File history - forks/psss/rpms/selinux-policy

Additional interfaces in corecommands, miscfiles, and userdomain from Joy Latten.

Chris PeBenito • 18 years ago

d42c7ed

fixes from thomas bleher Fri, 24 Mar 2006 13:25:54 +0100

Chris PeBenito • 18 years ago

8b2d5ca

deprecate module name as first parameter of optional_policy()

Chris PeBenito • 18 years ago

bb7170f

add hidd

Chris PeBenito • 18 years ago

7fd9a60

fix vpn module declaration.

Chris PeBenito • 18 years ago

ac6cff2

patch from dan Fri, 17 Mar 2006 15:22:53 -0500

Chris PeBenito • 18 years ago

a3cf80d

comment fix

Chris PeBenito • 18 years ago

dcd174a

add calamaris, bug 1518

Chris PeBenito • 18 years ago

99c902f

add audioentropy, bug 1515

Chris PeBenito • 18 years ago

7f74a41

add games, bug 1386

Chris PeBenito • 18 years ago

fbc0a27

fix most missing entries from bug 1567

Chris PeBenito • 18 years ago

3dbceb8

gentoo fixes

Chris PeBenito • 18 years ago

ce6c136

fix misname of template

Chris PeBenito • 18 years ago

c28caf3

add listen and accept to tcp_sock

Chris PeBenito • 18 years ago

aa5f871

additional mls interfaces from chad hanson.

Chris PeBenito • 18 years ago

405efe1

add ethereal, bug 1383

Chris PeBenito • 18 years ago

0834f9b

remove unneeded rule

Chris PeBenito • 18 years ago

7400d12

add ssp patch and move some domain_(base_)?_type() rules to the TE file.

Chris PeBenito • 18 years ago

3cfd487

fix temporary rules in portmap, bug 1467

Chris PeBenito • 18 years ago

e78c775

fix missing dep

Chris PeBenito • 18 years ago

49b41cb

add evolution, bug 1384

Chris PeBenito • 18 years ago

edf241c

add mozilla bug 1396

Chris PeBenito • 18 years ago

9105f90

add mplayer

Chris PeBenito • 18 years ago

77b81c6

add rhgb

Chris PeBenito • 18 years ago

c8d5b35

fix typo

Chris PeBenito • 18 years ago

3bb0a3b

add thunderbird

Chris PeBenito • 18 years ago

1852726

add apt and dpkg from erich schubert

Chris PeBenito • 18 years ago

0c54fcf

add amavis and clamav from Erich Schubert

Chris PeBenito • 18 years ago

8a0a994

add tor module from Erich Schubert

Chris PeBenito • 18 years ago

ce3145e

add a few missing bits

Chris PeBenito • 18 years ago

a4bbe38

bump version numbers for release

Chris PeBenito • 18 years ago

2b3c99d

add missing rules

Chris PeBenito • 18 years ago

32e6fc6

fix typo

Chris PeBenito • 18 years ago

72ed29b

move bootloader to admin

Chris PeBenito • 18 years ago

e5a602a

make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames.

Chris PeBenito • 18 years ago

1c1ac67

patch from dan Thu, 23 Feb 2006 14:26:05 -0500

Chris PeBenito • 18 years ago

0f27d98

add interfaces to eventually clean up the storage_create_fixed_disk(_tmpfs)?() mess

Chris PeBenito • 18 years ago

675a0ee

patch from dan Mon, 20 Feb 2006 17:19:34 -0500

Chris PeBenito • 18 years ago

02bcb8b

another round of renaming

Chris PeBenito • 18 years ago

103fe28

add gentoo integrated run init

Chris PeBenito • 18 years ago

2283dc7

another round of renaming

Chris PeBenito • 18 years ago

15722ec

fix most templated interface calls outside of templates

Chris PeBenito • 18 years ago

0eba5d6

patch from dan Sun, 19 Feb 2006 08:16:18 -0500

Chris PeBenito • 18 years ago

46c69cb

clean up most of user subdir mess

Chris PeBenito • 18 years ago

4a02d30

fix up cron_crw_tcp_socket()

Chris PeBenito • 18 years ago

e1ee92b

Remove allow_execmem from targeted policy domain_base_type().

Chris PeBenito • 18 years ago

3eea551

fix bad interface calls

Chris PeBenito • 18 years ago

a395250

add uml, plus two renames in corenet

Chris PeBenito • 18 years ago

5b6ddb9

patch from dan Tue, 14 Feb 2006 09:01:16 -0500

Chris PeBenito • 18 years ago

8cf6714

reverse

Chris PeBenito • 18 years ago

b389cd4

remove unneeded dep

Chris PeBenito • 18 years ago

fcfe684

implement x_client_domain replacement

Chris PeBenito • 18 years ago

24a6379

clean up patch from Serge Fri, 10 Feb 2006 18:01:06 -0600

Chris PeBenito • 18 years ago

807a777

patch from dan Thu, 09 Feb 2006 13:39:41 -0500

Chris PeBenito • 18 years ago

b0d2243

xml building changes, add desc tag to booleans, add summary tag to bools

Chris PeBenito • 18 years ago

885b83e

patch from Serge Hallyn Thu, 09 Feb 2006 13:42:36 -0600, plus fix the rules in the TODO.

Chris PeBenito • 18 years ago

9778406

fix process object class assertion for hierarchy

Chris PeBenito • 18 years ago

e0dfbdf

work on xdm

Chris PeBenito • 18 years ago

5a975c1

patch from dan Wed, 01 Feb 2006 08:33:30 -0500

Chris PeBenito • 18 years ago

9550194

fix sendto

Chris PeBenito • 18 years ago

37f15c5

a couple init renames

Chris PeBenito • 18 years ago

f754793

fix kernel_relabel_unlabeled()

Chris PeBenito • 18 years ago

c66a3aa

remove redundant userdom_manage_generic_user_home_dir interface

Chris PeBenito • 18 years ago

cd07eae

remove lvm_vg_t

Chris PeBenito • 18 years ago

017bab0

clean up userdom_create_user_home()

Chris PeBenito • 18 years ago

9417cb7

fix userdom_create_sysadm_home

Chris PeBenito • 18 years ago

ee9500e

another slew of renaming

Chris PeBenito • 18 years ago

1815bad

fix optional in fc, move contexts to their proper modules

Chris PeBenito • 18 years ago

46112fc

fix compile problem

Chris PeBenito • 18 years ago

3284fb6

fix a few fcs

Chris PeBenito • 18 years ago

8ff5530

merge tvtime to trunk

Chris PeBenito • 18 years ago

b77d019

remove unneeded gen_require_set() macro

Chris PeBenito • 18 years ago

e52af25

genhomedircon stuff only for strict

Chris PeBenito • 18 years ago

6018e9b

genhomedircon stuff only for strict

Chris PeBenito • 18 years ago

6bc40ea

fix xml

Chris PeBenito • 18 years ago

fe21026

add mrtg, bug 1394

Chris PeBenito • 18 years ago

6796266

renaming from 20060131 interface review, round 4

Chris PeBenito • 18 years ago

4d851fe

renaming from 20060131 interface review, round 3

Chris PeBenito • 18 years ago

9e04f5c

renaming from 20060131 interface review, round 2

Chris PeBenito • 18 years ago

445522d

renaming from 20060131 interface review

Chris PeBenito • 18 years ago

207c476

fix documentation

Chris PeBenito • 18 years ago

1576102

merge xdm into xserver

Chris PeBenito • 18 years ago

0f5d13f

remove kernel module reversed interfaces.

