psss / rpms / selinux-policy

Forked from rpms/selinux-policy 5 years ago
Clone
Source Code
GIT

History refpolicy

f10 f11 f12 f13 f14 f15 f16 f17 f18 f19 f20 f21 f22 f23 f24 f25 f26 f27 f28 f29 f7 f8 f9 master master-docker master_contrib private-master-atomic-policy private-master-migrate-to-var-lib-selinux requires tests
  1.   c0e4fe2c9c88942b1e3f5a5886772d26ac5eef72
  2.   refpolicy
add appconfig for mls and mcs
Chris PeBenito • 18 years ago  
c0e4fe2
add stunnel
Chris PeBenito • 18 years ago  
200f453
final updates from nsa cvs
Chris PeBenito • 18 years ago  
a1fcff3
a few module compile fixes
Chris PeBenito • 18 years ago  
41c4800
more upstream merging
Chris PeBenito • 18 years ago  
cf6a7d8
more upstream merging
Chris PeBenito • 18 years ago  
cff75c9
add tftp
Chris PeBenito • 18 years ago  
40adb57
add snmp
Chris PeBenito • 18 years ago  
ccc5978
more merging from nsa cvs
Chris PeBenito • 18 years ago  
a082484
more updates
Chris PeBenito • 18 years ago  
98a8ead
more merging from nsa cvs
Chris PeBenito • 18 years ago  
605ba28
cleanup
Chris PeBenito • 18 years ago  
5a2649c
add samba
Chris PeBenito • 18 years ago  
84c9223
require fix
Chris PeBenito • 18 years ago  
4479b31
fixes for module compiling
Chris PeBenito • 18 years ago  
71fe0fa
more merging of NSA CVS policy
Chris PeBenito • 18 years ago  
0907bda
begin merging in upstream NSA CVS changes
Chris PeBenito • 18 years ago  
2705f9a
add base mod changelog entry
Chris PeBenito • 18 years ago  
082dcd9
fixes to make base module compilable
Chris PeBenito • 18 years ago  
712566e
add first part of changes to make base module compilable
Chris PeBenito • 18 years ago  
2e863f8
fix sshd to use initrc transition while typeattribute in conditionals is still broken
Chris PeBenito • 18 years ago  
0fdf3ef
add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work
Chris PeBenito • 18 years ago  
9ff3003
add portmap
Chris PeBenito • 18 years ago  
eb3cb68
add ktalk
Chris PeBenito • 18 years ago  
d17b4d2
add missing rules of other domains using inn
Chris PeBenito • 18 years ago  
9b06402
new release
Chris PeBenito • 18 years ago  
541b7d5
misc fixes
Chris PeBenito • 18 years ago  
763a5e3
add inn
Chris PeBenito • 18 years ago  
8d93523
misc fixes
Chris PeBenito • 18 years ago  
603f90a
add ntp
Chris PeBenito • 18 years ago  
b11a75a
typo
Chris PeBenito • 18 years ago  
ce1b44a
add dictd
Chris PeBenito • 18 years ago  
ac0483a
add hal
Chris PeBenito • 18 years ago  
fdae8e7
move dhcpd to dhcp
Chris PeBenito • 18 years ago  
f344c0f
add squid
Chris PeBenito • 18 years ago  
0f707d5
add dhcpd
Chris PeBenito • 18 years ago  
7c8fc35
fix bugs uncovered from sediff
Chris PeBenito • 18 years ago  
9d3bdc2
move rhgb_domain into TODO so modules can compile as binary modules
Chris PeBenito • 18 years ago  
c0d1566
finish remaining dbus bits
Chris PeBenito • 18 years ago  
631ee4d
add dbus
Chris PeBenito • 18 years ago  
0c3d170
fix typos
Chris PeBenito • 18 years ago  
6af06cd
cosmetics
Chris PeBenito • 18 years ago  
768283a
add comsat. clean up kerberos and nscd interfaces
Chris PeBenito • 18 years ago  
6e61566
fix up most of mta attribute insanity
Chris PeBenito • 18 years ago  
246839f
send user role to per userdomain templates. update templated interfaces
Chris PeBenito • 18 years ago  
451c1e3
make corecommands required
Chris PeBenito • 18 years ago  
e5d4526
doctool display for no interfaces or templates
Chris PeBenito • 18 years ago  
a19e346
update for release
Chris PeBenito • 18 years ago  
37aa3ff
update config, switch most to module
Chris PeBenito • 18 years ago  
9439a25
start adding in templated interfaces
Chris PeBenito • 18 years ago  
2a94561
remove bad changelog date
Chris PeBenito • 18 years ago  
d4df0aa
add rpm spec skeleton
Chris PeBenito • 18 years ago  
c6299b2
fix quoting
Chris PeBenito • 18 years ago  
6d12276
reformat for use in rpm
Chris PeBenito • 18 years ago  
e28aa68
fix tunables
Chris PeBenito • 18 years ago  
3110dec
do bools until loadable modules support tunables
Chris PeBenito • 18 years ago  
82024f9
add bind
Chris PeBenito • 18 years ago  
d83fdad
add privoxy
Chris PeBenito • 18 years ago  
902be0a
add rsync
Chris PeBenito • 18 years ago  
35ecf83
add howl
Chris PeBenito • 18 years ago  
f9b11e9
move require to right position, for modular policy
Chris PeBenito • 18 years ago  
4b8c548
more comments
Chris PeBenito • 18 years ago  
a6df70c
remove comment about monolithic only supported
Chris PeBenito • 18 years ago  
8b75b07
complete infrastructure support for building modules
Chris PeBenito • 18 years ago  
c04f2ab
mark userpace object classes
Chris PeBenito • 18 years ago  
db93d70
moved to selinux module
Chris PeBenito • 18 years ago  
f6e28ab
for base module, only enable modules actually in it
Chris PeBenito • 18 years ago  
28f0329
initial support for compiling loadable modules
Chris PeBenito • 18 years ago  
fb0a3a9
add gpm
Chris PeBenito • 18 years ago  
f862c35
add ldap
Chris PeBenito • 18 years ago  
2961e79
cleanup
Chris PeBenito • 18 years ago  
23ca91f
add rshd
Chris PeBenito • 18 years ago  
545b0c9
add firstboot
Chris PeBenito • 18 years ago  
886907c
add firstboot
Chris PeBenito • 18 years ago  
57a96cb
more debian cleanup
Chris PeBenito • 18 years ago  
2d803ed
make default for optional modules to module instead of base
Chris PeBenito • 18 years ago  
a573790
fix broken xml of previous commit
Chris PeBenito • 18 years ago  
4806a05
try to knock out more of the distro_debian bootloader stuff
Chris PeBenito • 18 years ago  
5f38a65
add loadkeys
Chris PeBenito • 18 years ago  
21468a6
more comments
Chris PeBenito • 18 years ago  
8843093
