago

3925517

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a9613

add missing xml

Chris PeBenito • 19 years ago

162a57e

add tmpfsfile support

Chris PeBenito • 19 years ago

46410fd

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a5

make transition on shell work

Chris PeBenito • 19 years ago

3000a31

add transitions

Chris PeBenito • 19 years ago

c430976

add ldconfig

Chris PeBenito • 19 years ago

48e0dbd

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d3

add mls port support

Chris PeBenito • 19 years ago

0d0d2ba

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa0

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0b

add context template to support mls

Chris PeBenito • 19 years ago

bee546b

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e0

add a xml comment

Chris PeBenito • 19 years ago

490639c

add xml

Chris PeBenito • 19 years ago

2e77b29

fix xml

Chris PeBenito • 19 years ago

494e988

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5b

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

1786071

add source policy interfaces

Chris PeBenito • 19 years ago

ef37340

add renice all domains

Chris PeBenito • 19 years ago

5817e3a

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0a

add admin template

Chris PeBenito • 19 years ago

76bff31

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2e

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf9

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0d

initial commit

Chris PeBenito • 19 years ago

650e75c

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b8

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a22

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff31386

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae1

pile of updates

Chris PeBenito • 19 years ago

7bba9d3

initial commit

Chris PeBenito • 19 years ago

1bde832

additions for cron and mta

Chris PeBenito • 19 years ago

075c4fd

reorg and a fix

Chris PeBenito • 19 years ago

fd9deeb

add crontab

Chris PeBenito • 19 years ago

d18e3d7

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee7

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9c

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24ae

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af28

initial commit

Chris PeBenito • 19 years ago

23caa6d

updates needed for cron

Chris PeBenito • 19 years ago

24280a5

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805f

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186e

reorder for more consistency

Chris PeBenito • 19 years ago

1832271

oops

Chris PeBenito • 19 years ago

dec1686

reorder for more consistency

Chris PeBenito • 19 years ago

6b67401

initial commit

Chris PeBenito • 19 years ago

b3416a3

leftover from netutils

Chris PeBenito • 19 years ago

eeb2558

initial commit

Chris PeBenito • 19 years ago

f8ec0ad

leftover from modutils

Chris PeBenito • 19 years ago

63a310c

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b555

initial commit

Chris PeBenito • 19 years ago

0f3be6d

use ptys

Chris PeBenito • 19 years ago

6f50b57

fix hotplug optional

Chris PeBenito • 19 years ago

2812bfa

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb4

add printer_device_t

Chris PeBenito • 19 years ago

46be1f3

more authlogin handling

Chris PeBenito • 19 years ago

13e94c0

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c16219

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb28738

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e825

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20dd

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc8

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a3

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b0000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25af

cleanup

Chris PeBenito • 19 years ago

c5b5a74

add sulogin

Chris PeBenito • 19 years ago

5d7e8ba

initial commit

Chris PeBenito • 19 years ago

15e3d8e

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e02803

initial commit

Chris PeBenito • 19 years ago

b2b38c7

add read fonts

Chris PeBenito • 19 years ago

ec81ecb

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b6

initial commit

Chris PeBenito • 19 years ago

2274f9a

add legacy read locale

Chris PeBenito • 19 years ago

0fef98c

cleanup

Chris PeBenito • 19 years ago

ebf7600

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a62

initial commit

Chris PeBenito • 19 years ago

4fc9153

add in system_domain

Chris PeBenito • 19 years ago

d0eddb6

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1af

fix depends

Chris PeBenito • 19 years ago

23af43b

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c8

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e5

add usermanage

Chris PeBenito • 19 years ago

849380b

more conversion

Chris PeBenito • 19 years ago

1e5c2a4

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202fe

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d0

a few more copied over

Chris PeBenito • 19 years ago

0bc32e0

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad32

add in pam console

Chris PeBenito • 19 years ago

75a10ba

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e0625

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb4

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e32

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c30

updates

Chris PeBenito • 19 years ago

3a9aef9

initial commit

Chris PeBenito • 19 years ago

6b93833

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab1

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f82

add ignore read system state

Chris PeBenito • 19 years ago

67484fc

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee6

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c2

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e6

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6abe

handful of changes

Chris PeBenito • 19 years ago

ba7740d

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c5

add in missing policy_module line

Chris PeBenito • 19 years ago

1b90996

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83dba

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f1

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc37

fix privfd

Chris PeBenito • 19 years ago

e9a6fcb

doh

Chris PeBenito • 19 years ago

4472f3e

add in missing devices

Chris PeBenito • 19 years ago

7009881

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cdc

initial commit

Chris PeBenito • 19 years ago

a7ed44d

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d8246

initial local login commit

Chris PeBenito • 19 years ago

07efe96

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772e

minor fixes

Chris PeBenito • 19 years ago

f9cfa19

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b586061

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

3009816

add console setattr if

Chris PeBenito • 19 years ago

55a46da

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2ee

reorganize the policy

Chris PeBenito • 19 years ago

4600e08

initial commit

Chris PeBenito • 19 years ago

dfb86ad

initial commit

Chris PeBenito • 19 years ago

b5ab18b

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f4564

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a9

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd3599

add console dontaudit

Chris PeBenito • 19 years ago

8119850

initial commit

Chris PeBenito • 19 years ago

3016a9f

add search all dirs

Chris PeBenito • 19 years ago

f9438fd

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a64

add legacy lib use

Chris PeBenito • 19 years ago

8beec89

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373d

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc5

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f56

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab6

add missing transition dontaudits

Chris PeBenito • 19 years ago

b303042

initial commit

Chris PeBenito • 19 years ago

549180e

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf7

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3c

reorg

Chris PeBenito • 19 years ago

343a231

fix te trans error

Chris PeBenito • 19 years ago

22e1131

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da10

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0dd

complete corenetwork

Chris PeBenito • 19 years ago

0e730cc

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37c

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e81

uncomment test file

Chris PeBenito • 19 years ago

32b5029

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a95221

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e3

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80e

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78f

more comments

Chris PeBenito • 19 years ago

bd76460

add copyright statement

Chris PeBenito • 19 years ago

e181fe0

initial commit

Chris PeBenito • 19 years ago

0154356

initial commit

Chris PeBenito • 19 years ago

879b00f

initial commit

Chris PeBenito • 19 years ago

67e2ff4

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d2

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890ef

add all types for this module

Chris PeBenito • 19 years ago

3ba13bb

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1ab

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c77177

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e50

initial commit

Chris PeBenito • 19 years ago

b470e38

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f057824

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb8

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a2

kernel can load modules

Chris PeBenito • 19 years ago

5496553

hold off on improving

Chris PeBenito • 19 years ago

7f89c7e

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d0

move assert.te here

Chris PeBenito • 19 years ago

57d2365

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d78128

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf79

initial commit

Chris PeBenito • 19 years ago

b4cd153

psss / rpms / selinux-policy

History refpolicy/policy/modules

psss / rpms / selinux-policy

Source Code

History refpolicy/policy/modules