Chris PeBenito • 18 years ago

18cc016

remove all class remaining lines with kernel object classes.

Chris PeBenito • 18 years ago

6ada253

patch from dan Fri, 27 Jan 2006 01:37:19 -0500

Chris PeBenito • 18 years ago

51a89cc

from today's interface review meeting:

Chris PeBenito • 18 years ago

270d428

add rolemap/per-userdomain infrastructure

Chris PeBenito • 18 years ago

4ace0fa

remove newrole privs from su and sudo

Chris PeBenito • 18 years ago

5e4cbc7

patch from dan

Chris PeBenito • 18 years ago

a524921

fix xml

Chris PeBenito • 18 years ago

59d721e

reverse last change

Chris PeBenito • 18 years ago

18d59e1

cleanup

Chris PeBenito • 18 years ago

6b5c92d

fix sshd

Chris PeBenito • 18 years ago

f6abfdb

add missing if

Chris PeBenito • 18 years ago

d14c0e7

fix user pty type_change

Chris PeBenito • 18 years ago

1e786ea

more xdm work

Chris PeBenito • 18 years ago

07620c0

last bits of xserver

Chris PeBenito • 18 years ago

3b31130

add xauth and iceauth to xserver

Chris PeBenito • 18 years ago

acd87ca

work on xdm

Chris PeBenito • 18 years ago

dace0b2

patch from Dan, sent Thu, 19 Jan 2006 14:16:26 -0500

Chris PeBenito • 18 years ago

a225f98

fixes from serge

Chris PeBenito • 18 years ago

85c20af

forgot to bump version

Chris PeBenito • 18 years ago

55f1efa

add xserver

Chris PeBenito • 18 years ago

488ec7b

login fixes and pieces of xserver

Chris PeBenito • 18 years ago

2ce6b04

add execstack and execheap to unconfined domain exclusion

Chris PeBenito • 18 years ago

edb77e5

hopefuly final fix for run_init

Chris PeBenito • 18 years ago

a49e2bd

move certwatch to admin, its not a daemon

Chris PeBenito • 18 years ago

92268c5

add lpr policy to lpd

Chris PeBenito • 18 years ago

8dca6b9

add certwatch

Chris PeBenito • 18 years ago

2bcdbd8

fixes from dan

Chris PeBenito • 18 years ago

0a77288

Change initrc_var_run_t interface noun from script_pid to utmp for clarity.

Chris PeBenito • 18 years ago

68228b3

there is no initrc_var_run_t:dir

Chris PeBenito • 18 years ago

b94cc19

add userhelper

Chris PeBenito • 18 years ago

7c2f5a8

really fix the build problems

Chris PeBenito • 18 years ago

6d14093

fix compile errors

Chris PeBenito • 18 years ago

625caeb

move stray bin_t entry

Chris PeBenito • 18 years ago

6b86ef0

add portage from gentoo

Chris PeBenito • 18 years ago

e1c4142

fix run_init constraint problem

Chris PeBenito • 18 years ago

fe9b054

add usernetctl.

Chris PeBenito • 18 years ago

8cc4947

bump versions for release.

Chris PeBenito • 18 years ago

d3d2702

patch from dan 1/16/06

Chris PeBenito • 18 years ago

93727e3

fix encapsulation problem

Chris PeBenito • 18 years ago

cc5df23

fix module building problems.

Chris PeBenito • 18 years ago

76b519d

fix typos and formatting

Chris PeBenito • 18 years ago

f40b368

add corenet patch from spencer

Chris PeBenito • 18 years ago

b7b1d23

add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.

Chris PeBenito • 18 years ago

44d5d93

add slocate from dan

Chris PeBenito • 18 years ago

6a57b68

rename create verb to filetrans for type transitioning ifs

Chris PeBenito • 18 years ago

9d59498

fix comments, clean out object classes

Chris PeBenito • 18 years ago

8369293

interface-ize screen fixes

Chris PeBenito • 18 years ago

22d2e25

fix comments

Chris PeBenito • 18 years ago

460e051

fixes to make screen work

Chris PeBenito • 18 years ago

038bd3f

add cdrecord

Chris PeBenito • 18 years ago

4ec6941

add java

Chris PeBenito • 18 years ago

3ffe298

fix alignment

Chris PeBenito • 18 years ago

c5af97f

rsync --daemon is long running, and can be run from an init script.

Chris PeBenito • 18 years ago

de94087

add alsa

Chris PeBenito • 18 years ago

de8af9d

add prelink.

Chris PeBenito • 18 years ago

2c24358

add lockdev

Chris PeBenito • 18 years ago

1ae2c31

add roundup.

Chris PeBenito • 18 years ago

7e0fa55

fix

Chris PeBenito • 18 years ago

7c10117

add usbmodules

Chris PeBenito • 18 years ago

44f490b

fix role

Chris PeBenito • 18 years ago

e831e41

add screen

Chris PeBenito • 18 years ago

c8ba683

patch from dan.

Chris PeBenito • 18 years ago

a77e652

woops

Chris PeBenito • 18 years ago

5a35c02

add polyinstantiation.