all dev nodes assoc to tmpfs, since most everyone is moving to udev
Chris PeBenito • 18 years ago  
f0b1efa
quiet file context validation
Chris PeBenito • 18 years ago  
c5a6dcb
fix some udev naming
Chris PeBenito • 18 years ago  
35b4947
fix system spool file problem
Chris PeBenito • 18 years ago  
aae06c1
remove secdesc since desc is sufficient
Chris PeBenito • 18 years ago  
d06f3c3
finalize desc -> summary xml change
Chris PeBenito • 18 years ago  
f7ebea0
add tcpd
Chris PeBenito • 18 years ago  
4aa0dc2
fix no interface module handling in segenxml
Chris PeBenito • 18 years ago  
e694b51
add quota
Chris PeBenito • 18 years ago  
052c953
tabbing fix
Chris PeBenito • 18 years ago  
5a3895a
add sudo
Chris PeBenito • 18 years ago  
e784300
add template xml
Chris PeBenito • 18 years ago  
b9d7d70
add su
Chris PeBenito • 18 years ago  
9489149
fix gen_user comment for more clarity
Chris PeBenito • 18 years ago  
9465452
add updfstab
Chris PeBenito • 18 years ago  
dce68dc
fix xml tags
Chris PeBenito • 18 years ago  
f5e321b
a few more ssh touchups
Chris PeBenito • 18 years ago  
7057c18
add tmpreaper
Chris PeBenito • 18 years ago  
ed78ea0
add acct
Chris PeBenito • 18 years ago  
9a66d4e
misc cleanup
Chris PeBenito • 18 years ago  
3fd8336
add mysql
Chris PeBenito • 18 years ago  
42be7c2
search sbin dirs to find the pgms
Chris PeBenito • 18 years ago  
046a21d
* Rename ipsec connect interface for consistency.
Chris PeBenito • 18 years ago  
81343a6
new release
Chris PeBenito • 18 years ago  
52a902b
new release
Chris PeBenito • 18 years ago  
6db8e52
add missing
Chris PeBenito • 18 years ago  
60abb5f
fix comparison bug
Chris PeBenito • 18 years ago  
cd8fa41
move file context validation to install
Chris PeBenito • 18 years ago  
96a150d
fix stray line that got out of TODO
Chris PeBenito • 18 years ago  
bbdbdb9
work on user transition
Chris PeBenito • 18 years ago  
e5590ea
update
Chris PeBenito • 18 years ago  
c13146d
Fix handling of ordered and unordered HTML lists.
Chris PeBenito • 18 years ago  
78d30cb
add connect interface on ports to handle name_connect tcp perm
Chris PeBenito • 18 years ago  
022f61c
make network_interface able to support multiple interfaces having the same type
Chris PeBenito • 18 years ago  
50527cf
update from privmail
Chris PeBenito • 18 years ago  
953541a
add an example module config for a targeted policy
Chris PeBenito • 18 years ago  
80526cc
/var/lib is now a mountpoint
Chris PeBenito • 18 years ago  
ea7d571
unconfined can pass all constraints
Chris PeBenito • 18 years ago  
53857c8
name_connect only on tcp_sockets
Chris PeBenito • 18 years ago  
ef424c1
unconfined can name_connect to all ports
Chris PeBenito • 18 years ago  
9496fd5
reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface
Chris PeBenito • 18 years ago  
d250634
bah typo
Chris PeBenito • 18 years ago  
f82c6ac
user home dirs were missing file type in targ policy
Chris PeBenito • 18 years ago  
0b28a23
add missing dir and file perms for selinuxfs in unconfined
Chris PeBenito • 18 years ago  
1e3f610
fix typos and import some rules from NSA cvs to make targeted policy work
Chris PeBenito • 18 years ago  
689f6dd
should actually try compiling first :x
Chris PeBenito • 18 years ago  
474f43d
missed a line
Chris PeBenito • 18 years ago  
bd7e7a6
add in some rules from NSA CVS to make targeted policy work
Chris PeBenito • 18 years ago  
a28f6db
corenet was missing from unconfined
Chris PeBenito • 18 years ago  
8c3f438
more targeted policy fixes
Chris PeBenito • 18 years ago  
892266c
add new netlink socket class
Chris PeBenito • 18 years ago  
21f4773
more fixes for targeted
Chris PeBenito • 18 years ago  
ec848d2
more cleanup
Chris PeBenito • 18 years ago  
2ec4c9d
fixes for targeted policy
Chris PeBenito • 18 years ago  
8b0bbdd
fix assertions for framework
Chris PeBenito • 18 years ago  
391edeb
more cleanup in system
Chris PeBenito • 18 years ago  
a5f339f
fix to use context_template()
Chris PeBenito • 18 years ago  
9f103ce
add missing context template
Chris PeBenito • 18 years ago  
3b6174a
add raid (mdadm)
Chris PeBenito • 18 years ago  
50aca6d
more pcmcia cleanup
Chris PeBenito • 18 years ago  
d9fd8e7
add macro to expand object class sets for use in require blocks
Chris PeBenito • 18 years ago  
157c694
* break up files_getattr_all_files into correct interfaces
Chris PeBenito • 18 years ago  
50f6503
reorder in alpha order of type, for sanity purposes
Chris PeBenito • 18 years ago  
f136a94
add pcmcia
Chris PeBenito • 18 years ago  
316553a
add pcmcia
Chris PeBenito • 18 years ago  
e0d57fb
fix up the xml
Chris PeBenito • 18 years ago  
c429cb5
add ipsec
Chris PeBenito • 18 years ago  
11633bb
add nscd
Chris PeBenito • 18 years ago  
493d6c4
* fix chroot exec interface
Chris PeBenito • 18 years ago  
df00b2e
add distro tunables. expand on a few comments
Chris PeBenito • 18 years ago  
25a0c61
more cleanup of current TODOs
Chris PeBenito • 18 years ago  
b24f35d
fix comments for templates to have same number of # as interfaces
Chris PeBenito • 18 years ago  
20a2275
fix xml
Chris PeBenito • 18 years ago  
4051d15
fix more TODOs. fix selinux.te to selinuxutil.te in optionals
Chris PeBenito • 18 years ago  
ae9e271
improve display of tunables and booleans
Chris PeBenito • 18 years ago  
34bbe50
add tun and bool descriptions
Chris PeBenito • 18 years ago  
4d7511b
initial global booleans and tunables support. also fix index
Chris PeBenito • 18 years ago  
249d461
another round of TODO cleanup
Chris PeBenito • 18 years ago  
a42ca7e
silly formatting fix
Chris PeBenito • 18 years ago  
4d0d415
support for global booleans
Chris PeBenito • 18 years ago  
c11958b
* Added support for layer summaries.
