|
Chris PeBenito |
a19e34 |
- Doc tool will explicitly say a module does not have interfaces
|
|
Chris PeBenito |
a19e34 |
or templates on the module page.
|
|
Chris PeBenito |
6e6156 |
- Added policies:
|
|
Chris PeBenito |
6e6156 |
comsat
|
|
Chris PeBenito |
0c3d17 |
dbus
|
|
Chris PeBenito |
a19e34 |
|
|
Chris PeBenito |
37aa3f |
* Fri Aug 26 2005 Chris PeBenito <selinux@tresys.com> - 20050826
|
|
Chris PeBenito |
e28aa6 |
- Add Makefile support for building loadable modules.
|
|
Chris PeBenito |
e28aa6 |
- Add genclassperms.py tool to add require blocks
|
|
Chris PeBenito |
e28aa6 |
for loadable modules.
|
|
Chris PeBenito |
e28aa6 |
- Change sedoctool to make required modules part of base
|
|
Chris PeBenito |
e28aa6 |
by default, otherwise make as modules, in modules.conf.
|
|
Chris PeBenito |
e28aa6 |
- Fix segenxml to handle modules with no interfaces.
|
|
Chris PeBenito |
e28aa6 |
- Rename ipsec connect interface for consistency.
|
|
Chris PeBenito |
e28aa6 |
- Add missing parts of unix stream socket connect interface
|
|
Chris PeBenito |
e28aa6 |
of ipsec.
|
|
Chris PeBenito |
e28aa6 |
- Rename inetd connect interface for consistency.
|
|
Chris PeBenito |
e28aa6 |
- Rename interface for purging contents of tmp, for clarity,
|
|
Chris PeBenito |
e28aa6 |
since it allows deletion of classes other than file.
|
|
Chris PeBenito |
e28aa6 |
- Misc. cleanups.
|
|
Chris PeBenito |
e28aa6 |
- Added policies:
|
|
Chris PeBenito |
e28aa6 |
acct
|
|
Chris PeBenito |
e28aa6 |
bind
|
|
Chris PeBenito |
e28aa6 |
firstboot
|
|
Chris PeBenito |
e28aa6 |
gpm
|
|
Chris PeBenito |
e28aa6 |
howl
|
|
Chris PeBenito |
e28aa6 |
ldap
|
|
Chris PeBenito |
e28aa6 |
loadkeys
|
|
Chris PeBenito |
e28aa6 |
mysql
|
|
Chris PeBenito |
e28aa6 |
privoxy
|
|
Chris PeBenito |
e28aa6 |
quota
|
|
Chris PeBenito |
e28aa6 |
rshd
|
|
Chris PeBenito |
e28aa6 |
rsync
|
|
Chris PeBenito |
e28aa6 |
su
|
|
Chris PeBenito |
e28aa6 |
sudo
|
|
Chris PeBenito |
e28aa6 |
tcpd
|
|
Chris PeBenito |
e28aa6 |
tmpreaper
|
|
Chris PeBenito |
e28aa6 |
updfstab
|
|
Chris PeBenito |
81343a |
|
|
Chris PeBenito |
e28aa6 |
* Tue Aug 2 2005 Chris PeBenito <selinux@tresys.com> - 20050802
|
|
Chris PeBenito |
e28aa6 |
- Fix comparison bug in fc_sort.
|
|
Chris PeBenito |
e28aa6 |
- Fix handling of ordered and unordered HTML lists.
|
|
Chris PeBenito |
e28aa6 |
- Corenetwork now supports multiple network interfaces having the
|
|
Chris PeBenito |
e28aa6 |
same type.
|
|
Chris PeBenito |
e28aa6 |
- Doc tool now creates pages for global Booleans and global tunables.
|
|
Chris PeBenito |
e28aa6 |
- Doc tool now links directly to the interface/template in the
|
|
Chris PeBenito |
e28aa6 |
module page when it is selected in the interface/template index.
|
|
Chris PeBenito |
e28aa6 |
- Added support for layer summaries.
|
|
Chris PeBenito |
e28aa6 |
- Added policies:
|
|
Chris PeBenito |
e28aa6 |
ipsec
|
|
Chris PeBenito |
e28aa6 |
nscd
|
|
Chris PeBenito |
e28aa6 |
pcmcia
|
|
Chris PeBenito |
e28aa6 |
raid
|
|
Chris PeBenito |
acb668 |
|
|
Chris PeBenito |
e28aa6 |
* Thu Jul 7 2005 Chris PeBenito <selinux@tresys.com> - 20050707
|
|
Chris PeBenito |
e28aa6 |
- Changed xml to have modules encapsulated by layer tags, rather
|
|
Chris PeBenito |
e28aa6 |
than putting layer="foo" in the module tags. Also in the future
|
|
Chris PeBenito |
e28aa6 |
we can put a summary and description for each layer.
|
|
Chris PeBenito |
e28aa6 |
- Added tool to infer interface, module, and layer tags. This will
|
|
Chris PeBenito |
e28aa6 |
now list all interfaces, even if they are missing xml docs.
|
|
Chris PeBenito |
e28aa6 |
- Shortened xml tag names.
|
|
Chris PeBenito |
e28aa6 |
- Added macros to declare interfaces and templates.
|
|
Chris PeBenito |
e28aa6 |
- Added interface call trace.
|
|
Chris PeBenito |
e28aa6 |
- Updated all xml documentation for shorter and inferred tags.
|
|
Chris PeBenito |
e28aa6 |
- Doc tool now displays templates in the web pages.
|
|
Chris PeBenito |
e28aa6 |
- Doc tool retains the user's settings in modules.conf and
|
|
Chris PeBenito |
e28aa6 |
tunables.conf if the files already exist.
|
|
Chris PeBenito |
e28aa6 |
- Modules.conf behavior has been changed to be a list of all
|
|
Chris PeBenito |
e28aa6 |
available modules, and the user can specify if the module is
|
|
Chris PeBenito |
e28aa6 |
built as a loadable module, included in the monolithic policy,
|
|
Chris PeBenito |
e28aa6 |
or excluded.
|
|
Chris PeBenito |
e28aa6 |
- Added policies:
|
|
Chris PeBenito |
e28aa6 |
fstools (fsck, mkfs, swapon, etc. tools)
|
|
Chris PeBenito |
e28aa6 |
logrotate
|
|
Chris PeBenito |
e28aa6 |
inetd
|
|
Chris PeBenito |
e28aa6 |
kerberos
|
|
Chris PeBenito |
e28aa6 |
nis (ypbind and ypserv)
|
|
Chris PeBenito |
e28aa6 |
ssh (server, client, and agent)
|
|
Chris PeBenito |
e28aa6 |
unconfined
|
|
Chris PeBenito |
e28aa6 |
- Added infrastructure for targeted policy support, only missing
|
|
Chris PeBenito |
e28aa6 |
transition boolean support.
|
|
Chris PeBenito |
dfa83e |
|
|
Chris PeBenito |
e28aa6 |
* Wed Jun 15 2005 Chris PeBenito <selinux@tresys.com> - 20050615
|
|
Chris PeBenito |
e28aa6 |
- Initial release
|