Chris PeBenito • 18 years ago

b07eaef

minor cleanups

Chris PeBenito • 18 years ago

d163a43

add logwatch

Chris PeBenito • 18 years ago

020cbef

remove unneeded rule

Chris PeBenito • 18 years ago

5e98eaa

part of dan's mega patch

Chris PeBenito • 18 years ago

bf080a4

add irc

Chris PeBenito • 18 years ago

8cffa78

fix formatting

Chris PeBenito • 18 years ago

a317cd8

add slrnpull

Chris PeBenito • 18 years ago

1d427ac

add readahead

Chris PeBenito • 18 years ago

6f11d6b

add openct

Chris PeBenito • 18 years ago

0e8ec43

fix spacing problem

Chris PeBenito • 18 years ago

56c1def

add ddcprobe

Chris PeBenito • 18 years ago

8710791

add smartmon

Chris PeBenito • 18 years ago

871b685

fix typo in require block

Chris PeBenito • 18 years ago

fc4054c

another patch from dan

Chris PeBenito • 18 years ago

cd66769

policy-20051208.patch

Chris PeBenito • 18 years ago

9cca1cd

fixes

Chris PeBenito • 18 years ago

be1e6eb

stuff from dan

Chris PeBenito • 18 years ago

bb43724

fix errors reported on fedora-se ml

Chris PeBenito • 18 years ago

4ac451f

fix comment

Chris PeBenito • 18 years ago

0c4bf1c

fix ptracing of all domains

Chris PeBenito • 18 years ago

60caa30

fix interface

Chris PeBenito • 18 years ago

3b4da47

rename texrel_shlib_t to textrel_shlib_t

Chris PeBenito • 18 years ago

a324ef1

add swat to samba, and fix an automount mistake

Chris PeBenito • 18 years ago

cbe3275

bump vers

Chris PeBenito • 18 years ago

d457d0e

add automount

Chris PeBenito • 18 years ago

7576fad

fix module versions

Chris PeBenito • 18 years ago

5ea24be

policy-20051208.patch from dan, plus a few adjustments

Chris PeBenito • 18 years ago

049e11a

make common template

Chris PeBenito • 18 years ago

8ba1bd8

add fetchmail

Chris PeBenito • 18 years ago

a089b6d

fix compile errors

Chris PeBenito • 18 years ago

9667c15

add sysstat

Chris PeBenito • 18 years ago

0f73fde

add unlabeled association rules

Chris PeBenito • 18 years ago

bd70373

fix module compile issues

Chris PeBenito • 18 years ago

439aaa2

policy-20051114.patch from dan

Chris PeBenito • 18 years ago

3c8f6b1

clean up

Chris PeBenito • 18 years ago

fc0e8ce

fix dupe interfaces

Chris PeBenito • 18 years ago

1470ffb

add back rules that were mistakenly removed

Chris PeBenito • 18 years ago

f525b49

many loadable module build fixes

Chris PeBenito • 18 years ago

6f81e1d

loadable module build fixes

Chris PeBenito • 18 years ago

7572070

move files, corecommands, and domain to kernel layer

Chris PeBenito • 18 years ago

058f3ef

add i18n

Chris PeBenito • 18 years ago

4093c29

add final bits of spamassassin

Chris PeBenito • 18 years ago

6820a39

patch from dan

Chris PeBenito • 18 years ago

78510c5

fix several modular build problems

Chris PeBenito • 18 years ago

9fd4b81

work on users

Chris PeBenito • 18 years ago

ac9aa26

fix kerberos_use, which turned out to be a problem in dns_reslove

Chris PeBenito • 18 years ago

574e63f

bump rev

Chris PeBenito • 18 years ago

70fb22d

clean up most of the mta hacks

Chris PeBenito • 18 years ago

1504ff3

big cleanup of mta

Chris PeBenito • 18 years ago

08cd98b

add irqbalance

Chris PeBenito • 18 years ago

5d5ea8d

add timidity

Chris PeBenito • 18 years ago

f11f0c1

add rdisc

Chris PeBenito • 18 years ago

19ff64f

add yppasswdd to nis

Chris PeBenito • 18 years ago

131e573

cleanup from sediff

Chris PeBenito • 18 years ago

09741b1

add xfs

Chris PeBenito • 18 years ago

3f41889

clean up rpc hack

Chris PeBenito • 18 years ago

f00434f

clean up networkmanager hacks

Chris PeBenito • 18 years ago

d828b5c

patch from dan to remove rhgb and gph:fd use

Chris PeBenito • 18 years ago

2629c65

Change optional_policy() to refer to the module name rather than modulename.te.

Chris PeBenito • 18 years ago

1328802

patch from dan

Chris PeBenito • 18 years ago

af23450

tweaks from dan

Chris PeBenito • 18 years ago

9cc2ccc

fixes from dan

Chris PeBenito • 18 years ago

95f82b0

fix

Chris PeBenito • 18 years ago

c5c3066

add last bits from dan

Chris PeBenito • 18 years ago

1d697ce

updates from dan

Chris PeBenito • 18 years ago

37ff8fe

fix superfluous network rules pointed out by dan walsh, and clean

Chris PeBenito • 18 years ago

1354ca0

fix transitions in and out of unconfined. fix bugs uncovered by rawhide testing

Chris PeBenito • 18 years ago

704327e

stray procmail execs

Chris PeBenito • 18 years ago

1dad083

add procmail

Chris PeBenito • 18 years ago

3e6c816

clean up some hacks

Chris PeBenito • 18 years ago

c6d4c8f

add patch from dan

Chris PeBenito • 18 years ago

7b062ea

role hack for genhomedircon

Chris PeBenito • 18 years ago

3ed2b69

temp genhomedircon hack

Chris PeBenito • 18 years ago

de0d265

change dmesg and loadkeys behavior to aliasing, and enable modules

Chris PeBenito • 18 years ago

9e91381

remove extra rule

Chris PeBenito • 18 years ago

0d5d74e

more broken symptoms

Chris PeBenito • 18 years ago

15c235f

hack

Chris PeBenito • 18 years ago

af86646

fix type transition conflicts

Chris PeBenito • 18 years ago

3be48fa

fix ordering problem

Chris PeBenito • 18 years ago

17da253

fix rpm

Chris PeBenito • 18 years ago

7fefc1d

reverse last change

Chris PeBenito • 18 years ago

175b1cb

fix ordering

Chris PeBenito • 18 years ago

5ae9081

add debugging symbols

Chris PeBenito • 18 years ago

4fe05f2

missing fc's

Chris PeBenito • 18 years ago

33ff9b8

update rh broken symptoms

Chris PeBenito • 18 years ago

3ad26d1

add initrc_tmp_t mountpoint

Chris PeBenito • 18 years ago

a6e32d6

fix missing role statements

Chris PeBenito • 18 years ago

daff1dc

small fixes

Chris PeBenito • 18 years ago

55290ad

changed rules fixes

Chris PeBenito • 18 years ago

2e0a880

work around role dominance breakage in module compiler

Chris PeBenito • 18 years ago

3797efb

missing matches

Chris PeBenito • 18 years ago

65b9361

reorder to work around module compiler bug

Chris PeBenito • 18 years ago

672a157

use role dominance in targeted for compatability with strict

Chris PeBenito • 18 years ago

37c8521

fix changed rules

Chris PeBenito • 18 years ago

1904b01

missing matches

Chris PeBenito • 18 years ago

c6825e9

fc fixes

Chris PeBenito • 18 years ago

c2e35b8

add missing bin_t aliases

Chris PeBenito • 18 years ago

c646a9f

add missing /var/yp match

Chris PeBenito • 18 years ago

51f3744

correct shlib_t alias

Chris PeBenito • 18 years ago

33faf59

fix to use real type rather than alias

Chris PeBenito • 18 years ago

e3d21df

fixes for sorting

Chris PeBenito • 18 years ago

2ab07eb

add avahi

Chris PeBenito • 18 years ago

4b9516c

more fix

Chris PeBenito • 18 years ago

d3f715d

tty fixes

Chris PeBenito • 18 years ago

3e639ab

pile of sediff fixes

Chris PeBenito • 18 years ago

725926c

fix sendmail transition

Chris PeBenito • 18 years ago

76febd2

merge in some of dan's old policy changes

Chris PeBenito • 18 years ago

8967bf8

Changed a { create rw_dir_perms } to a create_dir_perms since starting radius was getting a setattr denial and setattr was shown to be missing in sediff

Don Miner • 18 years ago

bc6dfa6

Added signal_perms to nscd_t.