Chris PeBenito • 18 years ago  
acb668e
tag for 20050707 release
Chris PeBenito • 18 years ago  
58c7777
add changelog
Chris PeBenito • 18 years ago  
dfa83e9
implement direct_sysadm_daemon
Chris PeBenito • 18 years ago  
e5f8060
missing rules uncovered by sediff
Chris PeBenito • 18 years ago  
1aa5262
support for targeted policy
Chris PeBenito • 19 years ago  
c98340c
put back to strict. will have separate strict and targeted appconfig
Chris PeBenito • 19 years ago  
83ce670
validate file contexts
Chris PeBenito • 19 years ago  
14b25bc
ksu moves to su
Chris PeBenito • 19 years ago  
ed1a92b
add missing ssh file contexts
Chris PeBenito • 19 years ago  
bb32544
quiet the awk if modules.conf doesnt exist
Chris PeBenito • 19 years ago  
a3fdceb
- Removed OUTPUT_VERSION as default.
Karl MacMillan • 19 years ago  
ebb884d
update appconfig for unconfined login
Chris PeBenito • 19 years ago  
e17cb83
add unconfined
Chris PeBenito • 19 years ago  
9726b31
fix quoting problem
Chris PeBenito • 19 years ago  
e8f0055
fix for new new modules.conf behavior
Chris PeBenito • 19 years ago  
e8b3e30
update for required tag
Chris PeBenito • 19 years ago  
f0cc1ac
add required tags
Chris PeBenito • 19 years ago  
2745476
add tag for required modules
Chris PeBenito • 19 years ago  
d78fdee
convert can_kerberos()
Chris PeBenito • 19 years ago  
a7a9799
ul has to be in a p
Chris PeBenito • 19 years ago  
65c8613
initial commit
Chris PeBenito • 19 years ago  
5e1ed49
more work on current modules
Chris PeBenito • 19 years ago  
fd89e19
clean up more todos
Chris PeBenito • 19 years ago  
ebdc3b7
dont show interface/template hotlinks if the module doesnt have one of them.
Chris PeBenito • 19 years ago  
e8d8faa
make layer summary required
Chris PeBenito • 19 years ago  
d233bfc
change messages for missing docs
Chris PeBenito • 19 years ago  
00172fb
make interfaces or templates section not shown if empty
Chris PeBenito • 19 years ago  
06c9680
another round of renaming, for consistency
Chris PeBenito • 19 years ago  
8fd3673
link fix
Chris PeBenito • 19 years ago  
743b651
add logrotate, more low-hanging fruit
Chris PeBenito • 19 years ago  
96ce00a
add templates
Chris PeBenito • 19 years ago  
effd58c
change desc to summary
Chris PeBenito • 19 years ago  
ceebe3b
add comments and error handling
Chris PeBenito • 19 years ago  
896badc
preserve tunable values if tunables.conf exists
Chris PeBenito • 19 years ago  
2d56fdc
add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type
Chris PeBenito • 19 years ago  
cbca03f
more low hanging fruit cleanup
Chris PeBenito • 19 years ago  
783b383
better handling of whitespace
Chris PeBenito • 19 years ago  
cedae2e
change modules.conf behavior to be in line with behavior which will be used in the future for base module
Chris PeBenito • 19 years ago  
19db6ba
change modules.conf handling
Chris PeBenito • 19 years ago  
a4c639d
add fstools, and more cleanup
Chris PeBenito • 19 years ago  
58c3da5
changes to make inetd work
Chris PeBenito • 19 years ago  
80436b9
initial commit
Chris PeBenito • 19 years ago  
24bf11c
autofs_t and ypbind cleanup
Chris PeBenito • 19 years ago  
ab940a4
xml updates and nis stuff
Chris PeBenito • 19 years ago  
e88003f
better dummy xml entries
Chris PeBenito • 19 years ago  
f8838e6
initial commit
Chris PeBenito • 19 years ago  
73fbc77
add/update comments
Chris PeBenito • 19 years ago  
62a7b02
add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd
Chris PeBenito • 19 years ago  
e81f022
update for new documentation method
Chris PeBenito • 19 years ago  
414e415
more updates
Chris PeBenito • 19 years ago  
aad5b98
a couple output fixes
Chris PeBenito • 19 years ago  
c3a0754
update to new commenting style
Chris PeBenito • 19 years ago  
9916c69
move ssh tunables into global_tunables
Chris PeBenito • 19 years ago  
4523996
initial commit of segenxml. add support in Makefile
Chris PeBenito • 19 years ago  
95db422
fix
Chris PeBenito • 19 years ago  
19ea99d
fix for shortened tags
Chris PeBenito • 19 years ago  
7c2b84e
shorten some xml tags
Chris PeBenito • 19 years ago  
261e0e6
convert a couple network macros
Chris PeBenito • 19 years ago  
d3b892e
more setcurrent stuff
Chris PeBenito • 19 years ago  
007ca56
fixes pointed out by steve, plus fixes revealed by the added assertions
Chris PeBenito • 19 years ago  
2a3478c
more work on ssh, plus import ssh-agent
Chris PeBenito • 19 years ago  
9ccd96d
move all interfaces over to the interface macro. add traceback debugging info
Chris PeBenito • 19 years ago  
199895e
remove remaining _depend macros to prep for switchover to interface declaration macro
Chris PeBenito • 19 years ago  
cbc9d69
initial commit of ssh.
