Commits - rpms/selinux-policy - CentOS Git server

Use permission sets where possible.

Dominick Grift • 14 years ago

0f7c40

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

c2b2d2

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

1b39de

This permission is already allowed by included mmap_file_perms.

Dominick Grift • 14 years ago

8725d6

Source is postdrop and not local. Moving to postdrop local policy section.

Dominick Grift • 14 years ago

11ad1d

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

a7b40a

These are not declarations move them to local policy section.

Dominick Grift • 14 years ago

f6e866

Redundant: All domains are allowed this access by default.

Dominick Grift • 14 years ago

9bd884

Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.

Dominick Grift • 14 years ago

6d1855

Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)

Dominick Grift • 14 years ago

46d410

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

a8fbd9

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

5d8259

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 14 years ago

6ed3f1

XML summary fixes.

Dominick Grift • 14 years ago

148e08

Use filetrans_pattern.

Dominick Grift • 14 years ago

3a3e7d

Use stream connect pattern.

Dominick Grift • 14 years ago

44f8aa

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

8bde5e

Make git daemon executable file an application executable file.

Dominick Grift • 14 years ago

96d3c0

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

08c4bb

These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.

Dominick Grift • 14 years ago

38039a

Move calls to external interfaces below policy that governs internal interaction.

Dominick Grift • 14 years ago

02687a

The capability IPC goes on top of the local policy.

Dominick Grift • 14 years ago

d54202

This is a duplicate declaration.

Dominick Grift • 14 years ago

b952f9

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

ef521e

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

68ac47

This is not required here.

Dominick Grift • 14 years ago

0bdd85

Youre not allowed to directly use external types.

Dominick Grift • 14 years ago

82c971

Redundant: All deamons are already allowed this access by default.

Dominick Grift • 14 years ago

59c544

Redundant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

edcc8a

Use permission sets where possible.

Dominick Grift • 14 years ago

1dfc76

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

9a0f79

Redundant: Is already permitted by included rw_chr_file_perms.

Dominick Grift • 14 years ago

9c7f2a

Use permission sets where possible.

Dominick Grift • 14 years ago

72ba80

Allow boinc projects to execute java

Miroslav Grepl • 14 years ago

b0a5fc

Merge branch 'base'

Dominick Grift • 14 years ago

fc0d3d

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

f26267

XML summary fixes.

Dominick Grift • 14 years ago

612346

Use brace extension where possible.

Dominick Grift • 14 years ago

0eef2c

Use permission sets where possible.

Dominick Grift • 14 years ago

69d143

Type zarafa_server_t is not a file type.

Dominick Grift • 14 years ago

5ce19e

This is a role capability.

Dominick Grift • 14 years ago

e13067

Redundant: Included files_search_var_lib already permits access to list generic var directories.

Dominick Grift • 14 years ago

7bc4e8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

ddbd71

Missing required type.

Dominick Grift • 14 years ago

5a98a5

Use stream connect pattern.

Dominick Grift • 14 years ago

d69618

Allow users to ptrace and send any signal to their pyzor agent.

Dominick Grift • 14 years ago

b85c14

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

6cd6ed

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2a7245

Move this to were the other is and where it should be.

Dominick Grift • 14 years ago

3507be

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2528a2

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

b46b3a

rpms / selinux-policy

Commits 3161

rpms / selinux-policy

Source Code

Commits 3161