Don Miner • 18 years ago

45aa10a

missing dir

Chris PeBenito • 18 years ago

307e114

user tty fixes

Chris PeBenito • 18 years ago

7afca0b

add stuff from distros.fc

Chris PeBenito • 18 years ago

9c6feb6

Added rules so that tracepath, traceroute and ping work.

Don Miner • 18 years ago

8f882ff

fixes just so sediff is easier to handle

Chris PeBenito • 18 years ago

73ef293

hack

Chris PeBenito • 18 years ago

b488014

clean up last var_run_domain expansion errors

Chris PeBenito • 18 years ago

b9ea0fe

read certs

Chris PeBenito • 18 years ago

ee08bc4

clean up socket

Chris PeBenito • 18 years ago

35adb6f

fix filesystem associations

Chris PeBenito • 18 years ago

31a1c2d

tty and caps fixes

Chris PeBenito • 18 years ago

7ac2258

more dbus cleanup

Chris PeBenito • 18 years ago

0b12fa4

dbus obj class cleanup

Chris PeBenito • 18 years ago

dab808b

more of the same

Chris PeBenito • 18 years ago

ce0ff19

initrc couldn't create/use its own pty!

Chris PeBenito • 18 years ago

b422aa9

more fixes

Chris PeBenito • 18 years ago

30910b3

Added a rule to allow dmidecode to use locallogin_t fd to make it so it works.

Don Miner • 18 years ago

305106e

add missing httpd_helper_t tty part

Chris PeBenito • 18 years ago

aba9c7a

misc sediff fixes

Chris PeBenito • 18 years ago

9ca7e78

* fixes uncovered by sediff

Chris PeBenito • 18 years ago

0500e01

add missing tunable

Chris PeBenito • 18 years ago

bea7b45

fix perm set

Chris PeBenito • 18 years ago

6ff85b5

fixes uncovered by sediff

Chris PeBenito • 18 years ago

6284179

nicer te_trans conflict fix

Chris PeBenito • 18 years ago

f3936d3

fix te_trans conflict

Chris PeBenito • 18 years ago

cac3eca

fix up sendmail for targeted

Chris PeBenito • 18 years ago

dc8f170

fix

Chris PeBenito • 18 years ago

f1b0a8c

take care of missing types

Chris PeBenito • 18 years ago

2d13f72

ssh updates for targeted

Chris PeBenito • 18 years ago

375c241

typo

Chris PeBenito • 18 years ago

f0f18e0

add missing range transition

Chris PeBenito • 18 years ago

495a702

initrc fixes

Chris PeBenito • 18 years ago

005a9aa

fix quoting

Chris PeBenito • 18 years ago

7e1c14d

fixes from testing

Chris PeBenito • 18 years ago

dd3544d

fix some /opt regexes

Chris PeBenito • 18 years ago

f1baed7

more transition work

Chris PeBenito • 18 years ago

08c22f4

add some missing transitions from unconfined

Chris PeBenito • 18 years ago

b281bf6

sediff fixes

Chris PeBenito • 18 years ago

a525f29

fixes from sediff

Chris PeBenito • 18 years ago

fc6198c

rpc fixes from testing

Chris PeBenito • 18 years ago

ce03837

fixes from testing

Chris PeBenito • 18 years ago

5abea98

more fixing

Chris PeBenito • 18 years ago

4614e83

Added search and getattr permissions to etc_mail_t dir for system_mail_t so that the sendmail process would be able to start through init

Don Miner • 18 years ago

f13da83

another pile o fixes

Chris PeBenito • 18 years ago

d1b9d92

pile o fixes

Chris PeBenito • 18 years ago

33acca5

fix rpm transition

Chris PeBenito • 18 years ago

f5e4f79

fixes from arpwatch testing

Chris PeBenito • 18 years ago

e8d0a65

a few more strays

Chris PeBenito • 18 years ago

7a6d427

try to fix associations

Chris PeBenito • 18 years ago

c3cf669

privfd

Chris PeBenito • 18 years ago

b7e1825

easy fixes

Chris PeBenito • 18 years ago

ccfd7b1

missing privloggers

Chris PeBenito • 18 years ago

2526a44

typo

Chris PeBenito • 18 years ago

ee64ef4

initrc also uses nscd

Chris PeBenito • 18 years ago

d49d524

add missing nscd clients

Chris PeBenito • 18 years ago

e11d2e3

use our own interface to make maintenance easier

Chris PeBenito • 18 years ago

2aec146

add default_t read back

Chris PeBenito • 18 years ago

7eec657

privhome implementation

Chris PeBenito • 18 years ago

784a3bb

testing fixes

Chris PeBenito • 18 years ago

7b90f2d

add dontaudit

Chris PeBenito • 18 years ago

51f5c6a

system_chkpwd can winbind

Chris PeBenito • 18 years ago

467602f

syslog logs to itself?

Chris PeBenito • 18 years ago

b0bdeb0

use the right interface

Chris PeBenito • 18 years ago

2c216c0

some home dir fixes

Chris PeBenito • 18 years ago

9aca490

fix up su

Chris PeBenito • 18 years ago

83e4512

fixes

Chris PeBenito • 18 years ago

60789e1

module build fixes

Chris PeBenito • 18 years ago

28e730b

homedir fixes

Chris PeBenito • 18 years ago

9dd5002

more postfix work

Chris PeBenito • 18 years ago

88dd389

Moved the dbus stuff inbetween networkmanager and bind to the bind policy

Don Miner • 18 years ago

2192d4b

hide broken symptoms

Chris PeBenito • 18 years ago

3df88de

fix acct

Chris PeBenito • 18 years ago

52e1edb

Fixed an allow that should have been a dontaudit

Don Miner • 18 years ago

d2c5739

add nscd

Chris PeBenito • 18 years ago

977b1d6

fix most disable_trans errors

Chris PeBenito • 18 years ago

69dcd68

Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages

Don Miner • 18 years ago

f470a1e

Reduced the number of differences in amanda between the targeted and the refpolicy