Chris PeBenito • 19 years ago  
0404a39
work on newrole policy
Chris PeBenito • 19 years ago  
21871a5
change doctool to bring in line with the xml tag change (layers encapsulate
Chris PeBenito • 19 years ago  
7fb9c1c
initial commit
Chris PeBenito • 19 years ago  
e04b8e7
XML: encapsulate modules in layers, rather then layer being an attribute of
Chris PeBenito • 19 years ago  
57869a6
more work to clean up and complete current modules
Chris PeBenito • 19 years ago  
7a2f20a
interface review, and remove net_raw from raw node sends. only give
Chris PeBenito • 19 years ago  
2ba9a79
interface review, and remove net_raw from raw node sends. only give
Chris PeBenito • 19 years ago  
bc1fbab
add rw_term_perms
Chris PeBenito • 19 years ago  
c9b7f1a
services interfaces review
Chris PeBenito • 19 years ago  
5e6f9e5
review of admin interfaces
Chris PeBenito • 19 years ago  
7f2e39b
review of system interfaces
Chris PeBenito • 19 years ago  
139520a
eliminate _depend macros
Chris PeBenito • 19 years ago  
a7c3a1b
misc cleanup
Chris PeBenito • 19 years ago  
0e72169
reorder gpg tunable for alpha sorting
Chris PeBenito • 19 years ago  
562cc2b
add a couple more nfs and cifs interfaces, to cover most of the
Chris PeBenito • 19 years ago  
d35c621
eliminate _depend macros
Chris PeBenito • 19 years ago  
77c124c
have can_exec add a require block
Chris PeBenito • 19 years ago  
8c2f3ac
fix
Chris PeBenito • 19 years ago  
4ce9bdf
initialize description to None so missing descriptions dont show wrong data
Chris PeBenito • 19 years ago  
815ff39
add comments for clean and bare
Chris PeBenito • 19 years ago  
102a59b
for use until we have a full README
Chris PeBenito • 19 years ago  
337e4af
add install-src target
Chris PeBenito • 19 years ago  
c592e52
initial commit
Chris PeBenito • 19 years ago  
f08f5a0
add CFLAGS, and drop -C from install since it doesn't exist in all distros,
Chris PeBenito • 19 years ago  
c7b41e9
put user line in col 1, since genhomedircon breaks otherwise
Chris PeBenito • 19 years ago  
8eaa723
initial commit
Chris PeBenito • 19 years ago  
828e03f
finish renaming system/selinux to system/selinuxutil
Chris PeBenito • 19 years ago  
5e0da6a
move security_t to selinux module
Chris PeBenito • 19 years ago  
ff7bc14
move selinux to selinuxutil
Chris PeBenito • 19 years ago  
be4a801
move constraints interfaces to domain module. move sysfs and usbfs to
Chris PeBenito • 19 years ago  
8bd6789
when a generated file is already generated, it shows up in the generated_*
Chris PeBenito • 19 years ago  
8ae194f
fix typo
Chris PeBenito • 19 years ago  
810f2b7
fix up appconfig, and generate $(installdir)/booleans
Chris PeBenito • 19 years ago  
1beba1c
stray renames in distro_redhat
Chris PeBenito • 19 years ago  
b57dd19
fix makefile to only rebuild modules.conf and tunables.conf explicitly
Chris PeBenito • 19 years ago  
d2d6c8c
initial commit
Chris PeBenito • 19 years ago  
e75f786
convert relevant conditionals into tunable_policy
Chris PeBenito • 19 years ago  
3eed109
start making genhomedircon work
Chris PeBenito • 19 years ago  
92e928e
rename requires_block_template to gen_require
Chris PeBenito • 19 years ago  
c24ac9c
rename requires_block_tempalte to gen_require
Chris PeBenito • 19 years ago  
fa7bea8
tunables work
Chris PeBenito • 19 years ago  
34c8fab
a few missed renames, and start fixing up tunables
Chris PeBenito • 19 years ago  
31908be
fix
Chris PeBenito • 19 years ago  
94670f2
make summary and description optional in interfaces until we can clean it up
Chris PeBenito • 19 years ago  
eec6739
rename setattr removable_device_t
Chris PeBenito • 19 years ago  
5a45e70
Updates to documentation.
Karl MacMillan • 19 years ago  
8700497
add "this is a generated file!" comment to top of corenetwork.{te,if}
Chris PeBenito • 19 years ago  
61bbe53
ul end tag fix, and css tweak
Chris PeBenito • 19 years ago  
3c6d78b
update from method
Chris PeBenito • 19 years ago  
fae6ff9
fix xml
Chris PeBenito • 19 years ago  
d9507b1
renaming insanity
Chris PeBenito • 19 years ago  
c9428d3
overwrite the generated .te file instead of append
Chris PeBenito • 19 years ago  
b2bf0b5
Devices rename.
Karl MacMillan • 19 years ago  
f0c985c
move policy.xml to doc, so it doesnt get deleted on a make clean
Chris PeBenito • 19 years ago  
12b559a
make module description optional and interface summary optional until
Chris PeBenito • 19 years ago  
bec1100
html tag updates
Chris PeBenito • 19 years ago  
e214f62
Added missing interface.
Karl MacMillan • 19 years ago  
bef4f00
more updates from method
Chris PeBenito • 19 years ago  
d46f023
renaming insanity
Chris PeBenito • 19 years ago  
0fd9dc5
fix can_exec
Chris PeBenito • 19 years ago  
2404082
policy.xml is now in tmp/
Chris PeBenito • 19 years ago  
e1db6e9
make macro work
Chris PeBenito • 19 years ago  
cab7c00
add can_exec
Chris PeBenito • 19 years ago  
e3fd778
fix
Chris PeBenito • 19 years ago  
1b8d67d
Templates for menu ordering change.
