Commits - rpms/selinux-policy - CentOS Git server

Merge upstream

Dan Walsh • 14 years ago

14ffaf

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

a55bb5

This is a role capability.

Dominick Grift • 14 years ago

9c9e4c

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

0dacd0

Requires system_r role.

Dominick Grift • 14 years ago

23ac31

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2f94f4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

2de234

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

819518

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

dcf874

Use permission sets where possible.

Dominick Grift • 14 years ago

59c034

Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Dominick Grift • 14 years ago

ba6db0

XML summary ffixes.

Dominick Grift • 14 years ago

b35d25

Search parent directory to be able to interact with target content.

Dominick Grift • 14 years ago

f92662

Allow users to ptrace and send any kind of signal to spamassassin agents.

Dominick Grift • 14 years ago

4ff4dd

This type is not required here.

Dominick Grift • 14 years ago

c5cadd

This is not a role capability.

Dominick Grift • 14 years ago

b0e9aa

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

a3d20a

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 14 years ago

9a2fd7

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 14 years ago

50e857

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 14 years ago

f416df

Redundant: domtrans_pattern includes these.

Dominick Grift • 14 years ago

a87e8f

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 14 years ago

d0b756

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 14 years ago

5ebd1a

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2d102f

Tunable, optional, if(n)def block go below.

Dominick Grift • 14 years ago

60d27b

Use stream_connect_pattern.

Dominick Grift • 14 years ago

2e2a24

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

4d71bc

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

83029f

Add missing admin_patterns to rpcbind_admin.

Dominick Grift • 14 years ago

4ec4a4

Use stream connect pattern.

Dominick Grift • 14 years ago

ac13ad

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

ad4245

Reduntant: Is already included with userdom_search_user_home_dirs.

Dominick Grift • 14 years ago

87cd6e

Access to get attributes of target pppd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

4eaffd

Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

39e118

Allow pads_admin to search parent directories to be able to interact with pads content.

Dominick Grift • 14 years ago

1215df

XML summary fix.

Dominick Grift • 14 years ago

d18313

Access to get attributes of target accountsd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

dcbbee

Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.

Dominick Grift • 14 years ago

b6d0a7

Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.

Dominick Grift • 14 years ago

eb12bc

Use the stream_connect_pattern.

Dominick Grift • 14 years ago

f386b9

Allow mpd_admin to manage mpd tmpfs content.

Dominick Grift • 14 years ago

c5e7db

Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.

Dominick Grift • 14 years ago

0ba923

Redundant: mpd_search_lib already includes files_search_var_lib.

Dominick Grift • 14 years ago

0ab415

Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.

Dominick Grift • 14 years ago

7d3493

Allow icecast_admin to ptrace and signal the icecast_t domain.

Dominick Grift • 14 years ago

aa5baa

This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.

Dominick Grift • 14 years ago

4b81a5

Permission to search proc_t directories is required to be able to read abrt state.

Dominick Grift • 14 years ago

7d36c9

Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.

Dominick Grift • 14 years ago

b36824

Replace some type statements by comma delimiters.

Dominick Grift • 14 years ago

cf152b

Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.

Dominick Grift • 14 years ago

47cf98

Type system_cronjob_var_run_t is not required here.

Dominick Grift • 14 years ago

5ecaac

rpms / selinux-policy

Commits 3003

rpms / selinux-policy

Source Code

Commits 3003