Don Miner • 18 years ago

c11417c

fix most of samba

Chris PeBenito • 18 years ago

6716737

Removed differences between refpolicy and targeted acct_t

Don Miner • 18 years ago

bdfa8e7

Removed differences between refpolicy and targeted NetworkManager_t

Don Miner • 18 years ago

9c4fcf6

add proc_net lnk

Chris PeBenito • 18 years ago

7ebd6a9

hopefully fix su

Chris PeBenito • 18 years ago

b4e1ebc

fixes

Chris PeBenito • 18 years ago

30705b6

more fix

Chris PeBenito • 18 years ago

9bbc757

Fixed a problem which was allowing processes to become unconfined from initrc

Don Miner • 18 years ago

0354e30

Added rules to the bind policy for the named server so that it would start

Don Miner • 18 years ago

dd57ca3

Added signal permissions to postgres so it can start

Don Miner • 18 years ago

57d8e6c

corenet fixes

Chris PeBenito • 18 years ago

162dfc3

fix

Chris PeBenito • 18 years ago

e64b338

remove bin policy and kern module assertions for now

Chris PeBenito • 18 years ago

15fefa4

fix mls r_t

Chris PeBenito • 18 years ago

1480d3a

more sediff

Chris PeBenito • 18 years ago

34e722f

Added rules to the smbd_t and the nmbd_t domains so that they would start properly

Don Miner • 18 years ago

fa16f25

sediff fixes

Chris PeBenito • 18 years ago

1dd86c4

add initrc_su_t

Chris PeBenito • 18 years ago

bb67633

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Don Miner • 18 years ago

3d37bca

more missing types

Chris PeBenito • 18 years ago

710791f

more fixes

Chris PeBenito • 18 years ago

19b5555

add rpc

Chris PeBenito • 18 years ago

43989f8

fixes from sediff

Chris PeBenito • 18 years ago

2db2c7d

Added a file context for httpd.pid so that it is correctly labeled

Don Miner • 18 years ago

f8964c0

nwmgr fixes

Chris PeBenito • 18 years ago

f855442

add cups

Chris PeBenito • 18 years ago

ef5ca0f

add postfix

Chris PeBenito • 18 years ago

04926d0

add spamassassin

Chris PeBenito • 18 years ago

f932d8e

add radius and amanda, which I forgot to ci

Chris PeBenito • 18 years ago

44fc06b

add pegasus

Chris PeBenito • 18 years ago

230838e

add dbskk

Chris PeBenito • 18 years ago

a636210

add lpd

Chris PeBenito • 18 years ago

ad3b9d7

simplify since alias take care of it

Chris PeBenito • 18 years ago

ae1d9af

add amanda

Chris PeBenito • 18 years ago

10b1f32

add networkmanager

Chris PeBenito • 18 years ago

239db5e

more sediff fixes

Chris PeBenito • 18 years ago

1f8a8bb

more fixes

Chris PeBenito • 18 years ago

e6a2eaf

sediff fixes

Chris PeBenito • 18 years ago

da4fc9c

add xdm

Chris PeBenito • 18 years ago

23a4442

add canna

Chris PeBenito • 18 years ago

3509484

fix

Chris PeBenito • 18 years ago

fe7b943

add cyrus

Chris PeBenito • 18 years ago

ea557a8

add dovecot

Chris PeBenito • 18 years ago

29ce000

fix corenetwork generation and add distcc

Chris PeBenito • 18 years ago

cf6141a

obj class typo for certs

Chris PeBenito • 18 years ago

4e69c1c

targeted policy fixes

Chris PeBenito • 18 years ago

de76494

targeted and distro fixes for loadable modules

Chris PeBenito • 18 years ago

af4752b

fix last loadable module problems

Chris PeBenito • 18 years ago

0efe52a

fix requires

Chris PeBenito • 18 years ago

90c3dde

piles of fixes for loadable modules

Chris PeBenito • 18 years ago

12ae755

misc fixes

Chris PeBenito • 18 years ago

c381274

fix error uncovered by sechecker

Chris PeBenito • 18 years ago

c3a05c9

wrap up almost all of apache

Chris PeBenito • 18 years ago

e749cd1

add ppp

Chris PeBenito • 18 years ago

e08118a

more merging from 1.27.1-15

Chris PeBenito • 18 years ago

fe9d17f

more merging from 1.27.1-15

Chris PeBenito • 18 years ago

d8636fc

partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15

Chris PeBenito • 18 years ago

77f6e2c

add some docs, do some reordering

Chris PeBenito • 18 years ago

b1421d8

add missing interface

Chris PeBenito • 18 years ago

4c71994

add in last bits of webalizer

Chris PeBenito • 18 years ago

be4690a

more apache work

Chris PeBenito • 18 years ago

c2b18fa

add mailman

Chris PeBenito • 18 years ago

799a0b4

add webalizer and sasl

Chris PeBenito • 18 years ago

f33561f

add apm and arpwatch. fix implementation error on fs_getattr_all_files,

Chris PeBenito • 18 years ago

4483ee8

add finger and bluetooth

Chris PeBenito • 18 years ago

d4dca58

partial mailman merge

Chris PeBenito • 18 years ago

9d3e339

fix files_exec_usr_src_files

Chris PeBenito • 18 years ago

99505c1

rename context_template() to gen_context()

Chris PeBenito • 18 years ago

e02c61c

more apache work

Chris PeBenito • 18 years ago

6e99a6c

add ftp

Chris PeBenito • 18 years ago

fc6524d

fix comment

Chris PeBenito • 18 years ago

5bc9f30

add interfaces used in old anonymous_domain()