Karl MacMillan • 19 years ago  
c75e65a
reorder
Chris PeBenito • 19 years ago  
a154cd4
Fixed doc tool to order menus.
Karl MacMillan • 19 years ago  
d6b0f37
speed improvement
Chris PeBenito • 19 years ago  
5d94178
kernel.if renaming
Chris PeBenito • 19 years ago  
588ffae
more renaming and xml
Chris PeBenito • 19 years ago  
eda201e
rename
Chris PeBenito • 19 years ago  
eca5b2d
fix bracket display for optional parameters
Chris PeBenito • 19 years ago  
997bd99
add back html page generation
Chris PeBenito • 19 years ago  
20030ef
fixes and remove debug code
Chris PeBenito • 19 years ago  
1601fb3
more indentation for modules in the menu
Chris PeBenito • 19 years ago  
fe3bd5a
initial commit
Chris PeBenito • 19 years ago  
eb437dd
updates
Chris PeBenito • 19 years ago  
5a3299b
aliases
Chris PeBenito • 19 years ago  
cc41a97
fix layer in module tag
Chris PeBenito • 19 years ago  
7591e83
rename
Chris PeBenito • 19 years ago  
c6ebefd
for now, drop infoflow tags
Chris PeBenito • 19 years ago  
d90b274
make policy.xml depend on all if's being generated
Chris PeBenito • 19 years ago  
16e1cf4
aliases
Chris PeBenito • 19 years ago  
dc67f78
aliases
Chris PeBenito • 19 years ago  
0a10b1f
renaming and xml
Chris PeBenito • 19 years ago  
fe040c9
aliases
Chris PeBenito • 19 years ago  
dd82294
aliases
Chris PeBenito • 19 years ago  
80048ca
genhomedircon entries
Chris PeBenito • 19 years ago  
5d31560
initial commit
Chris PeBenito • 19 years ago  
5552ed8
better handling of generated files
Chris PeBenito • 19 years ago  
e12e573
make corenetwork generation explicit, rather then on-the-fly
Chris PeBenito • 19 years ago  
f2e4ab3
aliasing
Chris PeBenito • 19 years ago  
7edd02d
support_modules is finally gone, and modules.disable->modules.conf
Chris PeBenito • 19 years ago  
0350b1d
initial commit
Chris PeBenito • 19 years ago  
b29d23f
add aliases
Chris PeBenito • 19 years ago  
c2c00be
Moved and changed user_mls to gen_user.
Karl MacMillan • 19 years ago  
72bdc60
Renamed support macros for consistency.
Karl MacMillan • 19 years ago  
eb5e237
make infoflow optional
Chris PeBenito • 19 years ago  
eac7c31
overhaul
Chris PeBenito • 19 years ago  
dc5daf8
renaming
Chris PeBenito • 19 years ago  
9f72a26
interface renaming
Chris PeBenito • 19 years ago  
0c5a288
interface renaming
Chris PeBenito • 19 years ago  
1694dee
comment fix
Chris PeBenito • 19 years ago  
066d463
more fixes
Chris PeBenito • 19 years ago  
84eb353
add can_exec
Chris PeBenito • 19 years ago  
a719723
start renaming filesystem interfaces
Chris PeBenito • 19 years ago  
763c441
add interface macro
Chris PeBenito • 19 years ago  
a9ec541
fix missing _socket in class
Chris PeBenito • 19 years ago  
b46609f
add xml
Chris PeBenito • 19 years ago  
3865d6b
more tunable work
Chris PeBenito • 19 years ago  
ddea18b
initial commit
Chris PeBenito • 19 years ago  
758618b
First cut at fixing fc_sort.
Karl MacMillan • 19 years ago  
6847e82
remove java
Chris PeBenito • 19 years ago  
2224ed3
add updated dtd
Chris PeBenito • 19 years ago  
9c25fdd
start switching over to new tunable infrastructure
Chris PeBenito • 19 years ago  
254bbc7
initial tunable tool fixes
Chris PeBenito • 19 years ago  
3a80ec2
32 is space. ascii <= 32 is all whitespace
Chris PeBenito • 19 years ago  
8fb301e
initial commit
Chris PeBenito • 19 years ago  
89ec232
start adding module disable and tunable infrastructure
Chris PeBenito • 19 years ago  
0fbe15d
initial commit
Chris PeBenito • 19 years ago  
02b584a
initial commit
Chris PeBenito • 19 years ago  
43bc390
fix broken macros
Chris PeBenito • 19 years ago  
2d68932
add domain(_auto)_trans
Chris PeBenito • 19 years ago  
a1d2e8a
move audit to logging
Chris PeBenito • 19 years ago  
eb7f9a3
move to logging
Chris PeBenito • 19 years ago  
ef5e55c
fix appconfig dir
Chris PeBenito • 19 years ago  
0969335
rework policy build options
Chris PeBenito • 19 years ago  
b67488e
change over to some perm set macros. add indentation
Chris PeBenito • 19 years ago  
0c73cd2
initial commit of xml->html conversion
Chris PeBenito • 19 years ago  
36e54b8
add some indentation
Chris PeBenito • 19 years ago  
4196997
change network verb in corenetwork to sendrecv
Chris PeBenito • 19 years ago  
d115660
move fs_use and isids to respective modules
Chris PeBenito • 19 years ago  
cabfa52
start breaking up support_macros into macros dir
Chris PeBenito • 19 years ago  
ca83afe
add some comments. make install target install appconfig files
Chris PeBenito • 19 years ago  
44cda51
add missing system_crond_t transition pieces
Chris PeBenito • 19 years ago  
f5d4efd
remove extra whitespace
Chris PeBenito • 19 years ago  
98af6c7
move global.if to support_macros at top level
Chris PeBenito • 19 years ago  
de96491
add missing pieces of crond_t -> $1_crond_t transition
Chris PeBenito • 19 years ago  
6d9915d
use variable for dtd. move policy type to variant section
Chris PeBenito • 19 years ago  
0447352
do dtd verification on xml. fix current xml to be valid
Chris PeBenito • 19 years ago  
004db90
fix policy.xml to not have templates for generated interfaces
Chris PeBenito • 19 years ago  
3c62aa3
move user_u and root to users
Chris PeBenito • 19 years ago  
2fc84fd
remove copyright until licensing issues are resolved
Chris PeBenito • 19 years ago  
aa40608
better handling of appconfig dir
Chris PeBenito • 19 years ago  
2926f9c
fix module name in xml
Chris PeBenito • 19 years ago  
f267dfb
move flask dir to top level, and update them from nsa cvs. move files in
Chris PeBenito • 19 years ago  
134191b
initial commit
Chris PeBenito • 19 years ago  
7555aab
fix xml
Chris PeBenito • 19 years ago  
e32d52b
last fixes for cab
Chris PeBenito • 19 years ago  
1293184
more cab work
Chris PeBenito • 19 years ago  
d115b24
add some file_t interfaces, and console write
Chris PeBenito • 19 years ago  
3b857ea
initial commit
Chris PeBenito • 19 years ago  
b8fca44
initial commit
Chris PeBenito • 19 years ago  
b4c3f54
permission set macro changes, plus more cab related work
Chris PeBenito • 19 years ago  
4bf4ed9
fix tmpfs assoc call
Chris PeBenito • 19 years ago  
08eb9d1
many fixes from cab work
Chris PeBenito • 19 years ago  
f5c42bd
cleanup inspired by sediff
Chris PeBenito • 19 years ago  
32e53ac
rpmbuild_t is not a system domain. also mark it as most likely dead.
Chris PeBenito • 19 years ago  
16e9b0c
restructure users, and add signalling
Chris PeBenito • 19 years ago  
c6fd1f8
tmpfs associate for redhat
Chris PeBenito • 19 years ago  
07da0af
fix ordering and put in var_lib_t
Chris PeBenito • 19 years ago  
dd31631
fixes from cab
Chris PeBenito • 19 years ago  
d490eb6
initial commit
Chris PeBenito • 19 years ago  
c220381
many fixes from cab testing
Chris PeBenito • 19 years ago  
efd8ede
add in appconfig files
Chris PeBenito • 19 years ago  
c9a26b3
initial commit
Chris PeBenito • 19 years ago  
10abae7
cleanup
Chris PeBenito • 19 years ago  
cbeef67
cleanup
Chris PeBenito • 19 years ago  
3b3bf87
initial commit
Chris PeBenito • 19 years ago  
6f3dab2
initial commit
Chris PeBenito • 19 years ago  
7d7a36a
fix the object class in process transition interfaces
Chris PeBenito • 19 years ago  
e7fcdc6
more fixes
Chris PeBenito • 19 years ago  
547283e
cleanup for corenetwork interface generation
Chris PeBenito • 19 years ago  
c907b3e
a few touchups
Chris PeBenito • 19 years ago  
88c72f4
another cleanup pass
Chris PeBenito • 19 years ago  
dc771ff
instead of using macros to drop out non-macro calls during corenetwork
Chris PeBenito • 19 years ago  
6276f10
initial commit
Chris PeBenito • 19 years ago  
992aba5
stuff from rpm
Chris PeBenito • 19 years ago  
6b48fd0
add dontaudit shadow_t getattr
Chris PeBenito • 19 years ago  
57440fb
fix tmpfs associate infoflow
Chris PeBenito • 19 years ago  
957e269
move in stuff from rpm
Chris PeBenito • 19 years ago  
3925517
add ldconfig and rpm transitions
Chris PeBenito • 19 years ago  
15a9613
add missing xml
Chris PeBenito • 19 years ago  
162a57e
add tmpfsfile support
Chris PeBenito • 19 years ago  
46410fd
add signull all domains
Chris PeBenito • 19 years ago  
1c9f9a5
make transition on shell work
Chris PeBenito • 19 years ago  
3000a31
add transitions
Chris PeBenito • 19 years ago  
c430976
add ldconfig
Chris PeBenito • 19 years ago  
48e0dbd
add mls sensitivity to genfscon, initial sids and fs_use
Chris PeBenito • 19 years ago  
e32c0d3
add mls port support
Chris PeBenito • 19 years ago  
0d0d2ba
add xml comments to generated sections, and add mls support to interfaces
Chris PeBenito • 19 years ago  
085faa0
add xml comments to interfaces, convert over userdomain stuff
Chris PeBenito • 19 years ago  
daa0e0b
add context template to support mls
Chris PeBenito • 19 years ago  
bee546b
add userdomain:fd use
Chris PeBenito • 19 years ago  
26c87e0
add a xml comment
Chris PeBenito • 19 years ago  
490639c
add xml
Chris PeBenito • 19 years ago  
2e77b29
fix xml
Chris PeBenito • 19 years ago  
494e988
add xml doc generation
Chris PeBenito • 19 years ago  
6d314fd
move run_init to selinux, as it is part of policycoreutils
Chris PeBenito • 19 years ago  
8623d5b
rename some selinuxfs interfaces for more clarity
Chris PeBenito • 19 years ago  
1786071
add source policy interfaces
Chris PeBenito • 19 years ago  
ef37340
add renice all domains
Chris PeBenito • 19 years ago  
5817e3a
add get all filesystems quotas
Chris PeBenito • 19 years ago  
759ba0a
add admin template
Chris PeBenito • 19 years ago  
76bff31
add device_node:{ chr_file blk_file } getattr;
Chris PeBenito • 19 years ago  
c3dff2e
start adding admin template
Chris PeBenito • 19 years ago  
4d8ddf9
change read_shared_libraries to use_shared_libraries, since the execute
Chris PeBenito • 19 years ago  
dd14d0d
initial commit
Chris PeBenito • 19 years ago  
650e75c
start adding user domains. fix ttynode and ptynode handling, as they're
Chris PeBenito • 19 years ago  
b16c6b8
add more parts to send_mail and drop transition since its more then a transition
Chris PeBenito • 19 years ago  
c6a3a22
move make_{daemon,init,system}_domain to init to fix type_transition'ing
Chris PeBenito • 19 years ago  
ff31386
add lvm.fc, and move relevant entries to devices.fc and storage.fc
Chris PeBenito • 19 years ago  
24a7ae1
pile of updates
Chris PeBenito • 19 years ago  
7bba9d3
initial commit
Chris PeBenito • 19 years ago  
1bde832
additions for cron and mta
Chris PeBenito • 19 years ago  
075c4fd
reorg and a fix
Chris PeBenito • 19 years ago  
fd9deeb
add crontab
Chris PeBenito • 19 years ago  
d18e3d7
add iface creating private logs
Chris PeBenito • 19 years ago  
fb1aee7
add make temporary_file and daemon_runtime_file
Chris PeBenito • 19 years ago  
d25dd9c
add files_make_temporary_file and remove type attribute from
Chris PeBenito • 19 years ago  
38e24ae
fix logging_make_log_file use
Chris PeBenito • 19 years ago  
0b1af28
initial commit
Chris PeBenito • 19 years ago  
23caa6d
updates needed for cron
Chris PeBenito • 19 years ago  
24280a5
add read and search for etc_t:dir
Chris PeBenito • 19 years ago  
3ec805f
make a reasonable lib_t interface
Chris PeBenito • 19 years ago  
118186e
reorder for more consistency
Chris PeBenito • 19 years ago  
1832271
oops