Chris PeBenito • 18 years ago

f4d7fdc

add most of apache

Chris PeBenito • 18 years ago

a996bdf

more pieces of ftp

Chris PeBenito • 18 years ago

a5ec7cb

start adding secure_file_type implementation

Chris PeBenito • 18 years ago

a2868f6

add winbind

Chris PeBenito • 18 years ago

79cde31

add in a couple missing rules

Chris PeBenito • 18 years ago

6942484

add in a few parts of ftp

Chris PeBenito • 18 years ago

246a604

add dmidecode

Chris PeBenito • 18 years ago

20e306e

add disable_trans support

Chris PeBenito • 18 years ago

b03f960

a few conditional cleanups

Chris PeBenito • 18 years ago

1f91e1b

add mls privileges

Chris PeBenito • 18 years ago

f0574fa

comment fix

Chris PeBenito • 18 years ago

6d788d8

add anaconda

Chris PeBenito • 18 years ago

9edc289

rework nis_use_ypbind since optionals dont work in conditionals

Chris PeBenito • 18 years ago

b9ae3aa

add radvd, plus a few cleanups from sediff

Chris PeBenito • 18 years ago

fa67570

add kudzu

Chris PeBenito • 18 years ago

8428592

remove classes from gen_requires, and disable net_raw for now

Chris PeBenito • 18 years ago

0058418

fixes from sediff

Chris PeBenito • 18 years ago

681c9a0

add uucp

Chris PeBenito • 18 years ago

f7ba4a8

testing fixes

Chris PeBenito • 18 years ago

b53f93a

fix for targeted

Chris PeBenito • 18 years ago

08c5c97

loadable module compile fixes

Chris PeBenito • 18 years ago

25c6746

targeted and redhat cleanups

Chris PeBenito • 18 years ago

142e9f4

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 18 years ago

0e15cdf

todo cleanup

Chris PeBenito • 18 years ago

3774e4e

add cvs

Chris PeBenito • 18 years ago

93070cb

add cpucontrol

Chris PeBenito • 18 years ago

9210553

add rlogin and telnet

Chris PeBenito • 18 years ago

4fd5201

add stunnel

Chris PeBenito • 18 years ago

200f453

final updates from nsa cvs

Chris PeBenito • 18 years ago

a1fcff3

a few module compile fixes

Chris PeBenito • 18 years ago

41c4800

more upstream merging

Chris PeBenito • 18 years ago

cf6a7d8

more upstream merging

Chris PeBenito • 18 years ago

cff75c9

add tftp

Chris PeBenito • 18 years ago

40adb57

add snmp

Chris PeBenito • 18 years ago

ccc5978

more merging from nsa cvs

Chris PeBenito • 18 years ago

a082484

more updates

Chris PeBenito • 18 years ago

98a8ead

more merging from nsa cvs

Chris PeBenito • 18 years ago

605ba28

cleanup

Chris PeBenito • 18 years ago

5a2649c

add samba

Chris PeBenito • 18 years ago

84c9223

require fix

Chris PeBenito • 18 years ago

4479b31

fixes for module compiling

Chris PeBenito • 18 years ago

71fe0fa

more merging of NSA CVS policy

Chris PeBenito • 18 years ago

0907bda

begin merging in upstream NSA CVS changes

Chris PeBenito • 18 years ago

2705f9a

fixes to make base module compilable

Chris PeBenito • 18 years ago

712566e

add first part of changes to make base module compilable

Chris PeBenito • 18 years ago

2e863f8

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 18 years ago

0fdf3ef

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 18 years ago

9ff3003

add portmap

Chris PeBenito • 18 years ago

eb3cb68

add ktalk

Chris PeBenito • 18 years ago

d17b4d2

add missing rules of other domains using inn

Chris PeBenito • 18 years ago

9b06402

misc fixes

Chris PeBenito • 18 years ago

763a5e3

add inn

Chris PeBenito • 18 years ago

8d93523

misc fixes

Chris PeBenito • 18 years ago

603f90a

add ntp

Chris PeBenito • 18 years ago

b11a75a

typo

Chris PeBenito • 18 years ago

ce1b44a

add dictd

Chris PeBenito • 18 years ago

ac0483a

add hal

Chris PeBenito • 18 years ago

fdae8e7

move dhcpd to dhcp

Chris PeBenito • 18 years ago

f344c0f

add squid

Chris PeBenito • 18 years ago

0f707d5

add dhcpd

Chris PeBenito • 18 years ago

7c8fc35

fix bugs uncovered from sediff

Chris PeBenito • 18 years ago

9d3bdc2

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 18 years ago

c0d1566

finish remaining dbus bits

Chris PeBenito • 18 years ago

631ee4d

add dbus

Chris PeBenito • 18 years ago

0c3d170

fix typos

Chris PeBenito • 18 years ago

6af06cd

cosmetics

Chris PeBenito • 18 years ago

768283a

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 18 years ago

6e61566

fix up most of mta attribute insanity

Chris PeBenito • 18 years ago

246839f

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 18 years ago

451c1e3

make corecommands required

Chris PeBenito • 18 years ago

e5d4526

start adding in templated interfaces

Chris PeBenito • 18 years ago

2a94561

add bind

Chris PeBenito • 18 years ago

d83fdad

add privoxy

Chris PeBenito • 18 years ago

902be0a

add rsync

Chris PeBenito • 18 years ago

35ecf83

add howl

Chris PeBenito • 18 years ago

f9b11e9

moved to selinux module

Chris PeBenito • 18 years ago

f6e28ab

initial support for compiling loadable modules

Chris PeBenito • 18 years ago

fb0a3a9

add gpm

Chris PeBenito • 18 years ago

f862c35

add ldap

Chris PeBenito • 18 years ago

2961e79

cleanup

Chris PeBenito • 18 years ago

23ca91f

add rshd

Chris PeBenito • 18 years ago

545b0c9

add firstboot

Chris PeBenito • 18 years ago

57a96cb

more debian cleanup

Chris PeBenito • 18 years ago

2d803ed

fix broken xml of previous commit

Chris PeBenito • 18 years ago

4806a05

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 18 years ago

5f38a65

add loadkeys

Chris PeBenito • 18 years ago

21468a6

more comments

Chris PeBenito • 18 years ago

8843093

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 18 years ago

f0b1efa

fix some udev naming

Chris PeBenito • 18 years ago

35b4947

fix system spool file problem

Chris PeBenito • 18 years ago

aae06c1

finalize desc -> summary xml change

Chris PeBenito • 18 years ago

f7ebea0

add tcpd

Chris PeBenito • 18 years ago

4aa0dc2

add quota

Chris PeBenito • 18 years ago

052c953

add sudo

Chris PeBenito • 18 years ago

e784300

add template xml

Chris PeBenito • 18 years ago

b9d7d70

add su

Chris PeBenito • 18 years ago

9489149

add updfstab

Chris PeBenito • 18 years ago

dce68dc

fix xml tags

Chris PeBenito • 18 years ago

f5e321b

a few more ssh touchups

Chris PeBenito • 18 years ago

7057c18

add tmpreaper

Chris PeBenito • 18 years ago

ed78ea0

add acct

Chris PeBenito • 18 years ago

9a66d4e

misc cleanup

Chris PeBenito • 18 years ago

3fd8336

add mysql

Chris PeBenito • 18 years ago

42be7c2

search sbin dirs to find the pgms

Chris PeBenito • 18 years ago

046a21d

* Rename ipsec connect interface for consistency.

Chris PeBenito • 18 years ago

81343a6

fix stray line that got out of TODO

Chris PeBenito • 18 years ago

bbdbdb9

work on user transition

Chris PeBenito • 18 years ago

e5590ea

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 18 years ago

022f61c

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 18 years ago

50527cf

update from privmail

Chris PeBenito • 18 years ago

953541a

/var/lib is now a mountpoint

Chris PeBenito • 18 years ago

ea7d571

unconfined can pass all constraints

Chris PeBenito • 18 years ago

53857c8

name_connect only on tcp_sockets

Chris PeBenito • 18 years ago

ef424c1

unconfined can name_connect to all ports

Chris PeBenito • 18 years ago

9496fd5

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 18 years ago

d250634

bah typo

Chris PeBenito • 18 years ago

f82c6ac

user home dirs were missing file type in targ policy

Chris PeBenito • 18 years ago

0b28a23

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 18 years ago

1e3f610

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 18 years ago

689f6dd

should actually try compiling first :x

Chris PeBenito • 18 years ago

474f43d

missed a line

Chris PeBenito • 18 years ago

bd7e7a6

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 18 years ago

a28f6db

corenet was missing from unconfined

Chris PeBenito • 18 years ago

8c3f438

more targeted policy fixes

Chris PeBenito • 18 years ago

892266c

more fixes for targeted

Chris PeBenito • 18 years ago

ec848d2

more cleanup

Chris PeBenito • 18 years ago

2ec4c9d

fixes for targeted policy

Chris PeBenito • 18 years ago

8b0bbdd

fix assertions for framework

Chris PeBenito • 18 years ago

391edeb

more cleanup in system

Chris PeBenito • 18 years ago

a5f339f

fix to use context_template()