Chris PeBenito • 19 years ago  
dec1686
reorder for more consistency
Chris PeBenito • 19 years ago  
6b67401
initial commit
Chris PeBenito • 19 years ago  
b3416a3
leftover from netutils
Chris PeBenito • 19 years ago  
eeb2558
initial commit
Chris PeBenito • 19 years ago  
f8ec0ad
leftover from modutils
Chris PeBenito • 19 years ago  
63a310c
reorder to fit file context style rules
Chris PeBenito • 19 years ago  
279b555
initial commit
Chris PeBenito • 19 years ago  
0f3be6d
use ptys
Chris PeBenito • 19 years ago  
6f50b57
fix hotplug optional
Chris PeBenito • 19 years ago  
2812bfa
add v4l_device_t
Chris PeBenito • 19 years ago  
35b2fb4
add printer_device_t
Chris PeBenito • 19 years ago  
46be1f3
more authlogin handling
Chris PeBenito • 19 years ago  
13e94c0
move system_chkpwd to .te rather then using template, so that the
Chris PeBenito • 19 years ago  
5c16219
priv* attribute fixes for sulogin
Chris PeBenito • 19 years ago  
cb28738
unexpand can_kerberos
Chris PeBenito • 19 years ago  
c18e825
allow all domains to use /dev/{zero,null,tty}
Chris PeBenito • 19 years ago  
a9a20dd
reorder restorecon and setfiles relabel rules for consistency
Chris PeBenito • 19 years ago  
e843cc8
clean up authentication attributes
Chris PeBenito • 19 years ago  
a1f94a3
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
96b0000
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
18f25af
cleanup
Chris PeBenito • 19 years ago  
c5b5a74
add sulogin
Chris PeBenito • 19 years ago  
5d7e8ba
initial commit
Chris PeBenito • 19 years ago  
15e3d8e
add lvm_vg interfaces and do a little cleanup
Chris PeBenito • 19 years ago  
8e02803
initial commit
Chris PeBenito • 19 years ago  
b2b38c7
add read fonts
Chris PeBenito • 19 years ago  
ec81ecb
interfaces needed for clock
Chris PeBenito • 19 years ago  
44a43b6
initial commit
Chris PeBenito • 19 years ago  
2274f9a
add legacy read locale
Chris PeBenito • 19 years ago  
0fef98c
fix per_userdomain_templates macro generation
Chris PeBenito • 19 years ago  
0634b6e
cleanup
Chris PeBenito • 19 years ago  
ebf7600
convert over to system_domain, plus a couple init cleanups
Chris PeBenito • 19 years ago  
bbd6a62
initial commit
Chris PeBenito • 19 years ago  
4fc9153
add in system_domain
Chris PeBenito • 19 years ago  
d0eddb6
move type delcarations after attribute delcarations to fix a typeattribute
Chris PeBenito • 19 years ago  
f66a1af
fix depends
Chris PeBenito • 19 years ago  
23af43b
add missing copyright and policy_module lines
Chris PeBenito • 19 years ago  
df431c8
rules picked up from sediff
Chris PeBenito • 19 years ago  
f1470e5
add usermanage
Chris PeBenito • 19 years ago  
849380b
more conversion
Chris PeBenito • 19 years ago  
1e5c2a4
clean up interfaces for new binary module optional structure
Chris PeBenito • 19 years ago  
bd202fe
stuff from sysnetwork
Chris PeBenito • 19 years ago  
f1578d0
a few more copied over
Chris PeBenito • 19 years ago  
0bc32e0
start moving in dhcpc and ifconfig
Chris PeBenito • 19 years ago  
0d7ad32
add in pam console
Chris PeBenito • 19 years ago  
75a10ba
more conversion due to new interfaces
Chris PeBenito • 19 years ago  
b2e0625
fill pam and utempter authlogin policy and fix up interfaces
Chris PeBenito • 19 years ago  
3ce6cb4
reorg run_init a little, and add a convert to a few new interfaces
Chris PeBenito • 19 years ago  
07d6e32
add newrole:fd use
Chris PeBenito • 19 years ago  
ab64c30
updates
Chris PeBenito • 19 years ago  
3a9aef9
initial commit
Chris PeBenito • 19 years ago  
6b93833
switch over to tunable_policy and optional_policy
Chris PeBenito • 19 years ago  
25baab1
fix stupid _depend define errors (s/ifdef/define/g)
Chris PeBenito • 19 years ago  
f360f82
add ignore read system state
Chris PeBenito • 19 years ago  
67484fc
add tty_device_t and devpts_t chr_file interfaces
Chris PeBenito • 19 years ago  
de2cee6
add authlogin_read_pam_runtime_data and cleanup interfaces
Chris PeBenito • 19 years ago  
dfaf6c2
add ignore read rootfs file
Chris PeBenito • 19 years ago  
9f2f9e6
add in use and ignore use init control channel interfaces
Chris PeBenito • 19 years ago  
d0b6abe
handful of changes
Chris PeBenito • 19 years ago  
ba7740d
move in rule from hotplug
Chris PeBenito • 19 years ago  
c3c58c5
add in missing policy_module line
Chris PeBenito • 19 years ago  
1b90996
domains not needed for execute interface
Chris PeBenito • 19 years ago  
fc83dba
add in transition and execute interfaces, and newrole sigchld interface
Chris PeBenito • 19 years ago  
85bd7f1
add append to /dev/null write
Chris PeBenito • 19 years ago  
5eafc37
fix privfd
Chris PeBenito • 19 years ago  
e9a6fcb
doh
Chris PeBenito • 19 years ago  
4472f3e
add in missing devices
Chris PeBenito • 19 years ago  
7009881
add a few missing ports, and ppp_device_t
Chris PeBenito • 19 years ago  
05a5cdc
initial commit
Chris PeBenito • 19 years ago  