Chris PeBenito • 18 years ago

9f103ce

add missing context template

Chris PeBenito • 18 years ago

3b6174a

add raid (mdadm)

Chris PeBenito • 18 years ago

50aca6d

more pcmcia cleanup

Chris PeBenito • 18 years ago

d9fd8e7

add macro to expand object class sets for use in require blocks

Chris PeBenito • 18 years ago

157c694

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 18 years ago

50f6503

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 18 years ago

f136a94

add pcmcia

Chris PeBenito • 18 years ago

e0d57fb

fix up the xml

Chris PeBenito • 18 years ago

c429cb5

add ipsec

Chris PeBenito • 18 years ago

11633bb

add nscd

Chris PeBenito • 18 years ago

493d6c4

* fix chroot exec interface

Chris PeBenito • 18 years ago

df00b2e

more cleanup of current TODOs

Chris PeBenito • 18 years ago

b24f35d

fix xml

Chris PeBenito • 18 years ago

4051d15

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 18 years ago

ae9e271

another round of TODO cleanup

Chris PeBenito • 18 years ago

a42ca7e

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f8060

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa5262

support for targeted policy

Chris PeBenito • 19 years ago

c98340c

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92b

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb32544

add unconfined

Chris PeBenito • 19 years ago

9726b31

add required tags

Chris PeBenito • 19 years ago

2745476

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a9799

ul has to be in a p

Chris PeBenito • 19 years ago

65c8613

initial commit

Chris PeBenito • 19 years ago

5e1ed49

more work on current modules

Chris PeBenito • 19 years ago

fd89e19

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b7

make layer summary required

Chris PeBenito • 19 years ago

d233bfc

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd3673

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00a

change desc to summary

Chris PeBenito • 19 years ago

ceebe3b

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03f

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b383

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da5

changes to make inetd work

Chris PeBenito • 19 years ago

80436b9

initial commit

Chris PeBenito • 19 years ago

24bf11c

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a4

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003f

initial commit

Chris PeBenito • 19 years ago

73fbc77

add/update comments

Chris PeBenito • 19 years ago

62a7b02

update for new documentation method

Chris PeBenito • 19 years ago

414e415

more updates

Chris PeBenito • 19 years ago

aad5b98

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

4523996

fix

Chris PeBenito • 19 years ago

19ea99d

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e6

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892e

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca56

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478c

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96d

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895e

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d69

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a39

work on newrole policy

Chris PeBenito • 19 years ago

21871a5

initial commit

Chris PeBenito • 19 years ago

e04b8e7

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a6

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20a

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a79

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fbab

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e5

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39b

review of system interfaces

Chris PeBenito • 19 years ago

139520a

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1b

misc cleanup

Chris PeBenito • 19 years ago

0e72169

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c621

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124c

initial commit

Chris PeBenito • 19 years ago

828e03f

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6a

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc14

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a801

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd6789

fix typo

Chris PeBenito • 19 years ago

810f2b7

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd19

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed109

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928e

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9c

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea8

tunables work

Chris PeBenito • 19 years ago

34c8fab

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908be

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e70

Updates to documentation.

Karl MacMillan • 19 years ago

8700497

fix xml

Chris PeBenito • 19 years ago

d9507b1

renaming insanity

Chris PeBenito • 19 years ago

c9428d3

Devices rename.

Karl MacMillan • 19 years ago

f0c985c

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc5

reorder

Chris PeBenito • 19 years ago

a154cd4

kernel.if renaming

Chris PeBenito • 19 years ago

588ffae

more renaming and xml

Chris PeBenito • 19 years ago

eda201e

rename

Chris PeBenito • 19 years ago

eca5b2d

aliases

Chris PeBenito • 19 years ago

cc41a97

fix layer in module tag

Chris PeBenito • 19 years ago

7591e83

rename

Chris PeBenito • 19 years ago

c6ebefd

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b274

aliases

Chris PeBenito • 19 years ago

dc67f78

aliases

Chris PeBenito • 19 years ago

0a10b1f

renaming and xml

Chris PeBenito • 19 years ago

fe040c9

aliases

Chris PeBenito • 19 years ago

dd82294

aliases

Chris PeBenito • 19 years ago

80048ca

genhomedircon entries

Chris PeBenito • 19 years ago

5d31560

initial commit

Chris PeBenito • 19 years ago

5552ed8

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab3

aliasing

Chris PeBenito • 19 years ago

7edd02d

initial commit

Chris PeBenito • 19 years ago

b29d23f

add aliases

Chris PeBenito • 19 years ago

c2c00be

renaming

Chris PeBenito • 19 years ago

9f72a26

interface renaming

Chris PeBenito • 19 years ago

0c5a288

interface renaming

Chris PeBenito • 19 years ago

1694dee

comment fix

Chris PeBenito • 19 years ago

066d463

add can_exec

Chris PeBenito • 19 years ago

a719723

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c441

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609f

add xml

Chris PeBenito • 19 years ago

3865d6b

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc7

initial commit

Chris PeBenito • 19 years ago

02b584a

initial commit

Chris PeBenito • 19 years ago

43bc390

fix broken macros

Chris PeBenito • 19 years ago

2d68932

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8a

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a3

move to logging

Chris PeBenito • 19 years ago

ef5e55c

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd2

add some indentation

Chris PeBenito • 19 years ago

4196997

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d115660

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa52

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4efd

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915d

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db90

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa40608

fix module name in xml

Chris PeBenito • 19 years ago

f267dfb

fix xml

Chris PeBenito • 19 years ago

e32d52b

last fixes for cab

Chris PeBenito • 19 years ago

1293184

more cab work

Chris PeBenito • 19 years ago

d115b24

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857ea

initial commit

Chris PeBenito • 19 years ago

b8fca44

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed9

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d1

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42bd

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53ac

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0c

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f8

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0af

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd31631

fixes from cab

Chris PeBenito • 19 years ago

d490eb6

initial commit

Chris PeBenito • 19 years ago

c220381

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ede

initial commit

Chris PeBenito • 19 years ago

10abae7

cleanup

Chris PeBenito • 19 years ago

cbeef67

cleanup

Chris PeBenito • 19 years ago

3b3bf87

initial commit

Chris PeBenito • 19 years ago

6f3dab2

initial commit

Chris PeBenito • 19 years ago

7d7a36a

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc6

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3e

another cleanup pass

Chris PeBenito • 19 years ago

dc771ff

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f10

initial commit

Chris PeBenito • 19 years ago

992aba5

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd0

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440fb

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e269

move in stuff from rpm

Chris PeBenito • 19 years ago

3925517

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a9613

add missing xml

Chris PeBenito • 19 years ago

162a57e

add tmpfsfile support

Chris PeBenito • 19 years ago

46410fd

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a5

make transition on shell work

Chris PeBenito • 19 years ago

3000a31

add transitions

Chris PeBenito • 19 years ago

c430976

add ldconfig

Chris PeBenito • 19 years ago

48e0dbd

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d3

add mls port support

Chris PeBenito • 19 years ago

0d0d2ba

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa0

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0b

add context template to support mls

Chris PeBenito • 19 years ago

bee546b

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e0

add a xml comment

Chris PeBenito • 19 years ago

490639c

add xml

Chris PeBenito • 19 years ago

2e77b29

fix xml

Chris PeBenito • 19 years ago

494e988

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5b

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

1786071

add source policy interfaces

Chris PeBenito • 19 years ago

ef37340

add renice all domains

Chris PeBenito • 19 years ago

5817e3a

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0a

add admin template

Chris PeBenito • 19 years ago

76bff31

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2e

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf9

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0d

initial commit

Chris PeBenito • 19 years ago

650e75c

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b8

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a22

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff31386

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae1

pile of updates

Chris PeBenito • 19 years ago

7bba9d3

initial commit

Chris PeBenito • 19 years ago

1bde832

additions for cron and mta

Chris PeBenito • 19 years ago

075c4fd

reorg and a fix

Chris PeBenito • 19 years ago

fd9deeb

add crontab

Chris PeBenito • 19 years ago

d18e3d7

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee7

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9c

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24ae

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af28

initial commit

Chris PeBenito • 19 years ago

23caa6d

updates needed for cron

Chris PeBenito • 19 years ago

24280a5

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805f

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186e

reorder for more consistency

Chris PeBenito • 19 years ago

1832271

oops

Chris PeBenito • 19 years ago

dec1686

reorder for more consistency

Chris PeBenito • 19 years ago

6b67401

initial commit

Chris PeBenito • 19 years ago

b3416a3

leftover from netutils

Chris PeBenito • 19 years ago

eeb2558

initial commit

Chris PeBenito • 19 years ago

f8ec0ad

leftover from modutils

Chris PeBenito • 19 years ago

63a310c

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b555

initial commit

Chris PeBenito • 19 years ago

0f3be6d

use ptys

Chris PeBenito • 19 years ago

6f50b57

fix hotplug optional

Chris PeBenito • 19 years ago

2812bfa

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb4

add printer_device_t

Chris PeBenito • 19 years ago

46be1f3

more authlogin handling

Chris PeBenito • 19 years ago

13e94c0

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c16219

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb28738

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e825

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20dd

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc8

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a3

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b0000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25af

cleanup

Chris PeBenito • 19 years ago

c5b5a74

add sulogin

Chris PeBenito • 19 years ago

5d7e8ba

initial commit

Chris PeBenito • 19 years ago

15e3d8e

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e02803

initial commit

Chris PeBenito • 19 years ago

b2b38c7

add read fonts

Chris PeBenito • 19 years ago

ec81ecb

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b6

initial commit

Chris PeBenito • 19 years ago

2274f9a

add legacy read locale

Chris PeBenito • 19 years ago

0fef98c

cleanup

Chris PeBenito • 19 years ago

ebf7600

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a62

initial commit

Chris PeBenito • 19 years ago

4fc9153

add in system_domain

Chris PeBenito • 19 years ago

d0eddb6

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1af

fix depends

Chris PeBenito • 19 years ago

23af43b

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c8

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e5

add usermanage

Chris PeBenito • 19 years ago

849380b

more conversion

Chris PeBenito • 19 years ago

1e5c2a4

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202fe

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d0

a few more copied over

Chris PeBenito • 19 years ago

0bc32e0

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad32

add in pam console

Chris PeBenito • 19 years ago

75a10ba

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e0625

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb4

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e32

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c30

updates

Chris PeBenito • 19 years ago

3a9aef9

initial commit

Chris PeBenito • 19 years ago

6b93833

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab1

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f82

add ignore read system state

Chris PeBenito • 19 years ago

67484fc

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee6

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c2

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e6

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6abe

handful of changes

Chris PeBenito • 19 years ago

ba7740d

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c5

add in missing policy_module line

Chris PeBenito • 19 years ago

1b90996

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83dba

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f1

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc37

fix privfd

Chris PeBenito • 19 years ago

e9a6fcb

doh

Chris PeBenito • 19 years ago

4472f3e

add in missing devices

Chris PeBenito • 19 years ago

7009881

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cdc

initial commit

Chris PeBenito • 19 years ago

a7ed44d

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d8246

initial local login commit

Chris PeBenito • 19 years ago

07efe96

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772e

minor fixes

Chris PeBenito • 19 years ago

f9cfa19

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b586061

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

3009816

add console setattr if

Chris PeBenito • 19 years ago

55a46da

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2ee

reorganize the policy

Chris PeBenito • 19 years ago

4600e08

initial commit

Chris PeBenito • 19 years ago

dfb86ad

initial commit

Chris PeBenito • 19 years ago

b5ab18b

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f4564

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a9

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd3599

add console dontaudit

Chris PeBenito • 19 years ago

8119850

initial commit

Chris PeBenito • 19 years ago

3016a9f

add search all dirs

Chris PeBenito • 19 years ago

f9438fd

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a64

add legacy lib use

Chris PeBenito • 19 years ago

8beec89

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373d

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc5

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f56

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab6

add missing transition dontaudits

Chris PeBenito • 19 years ago

b303042

initial commit

Chris PeBenito • 19 years ago

549180e

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf7

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3c

reorg

Chris PeBenito • 19 years ago

343a231

fix te trans error

Chris PeBenito • 19 years ago

22e1131

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da10

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0dd

complete corenetwork

Chris PeBenito • 19 years ago

0e730cc

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37c

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e81

uncomment test file

Chris PeBenito • 19 years ago

32b5029

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a95221

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e3

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80e

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78f

more comments

Chris PeBenito • 19 years ago

bd76460

add copyright statement

Chris PeBenito • 19 years ago

e181fe0

initial commit

Chris PeBenito • 19 years ago

0154356

initial commit

Chris PeBenito • 19 years ago

879b00f

initial commit

Chris PeBenito • 19 years ago

67e2ff4

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d2

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890ef

add all types for this module

Chris PeBenito • 19 years ago

3ba13bb

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1ab

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c77177

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e50

initial commit

Chris PeBenito • 19 years ago

b470e38

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f057824

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb8

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a2

kernel can load modules

Chris PeBenito • 19 years ago

5496553

hold off on improving

Chris PeBenito • 19 years ago

7f89c7e

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d0

move assert.te here

Chris PeBenito • 19 years ago

57d2365

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d78128

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf79

initial commit

Chris PeBenito • 19 years ago

b4cd153

psss / rpms / selinux-policy

History refpolicy/policy/modules

psss / rpms / selinux-policy

Source Code

History refpolicy/policy/modules