a7ed44d
make mountpoints work, plus misc
Chris PeBenito • 19 years ago  
a2d8246
initial local login commit
Chris PeBenito • 19 years ago  
07efe96
add bulk of selinux module policy, and add required interfaces
Chris PeBenito • 19 years ago  
ee5772e
minor fixes
Chris PeBenito • 19 years ago  
f9cfa19
missed that sysctl_dev is a dir too
Chris PeBenito • 19 years ago  
b586061
convert over optional policy to optional_policy macro
Chris PeBenito • 19 years ago  
3009816
add console setattr if
Chris PeBenito • 19 years ago  
55a46da
remove entrypoint assertion
Chris PeBenito • 19 years ago  
4fbd2ee
reorganize the policy
Chris PeBenito • 19 years ago  
4600e08
initial commit
Chris PeBenito • 19 years ago  
dfb86ad
initial commit
Chris PeBenito • 19 years ago  
b5ab18b
start merging in rules from daemon domain
Chris PeBenito • 19 years ago  
55f4564
add init_t:fd use interface and initrc pty rw interface
Chris PeBenito • 19 years ago  
889c9a9
daemon domain allows noatsecure siginh rlimitinh, not dontaudit
Chris PeBenito • 19 years ago  
bcd3599
add console dontaudit
Chris PeBenito • 19 years ago  
8119850
initial commit
Chris PeBenito • 19 years ago  
3016a9f
add search all dirs
Chris PeBenito • 19 years ago  
f9438fd
move system_chkpwd to fix ordering issue with checkpolicy
Chris PeBenito • 19 years ago  
e064a64
add legacy lib use
Chris PeBenito • 19 years ago  
8beec89
add module statement macro and entrypoint executable attribute to replicate
Chris PeBenito • 19 years ago  
960373d
fix tmp_domain
Chris PeBenito • 19 years ago  
94edcc5
move modules_object_t back to bootloader
Chris PeBenito • 19 years ago  
5f75f56
add sysnetwork
Chris PeBenito • 19 years ago  
91a7ab6
add missing transition dontaudits
Chris PeBenito • 19 years ago  
b303042
initial commit
Chris PeBenito • 19 years ago  
549180e
attack with sediff, make fs:getattr interfaces consistent, create init and
Chris PeBenito • 19 years ago  
219bcf7
restructure kernel module to be consistent with other module ordering. put
Chris PeBenito • 19 years ago  
a266e3c
reorg
Chris PeBenito • 19 years ago  
343a231
fix te trans error
Chris PeBenito • 19 years ago  
22e1131
make getattr and setattr interfaces and make naming consistent
Chris PeBenito • 19 years ago  
8a0da10
clean up some filesystem assoc
Chris PeBenito • 19 years ago  
33bc0dd
complete corenetwork
Chris PeBenito • 19 years ago  
0e730cc
insmod can be run directly from kernel; fix update_modules errors
Chris PeBenito • 19 years ago  
1f7b37c
exec and transition interfaces, plus include mod object symlinks in reading modules
Chris PeBenito • 19 years ago  
9eb5e81
uncomment test file
Chris PeBenito • 19 years ago  
32b5029
add devlog_t symlink to loggers
Chris PeBenito • 19 years ago  
5a95221
logging and modutils updates
Chris PeBenito • 19 years ago  
bf9e1e3
rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()
Chris PeBenito • 19 years ago  
033c80e
more insmod work, bring in depmod and update_modules
Chris PeBenito • 19 years ago  
7c5d78f
more comments
Chris PeBenito • 19 years ago  
bd76460
remove unneeded genfs_contexts
Chris PeBenito • 19 years ago  
099c8b2
add copyright statement
Chris PeBenito • 19 years ago  
e181fe0
initial commit
Chris PeBenito • 19 years ago  
0154356
initial commit
Chris PeBenito • 19 years ago  
879b00f
initial commit
Chris PeBenito • 19 years ago  
67e2ff4
add cap sys_rawio to raw memory access interfaces
Chris PeBenito • 19 years ago  
f0872d2
add per-userdomain template, and shadow_t interfaces
Chris PeBenito • 19 years ago  
c4890ef
add all types for this module
Chris PeBenito • 19 years ago  
3ba13bb
add all types for this module, and add klogd policy
Chris PeBenito • 19 years ago  
4ddc1ab
add interface to send syslog messages
Chris PeBenito • 19 years ago  
8c77177
use interface to send syslog messages
Chris PeBenito • 19 years ago  
5050e50
initial commit
Chris PeBenito • 19 years ago  
b470e38
reorganize and add rootfs dontaudits
Chris PeBenito • 19 years ago  
f057824
add rootfs dontaudits for use in init.te
Chris PeBenito • 19 years ago  
7aebdb8
add dontaudit fs getattr
Chris PeBenito • 19 years ago  
053f6a2
bring over more targets from strict policy, and add more checking
Chris PeBenito • 19 years ago  
88d14a2
kernel can load modules
Chris PeBenito • 19 years ago  
5496553
hold off on improving
Chris PeBenito • 19 years ago  
7f89c7e
remove relabeling privilege for now
Chris PeBenito • 19 years ago  
1ea98d0
move assert.te here
Chris PeBenito • 19 years ago  
57d2365
add interface to associate to filesystems w/o xattr. allow regular files to
Chris PeBenito • 19 years ago  
5d78128
add boot_runtime_t
Chris PeBenito • 19 years ago  
70dcf79
initial commit
Chris PeBenito • 19 years ago  
b4cd153
Powered by Pagure 5.14.1
Documentation • File an Issue • About this Instance • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.